Traffic Trace Info


DumpFile: 200808271400.dump
FileSize: 1401.40MB
Id: 200808271400
StartTime: Wed Aug 27 14:00:01 2008
EndTime: Wed Aug 27 14:15:00 2008
TotalTime: 899.49 seconds
TotalCapSize: 1091.02MB CapLen: 96 bytes
# of packets: 20339963 (13884.18MB)
AvgRate: 129.50Mbps stddev:17.57M

IP flow (unique src/dst pair) Information

# of flows: 628577 (avg. 32.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 1.4% 1.2% 1.1% 1.1% 1.0% 1.0% 0.8% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 352100
Top 10 bandwidth usage (bytes/total in %):
12.2% 9.1% 7.9% 6.8% 5.2% 4.7% 3.9% 3.4% 2.6% 1.9%
# of IPv6 addresses: 966
Top 10 bandwidth usage (bytes/total in %):
11.0% 9.8% 9.7% 9.2% 7.3% 6.2% 6.1% 5.8% 4.2% 3.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4495491
 [   64-  127]:    4942652
 [  128-  255]:     981636
 [  256-  511]:     488434
 [  512- 1023]:     560330
 [ 1024- 2047]:    8871420


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         20339963 (100.00%)      14558613608 (100.00%)    715.76
 ip            20304484 ( 99.83%)      14552034499 ( 99.95%)    716.69
  tcp          16470692 ( 80.98%)      13382242630 ( 91.92%)    812.49
   http(s)      7817935 ( 38.44%)      10578855211 ( 72.66%)   1353.15
   http(c)      4885073 ( 24.02%)        529721827 (  3.64%)    108.44
   squid         211307 (  1.04%)        111608972 (  0.77%)    528.18
   smtp          671675 (  3.30%)        161253196 (  1.11%)    240.08
   nntp             106 (  0.00%)            40250 (  0.00%)    379.72
   ftp            31089 (  0.15%)          4366333 (  0.03%)    140.45
   pop3           32219 (  0.16%)         16188021 (  0.11%)    502.44
   imap            5032 (  0.02%)          1670666 (  0.01%)    332.01
   telnet         18085 (  0.09%)          1423407 (  0.01%)     78.71
   ssh            33340 (  0.16%)         16449804 (  0.11%)    493.40
   dns             3348 (  0.02%)           322862 (  0.00%)     96.43
   bgp              155 (  0.00%)            53226 (  0.00%)    343.39
   napster           53 (  0.00%)             3968 (  0.00%)     74.87
   realaud            5 (  0.00%)              695 (  0.00%)    139.00
   rtsp          311246 (  1.53%)        300874457 (  2.07%)    966.68
   icecast       108516 (  0.53%)        107397525 (  0.74%)    989.69
   hotline           18 (  0.00%)             2268 (  0.00%)    126.00
   other        2341486 ( 11.51%)       1552009642 ( 10.66%)    662.83
  udp           2733435 ( 13.44%)       1047286031 (  7.19%)    383.14
   dns          1331442 (  6.55%)        244558563 (  1.68%)    183.68
   realaud        70903 (  0.35%)         41784386 (  0.29%)    589.32
   halflif           25 (  0.00%)             4180 (  0.00%)    167.20
   starcra           14 (  0.00%)             1850 (  0.00%)    132.14
   everque           56 (  0.00%)             8422 (  0.00%)    150.39
   unreal            17 (  0.00%)             2511 (  0.00%)    147.71
   quake             18 (  0.00%)             1460 (  0.00%)     81.11
   cuseeme           10 (  0.00%)              914 (  0.00%)     91.40
   other        1330757 (  6.54%)        760900043 (  5.23%)    571.78
  icmp           945958 (  4.65%)         88784377 (  0.61%)     93.86
  ipip              325 (  0.00%)            39414 (  0.00%)    121.27
  ipsec            4964 (  0.02%)           813808 (  0.01%)    163.94
  ip6              1021 (  0.01%)           123745 (  0.00%)    121.20
  other          148089 (  0.73%)         32744494 (  0.22%)    221.11
  frag             7223 (  0.04%)          5542312 (  0.04%)    767.31
 ip6              35479 (  0.17%)          6579109 (  0.05%)    185.44
  tcp6            10329 (  0.05%)          2030343 (  0.01%)    196.57
   http(s)          554 (  0.00%)           800084 (  0.01%)   1444.19
   http(c)         4922 (  0.02%)           497434 (  0.00%)    101.06
   smtp             315 (  0.00%)            94777 (  0.00%)    300.88
   pop3              81 (  0.00%)             8533 (  0.00%)    105.35
   imap             122 (  0.00%)            27854 (  0.00%)    228.31
   ssh             1414 (  0.01%)           312440 (  0.00%)    220.96
   bgp              413 (  0.00%)            37532 (  0.00%)     90.88
   other           2508 (  0.01%)           251689 (  0.00%)    100.35
  udp6            17712 (  0.09%)          3574394 (  0.02%)    201.81
   dns            17678 (  0.09%)          3570654 (  0.02%)    201.98
   other             34 (  0.00%)             3740 (  0.00%)    110.00
  icmp6            7407 (  0.04%)           970156 (  0.01%)    130.98
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00


tcpdump file: 200808271400.dump.gz (510.05 MB)