Traffic Trace Info


DumpFile: 200807131400.dump
FileSize: 1241.05MB
Id: 200807131400
StartTime: Sun Jul 13 14:00:01 2008
EndTime: Sun Jul 13 14:15:00 2008
TotalTime: 899.85 seconds
TotalCapSize: 977.06MB CapLen: 96 bytes
# of packets: 17300375 (9763.62MB)
AvgRate: 90.99Mbps stddev:13.96M

IP flow (unique src/dst pair) Information

# of flows: 590525 (avg. 29.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 3.2% 2.1% 2.1% 1.2% 1.1% 1.0% 1.0% 1.0% 1.0%

IP address Information

# of IPv4 addresses: 364295
Top 10 bandwidth usage (bytes/total in %):
9.4% 8.8% 6.2% 5.3% 4.9% 4.9% 4.5% 3.2% 3.2% 3.0%
# of IPv6 addresses: 770
Top 10 bandwidth usage (bytes/total in %):
12.6% 7.7% 7.6% 6.5% 6.0% 5.7% 5.2% 5.1% 4.8% 4.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3902405
 [   64-  127]:    5710787
 [  128-  255]:     733553
 [  256-  511]:     479743
 [  512- 1023]:     346007
 [ 1024- 2047]:    6127880


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         17300375 (100.00%)      10237893192 (100.00%)    591.77
 ip            17281900 ( 99.89%)      10235041750 ( 99.97%)    592.24
  tcp          13338444 ( 77.10%)       9678157007 ( 94.53%)    725.58
   http(s)      5861341 ( 33.88%)       7430322036 ( 72.58%)   1267.68
   http(c)      3209318 ( 18.55%)        334556948 (  3.27%)    104.25
   squid         576183 (  3.33%)        191025790 (  1.87%)    331.54
   smtp          463985 (  2.68%)         77093768 (  0.75%)    166.16
   nntp              36 (  0.00%)             3033 (  0.00%)     84.25
   ftp           178972 (  1.03%)         86642059 (  0.85%)    484.11
   pop3           22447 (  0.13%)         22689200 (  0.22%)   1010.79
   imap            4379 (  0.03%)          1424180 (  0.01%)    325.23
   telnet           352 (  0.00%)            30376 (  0.00%)     86.30
   ssh            59687 (  0.35%)         12185806 (  0.12%)    204.16
   dns             4781 (  0.03%)           437238 (  0.00%)     91.45
   bgp              226 (  0.00%)            56804 (  0.00%)    251.35
   napster           21 (  0.00%)             1900 (  0.00%)     90.48
   realaud         1938 (  0.01%)           117244 (  0.00%)     60.50
   rtsp          149057 (  0.86%)        147666875 (  1.44%)    990.67
   icecast         4226 (  0.02%)           528729 (  0.01%)    125.11
   hotline            4 (  0.00%)              240 (  0.00%)     60.00
   other        2801486 ( 16.19%)       1373374481 ( 13.41%)    490.23
  udp           1345559 (  7.78%)        362157722 (  3.54%)    269.15
   dns           799799 (  4.62%)        138657416 (  1.35%)    173.37
   realaud         4158 (  0.02%)           251148 (  0.00%)     60.40
   halflif           14 (  0.00%)             1906 (  0.00%)    136.14
   starcra           61 (  0.00%)            11666 (  0.00%)    191.25
   everque          248 (  0.00%)            66574 (  0.00%)    268.44
   unreal            13 (  0.00%)             1923 (  0.00%)    147.92
   quake              7 (  0.00%)              562 (  0.00%)     80.29
   cuseeme            2 (  0.00%)              137 (  0.00%)     68.50
   other         541169 (  3.13%)        223142242 (  2.18%)    412.33
  icmp          2500754 ( 14.45%)        181941685 (  1.78%)     72.75
  ipip              301 (  0.00%)            35802 (  0.00%)    118.94
  ipsec            3639 (  0.02%)           489146 (  0.00%)    134.42
  ip6              1344 (  0.01%)           332608 (  0.00%)    247.48
  other           91859 (  0.53%)         11927780 (  0.12%)    129.85
  frag            26712 (  0.15%)         24625886 (  0.24%)    921.90
 ip6              18475 (  0.11%)          2851442 (  0.03%)    154.34
  tcp6             4774 (  0.03%)           507371 (  0.00%)    106.28
   http(c)         1289 (  0.01%)           135825 (  0.00%)    105.37
   smtp             167 (  0.00%)            36955 (  0.00%)    221.29
   pop3              37 (  0.00%)             3486 (  0.00%)     94.22
   ssh              133 (  0.00%)            34430 (  0.00%)    258.87
   dns                7 (  0.00%)              635 (  0.00%)     90.71
   bgp             1300 (  0.01%)           111136 (  0.00%)     85.49
   other           1841 (  0.01%)           184904 (  0.00%)    100.44
  udp6             9271 (  0.05%)          1750172 (  0.02%)    188.78
   dns             9248 (  0.05%)          1747642 (  0.02%)    188.98
   other             23 (  0.00%)             2530 (  0.00%)    110.00
  icmp6            4400 (  0.03%)           589819 (  0.01%)    134.05
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00


tcpdump file: 200807131400.dump.gz (394.50 MB)