Traffic Trace Info


DumpFile: 200807271400.dump
FileSize: 1169.98MB
Id: 200807271400
StartTime: Sun Jul 27 14:00:00 2008
EndTime: Sun Jul 27 14:15:01 2008
TotalTime: 900.67 seconds
TotalCapSize: 914.00MB CapLen: 96 bytes
# of packets: 16775366 (10158.79MB)
AvgRate: 94.62Mbps stddev:16.33M

IP flow (unique src/dst pair) Information

# of flows: 448084 (avg. 37.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 1.9% 1.8% 1.8% 1.8% 1.3% 1.1% 1.1% 1.1% 1.1%

IP address Information

# of IPv4 addresses: 259862
Top 10 bandwidth usage (bytes/total in %):
11.0% 10.7% 6.1% 4.9% 4.3% 3.7% 3.7% 3.2% 3.1% 3.0%
# of IPv6 addresses: 782
Top 10 bandwidth usage (bytes/total in %):
11.4% 9.7% 9.5% 9.4% 6.7% 6.7% 6.0% 5.7% 4.9% 4.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5628009
 [   64-  127]:    3299816
 [  128-  255]:     615608
 [  256-  511]:     382285
 [  512- 1023]:     370026
 [ 1024- 2047]:    6479622


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         16775366 (100.00%)      10652258625 (100.00%)    634.99
 ip            16754053 ( 99.87%)      10648904376 ( 99.97%)    635.60
  tcp          14829935 ( 88.40%)      10287774660 ( 96.58%)    693.72
   http(s)      5770345 ( 34.40%)       7959391087 ( 74.72%)   1379.36
   http(c)      3709577 ( 22.11%)        311203770 (  2.92%)     83.89
   squid         170061 (  1.01%)         27672354 (  0.26%)    162.72
   smtp          423252 (  2.52%)         77481038 (  0.73%)    183.06
   nntp             151 (  0.00%)            15379 (  0.00%)    101.85
   ftp           166692 (  0.99%)         79527717 (  0.75%)    477.09
   pop3           42266 (  0.25%)         15076394 (  0.14%)    356.70
   imap            8911 (  0.05%)          7366659 (  0.07%)    826.69
   telnet           306 (  0.00%)            35380 (  0.00%)    115.62
   ssh           232038 (  1.38%)        170262263 (  1.60%)    733.77
   dns            19594 (  0.12%)          2378232 (  0.02%)    121.38
   bgp              178 (  0.00%)            42989 (  0.00%)    241.51
   napster           17 (  0.00%)             1160 (  0.00%)     68.24
   realaud           61 (  0.00%)             6950 (  0.00%)    113.93
   rtsp             467 (  0.00%)            82652 (  0.00%)    176.99
   icecast         8928 (  0.05%)           841925 (  0.01%)     94.30
   other        4277086 ( 25.50%)       1636388411 ( 15.36%)    382.59
  udp           1297123 (  7.73%)        306559673 (  2.88%)    236.34
   dns           811882 (  4.84%)        160528515 (  1.51%)    197.72
   realaud         3623 (  0.02%)           217822 (  0.00%)     60.12
   halflif           16 (  0.00%)             5197 (  0.00%)    324.81
   starcra           23 (  0.00%)             4027 (  0.00%)    175.09
   everque           39 (  0.00%)             6993 (  0.00%)    179.31
   unreal            15 (  0.00%)             1543 (  0.00%)    102.87
   quake             18 (  0.00%)             2761 (  0.00%)    153.39
   cuseeme            8 (  0.00%)             1230 (  0.00%)    153.75
   other         481392 (  2.87%)        145746469 (  1.37%)    302.76
  icmp           580482 (  3.46%)         47264017 (  0.44%)     81.42
  ipip              314 (  0.00%)            37206 (  0.00%)    118.49
  ipsec            2967 (  0.02%)           397578 (  0.00%)    134.00
  ip6              1032 (  0.01%)           124142 (  0.00%)    120.29
  other           42200 (  0.25%)          6747100 (  0.06%)    159.88
  frag            52053 (  0.31%)         45034380 (  0.42%)    865.16
 ip6              21313 (  0.13%)          3354249 (  0.03%)    157.38
  tcp6             6226 (  0.04%)           922548 (  0.01%)    148.18
   http(s)          220 (  0.00%)           319301 (  0.00%)   1451.37
   http(c)         2100 (  0.01%)           203592 (  0.00%)     96.95
   smtp             135 (  0.00%)            28521 (  0.00%)    211.27
   pop3              33 (  0.00%)             3042 (  0.00%)     92.18
   ssh               97 (  0.00%)            16134 (  0.00%)    166.33
   bgp             1350 (  0.01%)           110787 (  0.00%)     82.06
   other           2291 (  0.01%)           241171 (  0.00%)    105.27
  udp6             9920 (  0.06%)          1710545 (  0.02%)    172.43
   dns             9902 (  0.06%)          1708563 (  0.02%)    172.55
   halflif            1 (  0.00%)              112 (  0.00%)    112.00
   other             17 (  0.00%)             1870 (  0.00%)    110.00
  icmp6            5136 (  0.03%)           716940 (  0.01%)    139.59
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00


tcpdump file: 200807271400.dump.gz (407.18 MB)