Traffic Trace Info


DumpFile: 200807191400.dump
FileSize: 1407.80MB
Id: 200807191400
StartTime: Sat Jul 19 14:00:00 2008
EndTime: Sat Jul 19 14:15:01 2008
TotalTime: 900.80 seconds
TotalCapSize: 1102.75MB CapLen: 96 bytes
# of packets: 19991224 (12781.16MB)
AvgRate: 119.01Mbps stddev:25.55M

IP flow (unique src/dst pair) Information

# of flows: 579109 (avg. 34.52 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.4% 6.7% 3.7% 1.4% 1.2% 1.2% 1.1% 0.9% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 344198
Top 10 bandwidth usage (bytes/total in %):
16.7% 8.4% 7.8% 7.4% 6.9% 5.3% 3.8% 3.1% 2.8% 2.5%
# of IPv6 addresses: 793
Top 10 bandwidth usage (bytes/total in %):
12.2% 8.2% 8.0% 7.1% 7.1% 5.3% 5.2% 5.1% 5.1% 4.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4320185
 [   64-  127]:    5558820
 [  128-  255]:     919483
 [  256-  511]:     501359
 [  512- 1023]:     518223
 [ 1024- 2047]:    8173154


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         19991224 (100.00%)      13402020741 (100.00%)    670.40
 ip            19971019 ( 99.90%)      13398862778 ( 99.98%)    670.92
  tcp          17584924 ( 87.96%)      12809153323 ( 95.58%)    728.42
   http(s)      5518392 ( 27.60%)       7386067539 ( 55.11%)   1338.45
   http(c)      3489090 ( 17.45%)        321809072 (  2.40%)     92.23
   squid         788943 (  3.95%)        355381415 (  2.65%)    450.45
   smtp          480817 (  2.41%)        115551358 (  0.86%)    240.32
   nntp              35 (  0.00%)             3057 (  0.00%)     87.34
   ftp           242508 (  1.21%)        191571294 (  1.43%)    789.96
   pop3           17767 (  0.09%)         10121239 (  0.08%)    569.67
   imap            6255 (  0.03%)          4324369 (  0.03%)    691.35
   telnet           436 (  0.00%)           136032 (  0.00%)    312.00
   ssh          2034667 ( 10.18%)        325902350 (  2.43%)    160.17
   dns             9387 (  0.05%)          1170344 (  0.01%)    124.68
   bgp              182 (  0.00%)            50057 (  0.00%)    275.04
   napster         1163 (  0.01%)           589724 (  0.00%)    507.07
   realaud         1360 (  0.01%)          1639477 (  0.01%)   1205.50
   rtsp          172099 (  0.86%)        176246880 (  1.32%)   1024.10
   icecast        10043 (  0.05%)           687675 (  0.01%)     68.47
   hotline           64 (  0.00%)             5084 (  0.00%)     79.44
   other        4811716 ( 24.07%)       3917896357 ( 29.23%)    814.24
  udp           1720307 (  8.61%)        518717333 (  3.87%)    301.53
   dns           833009 (  4.17%)        156625210 (  1.17%)    188.02
   realaud         8805 (  0.04%)          2825500 (  0.02%)    320.90
   halflif            7 (  0.00%)              798 (  0.00%)    114.00
   starcra           26 (  0.00%)             5072 (  0.00%)    195.08
   everque          698 (  0.00%)            50810 (  0.00%)     72.79
   unreal             7 (  0.00%)              993 (  0.00%)    141.86
   quake             12 (  0.00%)             1076 (  0.00%)     89.67
   cuseeme            6 (  0.00%)              774 (  0.00%)    129.00
   other         877717 (  4.39%)        359194875 (  2.68%)    409.24
  icmp           384829 (  1.92%)         34345648 (  0.26%)     89.25
  ipip              310 (  0.00%)            38648 (  0.00%)    124.67
  ipsec            2969 (  0.01%)           397846 (  0.00%)    134.00
  ip6              1067 (  0.01%)           132221 (  0.00%)    123.92
  other          276613 (  1.38%)         36077759 (  0.27%)    130.43
  frag            34741 (  0.17%)         32292845 (  0.24%)    929.53
 ip6              20205 (  0.10%)          3157963 (  0.02%)    156.30
  tcp6             5563 (  0.03%)           713533 (  0.01%)    128.26
   http(s)          121 (  0.00%)           162330 (  0.00%)   1341.57
   http(c)         1403 (  0.01%)           146591 (  0.00%)    104.48
   smtp             152 (  0.00%)            40121 (  0.00%)    263.95
   pop3              71 (  0.00%)             7631 (  0.00%)    107.48
   ssh              120 (  0.00%)            14224 (  0.00%)    118.53
   dns                7 (  0.00%)              635 (  0.00%)     90.71
   bgp              906 (  0.00%)            75103 (  0.00%)     82.90
   other           2783 (  0.01%)           266898 (  0.00%)     95.90
  udp6             9902 (  0.05%)          1806743 (  0.01%)    182.46
   dns             9744 (  0.05%)          1792459 (  0.01%)    183.96
   other            158 (  0.00%)            14284 (  0.00%)     90.41
  icmp6            4703 (  0.02%)           632296 (  0.00%)    134.45
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              7 (  0.00%)             1311 (  0.00%)    187.29


tcpdump file: 200807191400.dump.gz (502.96 MB)