Traffic Trace Info


DumpFile: 200807221400.dump
FileSize: 1422.26MB
Id: 200807221400
StartTime: Tue Jul 22 14:00:01 2008
EndTime: Tue Jul 22 14:15:00 2008
TotalTime: 899.53 seconds
TotalCapSize: 1111.69MB CapLen: 96 bytes
# of packets: 20353044 (12932.65MB)
AvgRate: 120.59Mbps stddev:19.35M

IP flow (unique src/dst pair) Information

# of flows: 733380 (avg. 27.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 1.2% 1.1% 0.9% 0.9% 0.8% 0.8% 0.8% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 395048
Top 10 bandwidth usage (bytes/total in %):
7.7% 6.0% 6.0% 5.3% 3.8% 3.7% 3.5% 2.6% 2.1% 1.8%
# of IPv6 addresses: 951
Top 10 bandwidth usage (bytes/total in %):
11.8% 10.1% 9.8% 9.0% 6.5% 4.6% 4.6% 4.3% 4.3% 4.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5094238
 [   64-  127]:    4873023
 [  128-  255]:     906513
 [  256-  511]:     614160
 [  512- 1023]:     612770
 [ 1024- 2047]:    8252340


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         20353044 (100.00%)      13560869728 (100.00%)    666.28
 ip            20314148 ( 99.81%)      13554171040 ( 99.95%)    667.23
  tcp          17537873 ( 86.17%)      12969237303 ( 95.64%)    739.50
   http(s)      7423188 ( 36.47%)       9426767636 ( 69.51%)   1269.91
   http(c)      5362885 ( 26.35%)        654945124 (  4.83%)    122.13
   squid         365654 (  1.80%)        204938946 (  1.51%)    560.47
   smtp          700832 (  3.44%)        142258120 (  1.05%)    202.98
   nntp             130 (  0.00%)            15906 (  0.00%)    122.35
   ftp           259965 (  1.28%)        171138516 (  1.26%)    658.31
   pop3           35379 (  0.17%)         22173506 (  0.16%)    626.74
   imap            8006 (  0.04%)          2962039 (  0.02%)    369.98
   telnet         21523 (  0.11%)          1725823 (  0.01%)     80.19
   ssh           150206 (  0.74%)        128074070 (  0.94%)    852.66
   dns             3278 (  0.02%)           283958 (  0.00%)     86.63
   bgp              219 (  0.00%)            70235 (  0.00%)    320.71
   napster            1 (  0.00%)               60 (  0.00%)     60.00
   realaud          136 (  0.00%)            16476 (  0.00%)    121.15
   rtsp          318065 (  1.56%)        297328693 (  2.19%)    934.80
   icecast       872521 (  4.29%)        846295535 (  6.24%)    969.94
   other        2015883 (  9.90%)       1070242540 (  7.89%)    530.91
  udp           2045470 ( 10.05%)        497951656 (  3.67%)    243.44
   dns          1097548 (  5.39%)        189388868 (  1.40%)    172.56
   realaud        49736 (  0.24%)         30323136 (  0.22%)    609.68
   halflif           35 (  0.00%)             7801 (  0.00%)    222.89
   starcra           56 (  0.00%)             8653 (  0.00%)    154.52
   everque          126 (  0.00%)            20120 (  0.00%)    159.68
   unreal            17 (  0.00%)             2400 (  0.00%)    141.18
   quake             20 (  0.00%)             2209 (  0.00%)    110.45
   cuseeme            7 (  0.00%)              643 (  0.00%)     91.86
   other         897908 (  4.41%)        278189123 (  2.05%)    309.82
  icmp           474300 (  2.33%)         45086475 (  0.33%)     95.06
  ipip              342 (  0.00%)            51092 (  0.00%)    149.39
  ipsec            4062 (  0.02%)           695676 (  0.01%)    171.26
  ip6              1015 (  0.00%)           122618 (  0.00%)    120.81
  other          251086 (  1.23%)         41026220 (  0.30%)    163.40
  frag             1489 (  0.01%)          1199481 (  0.01%)    805.56
 ip6              38896 (  0.19%)          6698688 (  0.05%)    172.22
  tcp6             9853 (  0.05%)          2202862 (  0.02%)    223.57
   http(s)          809 (  0.00%)          1003231 (  0.01%)   1240.09
   http(c)         2082 (  0.01%)           233818 (  0.00%)    112.30
   squid              2 (  0.00%)              148 (  0.00%)     74.00
   smtp             315 (  0.00%)           114519 (  0.00%)    363.55
   pop3              86 (  0.00%)             9505 (  0.00%)    110.52
   ssh             2158 (  0.01%)           413691 (  0.00%)    191.70
   dns                5 (  0.00%)              544 (  0.00%)    108.80
   bgp             1083 (  0.01%)           103912 (  0.00%)     95.95
   icecast            1 (  0.00%)               74 (  0.00%)     74.00
   other           3312 (  0.02%)           323420 (  0.00%)     97.65
  udp6            22116 (  0.11%)          3514785 (  0.03%)    158.92
   dns            22102 (  0.11%)          3513245 (  0.03%)    158.96
   other             14 (  0.00%)             1540 (  0.00%)    110.00
  icmp6            6895 (  0.03%)           975130 (  0.01%)    141.43
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              2 (  0.00%)             1831 (  0.00%)    915.50


tcpdump file: 200807221400.dump.gz (505.36 MB)