Traffic Trace Info


DumpFile: 200809011400.dump
FileSize: 1279.40MB
Id: 200809011400
StartTime: Mon Sep 1 14:00:00 2008
EndTime: Mon Sep 1 14:15:00 2008
TotalTime: 899.96 seconds
TotalCapSize: 1001.33MB CapLen: 96 bytes
# of packets: 18222843 (12299.85MB)
AvgRate: 114.58Mbps stddev:20.57M

IP flow (unique src/dst pair) Information

# of flows: 498357 (avg. 36.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.1% 2.0% 1.5% 1.3% 1.2% 1.2% 1.1% 1.1% 1.1%

IP address Information

# of IPv4 addresses: 260265
Top 10 bandwidth usage (bytes/total in %):
13.8% 5.9% 4.4% 3.9% 3.3% 3.1% 2.9% 2.5% 2.2% 2.1%
# of IPv6 addresses: 936
Top 10 bandwidth usage (bytes/total in %):
13.3% 13.3% 9.8% 9.5% 8.6% 6.1% 5.4% 4.3% 4.3% 4.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4563707
 [   64-  127]:    4089094
 [  128-  255]:     717446
 [  256-  511]:     448620
 [  512- 1023]:     460241
 [ 1024- 2047]:    7943735


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         18222843 (100.00%)      12897327456 (100.00%)    707.76
 ip            18188307 ( 99.81%)      12891731611 ( 99.96%)    708.79
  tcp          15555950 ( 85.37%)      12353164518 ( 95.78%)    794.11
   http(s)      7727447 ( 42.41%)       9895893507 ( 76.73%)   1280.62
   http(c)      4343361 ( 23.83%)        613582428 (  4.76%)    141.27
   squid          92431 (  0.51%)         44220866 (  0.34%)    478.42
   smtp          501753 (  2.75%)        114344647 (  0.89%)    227.89
   nntp              25 (  0.00%)             2184 (  0.00%)     87.36
   ftp           164455 (  0.90%)        131171223 (  1.02%)    797.61
   pop3           33502 (  0.18%)         25467059 (  0.20%)    760.17
   imap           16121 (  0.09%)         14615378 (  0.11%)    906.60
   telnet          1416 (  0.01%)           165678 (  0.00%)    117.00
   ssh            65034 (  0.36%)         54710136 (  0.42%)    841.25
   dns             3826 (  0.02%)           344881 (  0.00%)     90.14
   bgp              426 (  0.00%)           263453 (  0.00%)    618.43
   napster           13 (  0.00%)             1123 (  0.00%)     86.38
   realaud           31 (  0.00%)             4339 (  0.00%)    139.97
   rtsp          243653 (  1.34%)        236184772 (  1.83%)    969.35
   icecast        36454 (  0.20%)         45358832 (  0.35%)   1244.28
   hotline            7 (  0.00%)              420 (  0.00%)     60.00
   other        2325994 ( 12.76%)       1176833532 (  9.12%)    505.95
  udp           1774234 (  9.74%)        460380734 (  3.57%)    259.48
   dns          1145826 (  6.29%)        202137729 (  1.57%)    176.41
   realaud          234 (  0.00%)            83554 (  0.00%)    357.07
   halflif           14 (  0.00%)             1550 (  0.00%)    110.71
   starcra           15 (  0.00%)             1549 (  0.00%)    103.27
   everque           43 (  0.00%)             6241 (  0.00%)    145.14
   unreal            10 (  0.00%)             1181 (  0.00%)    118.10
   quake             23 (  0.00%)             2182 (  0.00%)     94.87
   cuseeme            9 (  0.00%)              995 (  0.00%)    110.56
   other         628031 (  3.45%)        258138815 (  2.00%)    411.03
  icmp           834359 (  4.58%)         74234126 (  0.58%)     88.97
  ipip              331 (  0.00%)            40798 (  0.00%)    123.26
  ipsec            9380 (  0.05%)          2072752 (  0.02%)    220.98
  ip6               991 (  0.01%)           121198 (  0.00%)    122.30
  other           13062 (  0.07%)          1717485 (  0.01%)    131.49
  frag             1998 (  0.01%)          1629594 (  0.01%)    815.61
 ip6              34536 (  0.19%)          5595845 (  0.04%)    162.03
  tcp6            16454 (  0.09%)          2696753 (  0.02%)    163.90
   http(s)          287 (  0.00%)           340208 (  0.00%)   1185.39
   http(c)         9562 (  0.05%)           864015 (  0.01%)     90.36
   smtp             599 (  0.00%)           268147 (  0.00%)    447.66
   pop3              49 (  0.00%)             5596 (  0.00%)    114.20
   ssh             1743 (  0.01%)           746850 (  0.01%)    428.49
   bgp              402 (  0.00%)            36806 (  0.00%)     91.56
   other           3812 (  0.02%)           435131 (  0.00%)    114.15
  udp6            12292 (  0.07%)          2189227 (  0.02%)    178.10
   dns            12276 (  0.07%)          2187470 (  0.02%)    178.19
   realaud            1 (  0.00%)              107 (  0.00%)    107.00
   other             15 (  0.00%)             1650 (  0.00%)    110.00
  icmp6            5737 (  0.03%)           686050 (  0.01%)    119.58
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             23 (  0.00%)            19735 (  0.00%)    858.04


tcpdump file: 200809011400.dump.gz (444.50 MB)