Traffic Trace Info


DumpFile: 200810021400.dump
FileSize: 1732.07MB
Id: 200810021400
StartTime: Thu Oct 2 14:00:00 2008
EndTime: Thu Oct 2 14:15:01 2008
TotalTime: 900.50 seconds
TotalCapSize: 1355.24MB CapLen: 96 bytes
# of packets: 24695539 (17379.79MB)
AvgRate: 161.91Mbps stddev:26.88M

IP flow (unique src/dst pair) Information

# of flows: 655558 (avg. 37.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 2.4% 2.1% 1.1% 1.0% 1.0% 1.0% 1.0% 0.9% 0.9%

IP address Information

# of IPv4 addresses: 351917
Top 10 bandwidth usage (bytes/total in %):
6.9% 5.6% 4.8% 3.7% 3.7% 2.9% 2.7% 2.5% 2.4% 2.2%
# of IPv6 addresses: 806
Top 10 bandwidth usage (bytes/total in %):
34.7% 31.8% 7.3% 6.2% 5.4% 5.3% 4.6% 4.6% 3.6% 3.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5194543
 [   64-  127]:    5728903
 [  128-  255]:    1171793
 [  256-  511]:     710772
 [  512- 1023]:     553744
 [ 1024- 2047]:   11335784


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         24695539 (100.00%)      18224033929 (100.00%)    737.95
 ip            24653673 ( 99.83%)      18218924182 ( 99.97%)    738.99
  tcp          20409142 ( 82.64%)      16911786806 ( 92.80%)    828.64
   http(s)      9017977 ( 36.52%)      12119694979 ( 66.50%)   1343.95
   http(c)      5539895 ( 22.43%)        549573520 (  3.02%)     99.20
   squid         331698 (  1.34%)        118837106 (  0.65%)    358.27
   smtp          859036 (  3.48%)        464381371 (  2.55%)    540.58
   nntp              47 (  0.00%)             4780 (  0.00%)    101.70
   ftp           389416 (  1.58%)        547433090 (  3.00%)   1405.78
   pop3           32420 (  0.13%)         16308463 (  0.09%)    503.04
   imap            7610 (  0.03%)          1985977 (  0.01%)    260.97
   telnet          1117 (  0.00%)            87059 (  0.00%)     77.94
   ssh            56352 (  0.23%)         10288623 (  0.06%)    182.58
   dns            12248 (  0.05%)          1454311 (  0.01%)    118.74
   bgp              438 (  0.00%)           247900 (  0.00%)    565.98
   napster          689 (  0.00%)            61347 (  0.00%)     89.04
   realaud           75 (  0.00%)             8279 (  0.00%)    110.39
   rtsp          630126 (  2.55%)        654864194 (  3.59%)   1039.26
   icecast        10220 (  0.04%)          7852221 (  0.04%)    768.32
   hotline            3 (  0.00%)              186 (  0.00%)     62.00
   other        3519660 ( 14.25%)       2418696500 ( 13.27%)    687.20
  udp           3139785 ( 12.71%)       1194898628 (  6.56%)    380.57
   dns          1257095 (  5.09%)        230601470 (  1.27%)    183.44
   realaud         1115 (  0.00%)            67714 (  0.00%)     60.73
   halflif           32 (  0.00%)             3505 (  0.00%)    109.53
   starcra           36 (  0.00%)             6790 (  0.00%)    188.61
   everque           65 (  0.00%)            10601 (  0.00%)    163.09
   unreal            23 (  0.00%)             3434 (  0.00%)    149.30
   quake             14 (  0.00%)             1177 (  0.00%)     84.07
   cuseeme            9 (  0.00%)              864 (  0.00%)     96.00
   other        1881245 (  7.62%)        964188400 (  5.29%)    512.53
  icmp          1071917 (  4.34%)        106969013 (  0.59%)     99.79
  ipip              315 (  0.00%)            37808 (  0.00%)    120.03
  ipsec            3583 (  0.01%)           541594 (  0.00%)    151.16
  ip6              1927 (  0.01%)           224703 (  0.00%)    116.61
  other           27004 (  0.11%)          4465630 (  0.02%)    165.37
  frag            57068 (  0.23%)         50705615 (  0.28%)    888.51
 ip6              41866 (  0.17%)          5109747 (  0.03%)    122.05
  tcp6            25806 (  0.10%)          2585592 (  0.01%)    100.19
   http(s)          986 (  0.00%)           280345 (  0.00%)    284.33
   http(c)        22854 (  0.09%)          2072388 (  0.01%)     90.68
   smtp             166 (  0.00%)            50152 (  0.00%)    302.12
   pop3              72 (  0.00%)             7668 (  0.00%)    106.50
   ssh              124 (  0.00%)            25712 (  0.00%)    207.35
   bgp              392 (  0.00%)            36070 (  0.00%)     92.02
   other           1212 (  0.00%)           113257 (  0.00%)     93.45
  udp6            10674 (  0.04%)          1854499 (  0.01%)    173.74
   dns            10642 (  0.04%)          1850982 (  0.01%)    173.93
   halflif            1 (  0.00%)              107 (  0.00%)    107.00
   other             31 (  0.00%)             3410 (  0.00%)    110.00
  icmp6            5354 (  0.02%)           663854 (  0.00%)    123.99
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              2 (  0.00%)             1722 (  0.00%)    861.00


tcpdump file: 200810021400.dump.gz (589.33 MB)