Traffic Trace Info


DumpFile: 200807281400.dump
FileSize: 1535.38MB
Id: 200807281400
StartTime: Mon Jul 28 14:00:00 2008
EndTime: Mon Jul 28 14:15:01 2008
TotalTime: 900.79 seconds
TotalCapSize: 1199.64MB CapLen: 96 bytes
# of packets: 22002724 (14426.22MB)
AvgRate: 134.35Mbps stddev:22.78M

IP flow (unique src/dst pair) Information

# of flows: 745018 (avg. 29.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 1.5% 1.3% 1.2% 1.2% 1.0% 1.0% 1.0% 1.0% 1.0%

IP address Information

# of IPv4 addresses: 408125
Top 10 bandwidth usage (bytes/total in %):
7.3% 4.9% 3.9% 3.1% 3.0% 3.0% 2.8% 2.5% 2.4% 2.4%
# of IPv6 addresses: 939
Top 10 bandwidth usage (bytes/total in %):
10.4% 9.7% 7.6% 7.1% 6.7% 5.7% 5.0% 5.0% 4.1% 4.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5517298
 [   64-  127]:    5172279
 [  128-  255]:     935315
 [  256-  511]:     542514
 [  512- 1023]:     653775
 [ 1024- 2047]:    9181543


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         22002724 (100.00%)      15126992434 (100.00%)    687.51
 ip            21970893 ( 99.86%)      15122170357 ( 99.97%)    688.28
  tcp          19178632 ( 87.16%)      14650851045 ( 96.85%)    763.92
   http(s)      8410215 ( 38.22%)      10946040285 ( 72.36%)   1301.52
   http(c)      5604541 ( 25.47%)        586635258 (  3.88%)    104.67
   squid         128885 (  0.59%)         50728351 (  0.34%)    393.59
   smtp          787437 (  3.58%)        160551738 (  1.06%)    203.89
   nntp             107 (  0.00%)             9673 (  0.00%)     90.40
   ftp           160495 (  0.73%)        115897774 (  0.77%)    722.13
   pop3           35438 (  0.16%)         23761203 (  0.16%)    670.50
   imap           14042 (  0.06%)          6193015 (  0.04%)    441.04
   telnet         15997 (  0.07%)          1326801 (  0.01%)     82.94
   ssh            18171 (  0.08%)          3955325 (  0.03%)    217.67
   dns            27373 (  0.12%)         12742341 (  0.08%)    465.51
   bgp              202 (  0.00%)            51560 (  0.00%)    255.25
   napster           63 (  0.00%)             6564 (  0.00%)    104.19
   realaud           17 (  0.00%)             1273 (  0.00%)     74.88
   rtsp          135844 (  0.62%)        191895340 (  1.27%)   1412.62
   icecast        49084 (  0.22%)         57755536 (  0.38%)   1176.67
   hotline            3 (  0.00%)              180 (  0.00%)     60.00
   other        3790694 ( 17.23%)       2493297388 ( 16.48%)    657.74
  udp           1858506 (  8.45%)        365009191 (  2.41%)    196.40
   dns          1308140 (  5.95%)        234777761 (  1.55%)    179.47
   realaud         6376 (  0.03%)          2655426 (  0.02%)    416.47
   halflif           47 (  0.00%)             5443 (  0.00%)    115.81
   starcra           44 (  0.00%)             9907 (  0.00%)    225.16
   everque           85 (  0.00%)            11365 (  0.00%)    133.71
   unreal            23 (  0.00%)             1803 (  0.00%)     78.39
   quake             22 (  0.00%)             2325 (  0.00%)    105.68
   cuseeme            3 (  0.00%)              293 (  0.00%)     97.67
   other         543599 (  2.47%)        127489133 (  0.84%)    234.53
  icmp           494277 (  2.25%)         43618644 (  0.29%)     88.25
  ipip              315 (  0.00%)            36978 (  0.00%)    117.39
  ipsec            4852 (  0.02%)           907904 (  0.01%)    187.12
  ip6              1042 (  0.00%)           125095 (  0.00%)    120.05
  other          433269 (  1.97%)         61621500 (  0.41%)    142.22
  frag            65076 (  0.30%)         55474337 (  0.37%)    852.45
 ip6              31831 (  0.14%)          4822077 (  0.03%)    151.49
  tcp6             9335 (  0.04%)          1116381 (  0.01%)    119.59
   http(s)          425 (  0.00%)           206301 (  0.00%)    485.41
   http(c)         3186 (  0.01%)           332519 (  0.00%)    104.37
   smtp             173 (  0.00%)            45277 (  0.00%)    261.72
   pop3              67 (  0.00%)             7261 (  0.00%)    108.37
   ssh              122 (  0.00%)            21772 (  0.00%)    178.46
   bgp             1342 (  0.01%)           114103 (  0.00%)     85.02
   other           4020 (  0.02%)           389148 (  0.00%)     96.80
  udp6            16156 (  0.07%)          2860072 (  0.02%)    177.03
   dns            16143 (  0.07%)          2858642 (  0.02%)    177.08
   other             13 (  0.00%)             1430 (  0.00%)    110.00
  icmp6            6292 (  0.03%)           825913 (  0.01%)    131.26
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             18 (  0.00%)            15631 (  0.00%)    868.39


tcpdump file: 200807281400.dump.gz (545.07 MB)