Traffic Trace Info


DumpFile: 200807041400.dump
FileSize: 1753.53MB
Id: 200807041400
StartTime: Fri Jul 4 14:00:01 2008
EndTime: Fri Jul 4 14:15:01 2008
TotalTime: 900.42 seconds
TotalCapSize: 1374.15MB CapLen: 96 bytes
# of packets: 24862059 (17139.61MB)
AvgRate: 159.66Mbps stddev:28.49M

IP flow (unique src/dst pair) Information

# of flows: 688534 (avg. 36.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.5% 1.4% 1.2% 0.9% 0.9% 0.9% 0.9% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 369249
Top 10 bandwidth usage (bytes/total in %):
4.7% 4.4% 4.1% 3.9% 3.6% 3.3% 2.7% 2.6% 2.3% 2.2%
# of IPv6 addresses: 924
Top 10 bandwidth usage (bytes/total in %):
11.5% 10.7% 9.1% 7.8% 7.4% 7.4% 7.1% 6.2% 5.8% 5.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5629191
 [   64-  127]:    5867384
 [  128-  255]:     896160
 [  256-  511]:     722320
 [  512- 1023]:     667776
 [ 1024- 2047]:   11079228


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         24862059 (100.00%)      17972186993 (100.00%)    722.88
 ip            24822150 ( 99.84%)      17965461506 ( 99.96%)    723.77
  tcp          21716758 ( 87.35%)      17080454382 ( 95.04%)    786.51
   http(s)     10055951 ( 40.45%)      13315660340 ( 74.09%)   1324.16
   http(c)      6469951 ( 26.02%)        841760455 (  4.68%)    130.10
   squid         743113 (  2.99%)        292155025 (  1.63%)    393.15
   smtp          492292 (  1.98%)        117439539 (  0.65%)    238.56
   nntp              24 (  0.00%)             1706 (  0.00%)     71.08
   ftp           468056 (  1.88%)        390712899 (  2.17%)    834.76
   pop3           27843 (  0.11%)         16170688 (  0.09%)    580.78
   imap            8596 (  0.03%)          3523728 (  0.02%)    409.93
   telnet          1408 (  0.01%)           108162 (  0.00%)     76.82
   ssh            38611 (  0.16%)          9593034 (  0.05%)    248.45
   dns             8190 (  0.03%)          1044188 (  0.01%)    127.50
   bgp              189 (  0.00%)            53459 (  0.00%)    282.85
   napster            6 (  0.00%)             1427 (  0.00%)    237.83
   realaud          171 (  0.00%)            87162 (  0.00%)    509.72
   rtsp          261583 (  1.05%)        267150697 (  1.49%)   1021.28
   icecast        28235 (  0.11%)         30835249 (  0.17%)   1092.09
   other        3112531 ( 12.52%)       1794156144 (  9.98%)    576.43
  udp           2404994 (  9.67%)        800274825 (  4.45%)    332.76
   dns          1208743 (  4.86%)        206289094 (  1.15%)    170.66
   realaud        42091 (  0.17%)         16974102 (  0.09%)    403.27
   halflif           28 (  0.00%)             4314 (  0.00%)    154.07
   starcra           59 (  0.00%)            11895 (  0.00%)    201.61
   everque          123 (  0.00%)            18067 (  0.00%)    146.89
   unreal            10 (  0.00%)             1048 (  0.00%)    104.80
   quake             11 (  0.00%)             1734 (  0.00%)    157.64
   cuseeme            8 (  0.00%)             1595 (  0.00%)    199.38
   other        1153912 (  4.64%)        576965760 (  3.21%)    500.01
  icmp           416648 (  1.68%)         36862556 (  0.21%)     88.47
  ipip              330 (  0.00%)            40968 (  0.00%)    124.15
  ipsec            3811 (  0.02%)           814824 (  0.00%)    213.81
  ip6               938 (  0.00%)           113803 (  0.00%)    121.33
  other          278671 (  1.12%)         46900148 (  0.26%)    168.30
  frag             1295 (  0.01%)          1047824 (  0.01%)    809.13
 ip6              39909 (  0.16%)          6725487 (  0.04%)    168.52
  tcp6             6827 (  0.03%)          1405050 (  0.01%)    205.81
   http(s)          108 (  0.00%)           121092 (  0.00%)   1121.22
   http(c)         1710 (  0.01%)           201553 (  0.00%)    117.87
   squid              1 (  0.00%)               74 (  0.00%)     74.00
   smtp             518 (  0.00%)           182200 (  0.00%)    351.74
   ftp              114 (  0.00%)            13090 (  0.00%)    114.82
   pop3              46 (  0.00%)             4457 (  0.00%)     96.89
   ssh              143 (  0.00%)            24238 (  0.00%)    169.50
   dns                7 (  0.00%)              635 (  0.00%)     90.71
   bgp              916 (  0.00%)            77732 (  0.00%)     84.86
   other           3264 (  0.01%)           779979 (  0.00%)    238.96
  udp6            27828 (  0.11%)          4572280 (  0.03%)    164.31
   dns            27807 (  0.11%)          4569964 (  0.03%)    164.35
   quake              1 (  0.00%)              116 (  0.00%)    116.00
   other             20 (  0.00%)             2200 (  0.00%)    110.00
  icmp6            5217 (  0.02%)           739857 (  0.00%)    141.82
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6              6 (  0.00%)             4084 (  0.00%)    680.67


tcpdump file: 200807041400.dump.gz (602.12 MB)