Traffic Trace Info


DumpFile: 200808251400.dump
FileSize: 1640.91MB
Id: 200808251400
StartTime: Mon Aug 25 14:00:00 2008
EndTime: Mon Aug 25 14:15:01 2008
TotalTime: 900.51 seconds
TotalCapSize: 1287.99MB CapLen: 96 bytes
# of packets: 23128007 (16927.88MB)
AvgRate: 157.71Mbps stddev:46.04M

IP flow (unique src/dst pair) Information

# of flows: 557942 (avg. 41.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.1% 4.0% 2.6% 1.9% 1.2% 1.2% 1.2% 1.0% 1.0% 0.9%

IP address Information

# of IPv4 addresses: 300077
Top 10 bandwidth usage (bytes/total in %):
10.9% 7.1% 5.2% 5.2% 4.1% 4.0% 2.7% 2.5% 2.5% 2.4%
# of IPv6 addresses: 928
Top 10 bandwidth usage (bytes/total in %):
11.4% 11.4% 9.5% 7.4% 7.2% 6.3% 4.9% 4.1% 3.9% 3.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4617233
 [   64-  127]:    5404497
 [  128-  255]:     879779
 [  256-  511]:     481990
 [  512- 1023]:     844046
 [ 1024- 2047]:   10900462


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         23128007 (100.00%)      17750164255 (100.00%)    767.47
 ip            23096318 ( 99.86%)      17744297539 ( 99.97%)    768.27
  tcp          20100257 ( 86.91%)      17009789444 ( 95.83%)    846.25
   http(s)      9478467 ( 40.98%)      12658326624 ( 71.31%)   1335.48
   http(c)      4573943 ( 19.78%)        632099927 (  3.56%)    138.20
   squid         256521 (  1.11%)         66643829 (  0.38%)    259.80
   smtp          701520 (  3.03%)        255956608 (  1.44%)    364.86
   nntp              61 (  0.00%)             9593 (  0.00%)    157.26
   ftp            79812 (  0.35%)         14815432 (  0.08%)    185.63
   pop3           35704 (  0.15%)         23574349 (  0.13%)    660.27
   imap            5839 (  0.03%)          2256890 (  0.01%)    386.52
   telnet          4579 (  0.02%)           542308 (  0.00%)    118.43
   ssh           779386 (  3.37%)        233835028 (  1.32%)    300.02
   dns             3659 (  0.02%)           463290 (  0.00%)    126.62
   bgp              188 (  0.00%)            85602 (  0.00%)    455.33
   napster          116 (  0.00%)            23251 (  0.00%)    200.44
   realaud            9 (  0.00%)              929 (  0.00%)    103.22
   rtsp          343191 (  1.48%)        330049783 (  1.86%)    961.71
   icecast        15252 (  0.07%)         22417212 (  0.13%)   1469.79
   hotline            7 (  0.00%)             1209 (  0.00%)    172.71
   other        3822002 ( 16.53%)       2768687520 ( 15.60%)    724.41
  udp           1961347 (  8.48%)        631494136 (  3.56%)    321.97
   dns          1180452 (  5.10%)        216387566 (  1.22%)    183.31
   realaud           19 (  0.00%)             1898 (  0.00%)     99.89
   halflif           16 (  0.00%)             1640 (  0.00%)    102.50
   starcra           15 (  0.00%)             2636 (  0.00%)    175.73
   everque           44 (  0.00%)             6758 (  0.00%)    153.59
   unreal             7 (  0.00%)              576 (  0.00%)     82.29
   quake             22 (  0.00%)             1795 (  0.00%)     81.59
   cuseeme            9 (  0.00%)             2068 (  0.00%)    229.78
   other         780744 (  3.38%)        415084777 (  2.34%)    531.65
  icmp           934038 (  4.04%)         83179755 (  0.47%)     89.05
  ipip              310 (  0.00%)            36184 (  0.00%)    116.72
  ipsec            3633 (  0.02%)           511958 (  0.00%)    140.92
  ip6               997 (  0.00%)           121731 (  0.00%)    122.10
  other           95736 (  0.41%)         19164331 (  0.11%)    200.18
  frag             1775 (  0.01%)          1456823 (  0.01%)    820.75
 ip6              31689 (  0.14%)          5866716 (  0.03%)    185.13
  tcp6            11085 (  0.05%)          2456468 (  0.01%)    221.60
   http(s)         1062 (  0.00%)          1257143 (  0.01%)   1183.75
   http(c)         3622 (  0.02%)           347510 (  0.00%)     95.94
   smtp             377 (  0.00%)           114729 (  0.00%)    304.32
   pop3             113 (  0.00%)            11343 (  0.00%)    100.38
   ssh              514 (  0.00%)           211912 (  0.00%)    412.28
   dns               10 (  0.00%)             1006 (  0.00%)    100.60
   bgp              846 (  0.00%)            72671 (  0.00%)     85.90
   other           4541 (  0.02%)           440154 (  0.00%)     96.93
  udp6            13897 (  0.06%)          2520915 (  0.01%)    181.40
   dns            13881 (  0.06%)          2519148 (  0.01%)    181.48
   unreal             1 (  0.00%)              117 (  0.00%)    117.00
   other             15 (  0.00%)             1650 (  0.00%)    110.00
  icmp6            6675 (  0.03%)           883624 (  0.00%)    132.38
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              2 (  0.00%)             1629 (  0.00%)    814.50


tcpdump file: 200808251400.dump.gz (566.55 MB)