Traffic Trace Info


DumpFile: 200808101400.dump
FileSize: 888.66MB
Id: 200808101400
StartTime: Sun Aug 10 14:00:00 2008
EndTime: Sun Aug 10 14:15:00 2008
TotalTime: 900.12 seconds
TotalCapSize: 695.20MB CapLen: 96 bytes
# of packets: 12677960 (8610.01MB)
AvgRate: 80.24Mbps stddev:15.54M

IP flow (unique src/dst pair) Information

# of flows: 537162 (avg. 23.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.5% 2.4% 2.3% 1.9% 1.7% 1.6% 1.6% 1.1% 1.1%

IP address Information

# of IPv4 addresses: 341599
Top 10 bandwidth usage (bytes/total in %):
13.9% 12.1% 7.1% 6.7% 3.9% 3.5% 3.1% 3.0% 3.0% 2.9%
# of IPv6 addresses: 761
Top 10 bandwidth usage (bytes/total in %):
20.2% 15.3% 12.4% 10.3% 8.2% 6.1% 5.0% 4.9% 4.9% 4.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2170993
 [   64-  127]:    3649915
 [  128-  255]:     683360
 [  256-  511]:     318118
 [  512- 1023]:     273946
 [ 1024- 2047]:    5581628


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         12677960 (100.00%)       9028246922 (100.00%)    712.12
 ip            12635244 ( 99.66%)       9022081359 ( 99.93%)    714.04
  tcp           9736702 ( 76.80%)       8342989265 ( 92.41%)    856.86
   http(s)      4745044 ( 37.43%)       6521766517 ( 72.24%)   1374.44
   http(c)      2137034 ( 16.86%)        177032475 (  1.96%)     82.84
   squid         335483 (  2.65%)        220367638 (  2.44%)    656.87
   smtp          488621 (  3.85%)         91590127 (  1.01%)    187.45
   ftp            48903 (  0.39%)          4383010 (  0.05%)     89.63
   pop3           19974 (  0.16%)         11144313 (  0.12%)    557.94
   imap            3351 (  0.03%)           995476 (  0.01%)    297.07
   telnet           475 (  0.00%)            32224 (  0.00%)     67.84
   ssh            10723 (  0.08%)          2708110 (  0.03%)    252.55
   dns             2465 (  0.02%)           369026 (  0.00%)    149.71
   bgp              203 (  0.00%)            52657 (  0.00%)    259.39
   napster          369 (  0.00%)           291057 (  0.00%)    788.77
   realaud           33 (  0.00%)             2712 (  0.00%)     82.18
   rtsp             431 (  0.00%)           122266 (  0.00%)    283.68
   icecast         4817 (  0.04%)          2863729 (  0.03%)    594.50
   other        1938773 ( 15.29%)       1309267748 ( 14.50%)    675.31
  udp           1606520 ( 12.67%)        566676228 (  6.28%)    352.74
   dns           901062 (  7.11%)        161039052 (  1.78%)    178.72
   realaud         1862 (  0.01%)           112949 (  0.00%)     60.66
   halflif           14 (  0.00%)             2064 (  0.00%)    147.43
   starcra           40 (  0.00%)             6826 (  0.00%)    170.65
   everque           84 (  0.00%)            13456 (  0.00%)    160.19
   unreal             9 (  0.00%)             1262 (  0.00%)    140.22
   quake             18 (  0.00%)             2851 (  0.00%)    158.39
   cuseeme           15 (  0.00%)             2170 (  0.00%)    144.67
   other         703394 (  5.55%)        405486326 (  4.49%)    576.47
  icmp          1280984 ( 10.10%)        110865525 (  1.23%)     86.55
  ipip              313 (  0.00%)            37748 (  0.00%)    120.60
  ipsec            2967 (  0.02%)           397578 (  0.00%)    134.00
  ip6              2320 (  0.02%)           374683 (  0.00%)    161.50
  other            5438 (  0.04%)           740332 (  0.01%)    136.14
  frag             1478 (  0.01%)          1206699 (  0.01%)    816.44
 ip6              42716 (  0.34%)          6165563 (  0.07%)    144.34
  tcp6            28134 (  0.22%)          3805887 (  0.04%)    135.28
   http(s)          172 (  0.00%)           224099 (  0.00%)   1302.90
   http(c)        19247 (  0.15%)          2711680 (  0.03%)    140.89
   smtp             375 (  0.00%)           137393 (  0.00%)    366.38
   dns               10 (  0.00%)             1006 (  0.00%)    100.60
   bgp              829 (  0.01%)            70964 (  0.00%)     85.60
   rtsp            4014 (  0.03%)           302331 (  0.00%)     75.32
   other           3487 (  0.03%)           358414 (  0.00%)    102.79
  udp6             8722 (  0.07%)          1577983 (  0.02%)    180.92
   dns             8694 (  0.07%)          1575515 (  0.02%)    181.22
   other             28 (  0.00%)             2468 (  0.00%)     88.14
  icmp6            5828 (  0.05%)           775608 (  0.01%)    133.08
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              2 (  0.00%)             2005 (  0.00%)   1002.50


tcpdump file: 200808101400.dump.gz (301.84 MB)