Traffic Trace Info


DumpFile: 200807091400.dump
FileSize: 1942.45MB
Id: 200807091400
StartTime: Wed Jul 9 14:00:01 2008
EndTime: Wed Jul 9 14:15:00 2008
TotalTime: 899.42 seconds
TotalCapSize: 1514.88MB CapLen: 96 bytes
# of packets: 28020313 (18217.13MB)
AvgRate: 169.90Mbps stddev:25.79M

IP flow (unique src/dst pair) Information

# of flows: 697413 (avg. 40.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 3.7% 2.7% 1.7% 1.6% 1.3% 1.0% 0.8% 0.7% 0.6%

IP address Information

# of IPv4 addresses: 345433
Top 10 bandwidth usage (bytes/total in %):
6.6% 4.3% 4.0% 3.7% 3.7% 3.1% 2.7% 2.5% 2.3% 2.1%
# of IPv6 addresses: 870
Top 10 bandwidth usage (bytes/total in %):
8.3% 7.0% 6.9% 6.5% 6.4% 6.3% 6.3% 5.8% 5.7% 5.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    7071978
 [   64-  127]:    6659098
 [  128-  255]:    1099957
 [  256-  511]:     760740
 [  512- 1023]:     764225
 [ 1024- 2047]:   11664315


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         28020313 (100.00%)      19102049625 (100.00%)    681.72
 ip            27980414 ( 99.86%)      19095973999 ( 99.97%)    682.48
  tcp          22344449 ( 79.74%)      17871182580 ( 93.56%)    799.80
   http(s)      9996930 ( 35.68%)      13220614495 ( 69.21%)   1322.47
   http(c)      5813838 ( 20.75%)        654313236 (  3.43%)    112.54
   squid         640503 (  2.29%)        219820526 (  1.15%)    343.20
   smtp          552192 (  1.97%)        173959289 (  0.91%)    315.03
   nntp              39 (  0.00%)             2797 (  0.00%)     71.72
   ftp           295690 (  1.06%)        129266555 (  0.68%)    437.17
   pop3           30532 (  0.11%)         20362052 (  0.11%)    666.91
   imap            9048 (  0.03%)          6698425 (  0.04%)    740.32
   telnet          1577 (  0.01%)           260552 (  0.00%)    165.22
   ssh           296758 (  1.06%)         58041728 (  0.30%)    195.59
   dns             3788 (  0.01%)           320853 (  0.00%)     84.70
   bgp              243 (  0.00%)            70251 (  0.00%)    289.10
   napster           54 (  0.00%)            30971 (  0.00%)    573.54
   realaud            1 (  0.00%)               60 (  0.00%)     60.00
   rtsp           82449 (  0.29%)         77849246 (  0.41%)    944.21
   icecast        32139 (  0.11%)         37628566 (  0.20%)   1170.81
   hotline           46 (  0.00%)             3470 (  0.00%)     75.43
   other        4588583 ( 16.38%)       3271937168 ( 17.13%)    713.06
  udp           4120373 ( 14.70%)       1087899013 (  5.70%)    264.03
   dns          1279601 (  4.57%)        194984651 (  1.02%)    152.38
   realaud        12962 (  0.05%)          4381967 (  0.02%)    338.06
   halflif           16 (  0.00%)             2027 (  0.00%)    126.69
   starcra           36 (  0.00%)             6445 (  0.00%)    179.03
   everque           88 (  0.00%)            15803 (  0.00%)    179.58
   unreal             9 (  0.00%)             1076 (  0.00%)    119.56
   quake              8 (  0.00%)              854 (  0.00%)    106.75
   cuseeme            1 (  0.00%)               66 (  0.00%)     66.00
   other        2827631 ( 10.09%)        888501079 (  4.65%)    314.22
  icmp          1291852 (  4.61%)         98549649 (  0.52%)     76.29
  ipip              306 (  0.00%)            37772 (  0.00%)    123.44
  ipsec            5096 (  0.02%)          1156380 (  0.01%)    226.92
  ip6               855 (  0.00%)           141435 (  0.00%)    165.42
  other          217483 (  0.78%)         37007170 (  0.19%)    170.16
  frag             1320 (  0.00%)          1071669 (  0.01%)    811.87
 ip6              39899 (  0.14%)          6075626 (  0.03%)    152.28
  tcp6            12135 (  0.04%)          1759592 (  0.01%)    145.00
   http(s)          411 (  0.00%)           419493 (  0.00%)   1020.66
   http(c)         5543 (  0.02%)           531683 (  0.00%)     95.92
   smtp             457 (  0.00%)           169402 (  0.00%)    370.68
   ftp               51 (  0.00%)             5907 (  0.00%)    115.82
   pop3              30 (  0.00%)             2604 (  0.00%)     86.80
   ssh              464 (  0.00%)           149236 (  0.00%)    321.63
   bgp              889 (  0.00%)            73651 (  0.00%)     82.85
   other           4290 (  0.02%)           407616 (  0.00%)     95.02
  udp6            21825 (  0.08%)          3505811 (  0.02%)    160.63
   dns            21809 (  0.08%)          3504051 (  0.02%)    160.67
   other             16 (  0.00%)             1760 (  0.00%)    110.00
  icmp6            5909 (  0.02%)           806143 (  0.00%)    136.43
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00


tcpdump file: 200807091400.dump.gz (664.34 MB)