Traffic Trace Info


DumpFile: 200807111400.dump
FileSize: 1879.82MB
Id: 200807111400
StartTime: Fri Jul 11 14:00:00 2008
EndTime: Fri Jul 11 14:15:00 2008
TotalTime: 900.20 seconds
TotalCapSize: 1466.82MB CapLen: 96 bytes
# of packets: 27065498 (18172.48MB)
AvgRate: 169.35Mbps stddev:26.06M

IP flow (unique src/dst pair) Information

# of flows: 675235 (avg. 40.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.6% 1.3% 1.2% 0.9% 0.8% 0.8% 0.8% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 354735
Top 10 bandwidth usage (bytes/total in %):
5.3% 5.2% 3.8% 3.1% 3.0% 2.8% 2.6% 2.5% 2.3% 2.2%
# of IPv6 addresses: 925
Top 10 bandwidth usage (bytes/total in %):
8.5% 6.7% 6.4% 6.4% 4.9% 4.8% 4.7% 4.4% 3.9% 3.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6488063
 [   64-  127]:    6105616
 [  128-  255]:    1247419
 [  256-  511]:     741569
 [  512- 1023]:     831022
 [ 1024- 2047]:   11651809


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         27065498 (100.00%)      19055224297 (100.00%)    704.04
 ip            27038381 ( 99.90%)      19050614469 ( 99.98%)    704.58
  tcp          23142058 ( 85.50%)      17515637576 ( 91.92%)    756.87
   http(s)      9135555 ( 33.75%)      11887526994 ( 62.38%)   1301.24
   http(c)      6104739 ( 22.56%)        784127375 (  4.12%)    128.45
   squid         833668 (  3.08%)        353652699 (  1.86%)    424.21
   smtp          744687 (  2.75%)        218660677 (  1.15%)    293.63
   nntp              75 (  0.00%)             7659 (  0.00%)    102.12
   ftp           156634 (  0.58%)         85613981 (  0.45%)    546.59
   pop3           20887 (  0.08%)          8041571 (  0.04%)    385.00
   imap            9890 (  0.04%)          2723195 (  0.01%)    275.35
   telnet          1113 (  0.00%)           130535 (  0.00%)    117.28
   ssh           174333 (  0.64%)         87064532 (  0.46%)    499.42
   dns             3533 (  0.01%)           283279 (  0.00%)     80.18
   bgp              242 (  0.00%)            58350 (  0.00%)    241.12
   napster           70 (  0.00%)             9780 (  0.00%)    139.71
   realaud          181 (  0.00%)            87982 (  0.00%)    486.09
   rtsp          710677 (  2.63%)        679716514 (  3.57%)    956.44
   icecast       470433 (  1.74%)        415010269 (  2.18%)    882.19
   hotline            8 (  0.00%)              662 (  0.00%)     82.75
   other        4775232 ( 17.64%)       2992915462 ( 15.71%)    626.76
  udp           3342385 ( 12.35%)       1459550422 (  7.66%)    436.68
   dns          1163995 (  4.30%)        187444428 (  0.98%)    161.04
   realaud        54111 (  0.20%)         39880334 (  0.21%)    737.01
   halflif           19 (  0.00%)             2458 (  0.00%)    129.37
   starcra           51 (  0.00%)             8408 (  0.00%)    164.86
   everque           66 (  0.00%)            10803 (  0.00%)    163.68
   unreal            17 (  0.00%)             2425 (  0.00%)    142.65
   quake             10 (  0.00%)              791 (  0.00%)     79.10
   cuseeme           12 (  0.00%)             1418 (  0.00%)    118.17
   other        2124088 (  7.85%)       1232194468 (  6.47%)    580.11
  icmp           403556 (  1.49%)         35521817 (  0.19%)     88.02
  ipip              325 (  0.00%)            38854 (  0.00%)    119.55
  ipsec            6571 (  0.02%)          1396326 (  0.01%)    212.50
  ip6              1030 (  0.00%)           123349 (  0.00%)    119.76
  other          142456 (  0.53%)         38346125 (  0.20%)    269.18
  frag             1577 (  0.01%)          1292034 (  0.01%)    819.30
 ip6              27117 (  0.10%)          4609828 (  0.02%)    170.00
  tcp6             8430 (  0.03%)          1386311 (  0.01%)    164.45
   http(s)          780 (  0.00%)           415770 (  0.00%)    533.04
   http(c)         2116 (  0.01%)           291975 (  0.00%)    137.98
   squid              1 (  0.00%)               74 (  0.00%)     74.00
   smtp             537 (  0.00%)           152603 (  0.00%)    284.18
   pop3              33 (  0.00%)             3042 (  0.00%)     92.18
   ssh              645 (  0.00%)            75526 (  0.00%)    117.09
   bgp              932 (  0.00%)            77305 (  0.00%)     82.95
   other           3386 (  0.01%)           370016 (  0.00%)    109.28
  udp6            13875 (  0.05%)          2549176 (  0.01%)    183.72
   dns            13853 (  0.05%)          2546725 (  0.01%)    183.84
   realaud            2 (  0.00%)              214 (  0.00%)    107.00
   starcra            1 (  0.00%)              115 (  0.00%)    115.00
   everque            1 (  0.00%)              103 (  0.00%)    103.00
   other             18 (  0.00%)             2019 (  0.00%)    112.17
  icmp6            4782 (  0.02%)           670261 (  0.00%)    140.16
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00


tcpdump file: 200807111400.dump.gz (659.33 MB)