Traffic Trace Info


DumpFile: 200810071400.dump
FileSize: 1885.53MB
Id: 200810071400
StartTime: Tue Oct 7 14:00:01 2008
EndTime: Tue Oct 7 14:15:00 2008
TotalTime: 899.41 seconds
TotalCapSize: 1480.12MB CapLen: 96 bytes
# of packets: 26568352 (17040.13MB)
AvgRate: 158.92Mbps stddev:27.36M

IP flow (unique src/dst pair) Information

# of flows: 657748 (avg. 40.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 2.8% 1.8% 1.1% 1.0% 0.9% 0.9% 0.8% 0.8% 0.7%

IP address Information

# of IPv4 addresses: 339984
Top 10 bandwidth usage (bytes/total in %):
6.9% 3.3% 3.1% 3.0% 2.5% 2.3% 2.1% 2.1% 1.9% 1.9%
# of IPv6 addresses: 875
Top 10 bandwidth usage (bytes/total in %):
98.8% 98.8% 0.5% 0.5% 0.2% 0.2% 0.1% 0.1% 0.0% 0.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5672876
 [   64-  127]:    7452670
 [  128-  255]:    1200666
 [  256-  511]:     561476
 [  512- 1023]:     813912
 [ 1024- 2047]:   10866752


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         26568352 (100.00%)      17867868662 (100.00%)    672.52
 ip            25973704 ( 97.76%)      17063107508 ( 95.50%)    656.94
  tcp          22310309 ( 83.97%)      16057837982 ( 89.87%)    719.75
   http(s)      8936890 ( 33.64%)      11647485201 ( 65.19%)   1303.30
   http(c)      7304534 ( 27.49%)        793551980 (  4.44%)    108.64
   squid         610969 (  2.30%)        275378719 (  1.54%)    450.72
   smtp          567073 (  2.13%)        160748556 (  0.90%)    283.47
   nntp             116 (  0.00%)            11385 (  0.00%)     98.15
   ftp           141820 (  0.53%)         71217853 (  0.40%)    502.17
   pop3           56803 (  0.21%)         35334373 (  0.20%)    622.05
   imap            7925 (  0.03%)          3520375 (  0.02%)    444.21
   telnet          2516 (  0.01%)           225272 (  0.00%)     89.54
   ssh          1141632 (  4.30%)        166176939 (  0.93%)    145.56
   dns             3686 (  0.01%)           315857 (  0.00%)     85.69
   bgp              185 (  0.00%)            48693 (  0.00%)    263.21
   napster           51 (  0.00%)             5201 (  0.00%)    101.98
   realaud           18 (  0.00%)             2917 (  0.00%)    162.06
   rtsp          638450 (  2.40%)        707444878 (  3.96%)   1108.07
   icecast        48061 (  0.18%)         10399663 (  0.06%)    216.38
   other        2849379 ( 10.72%)       2185958060 ( 12.23%)    767.17
  udp           3180982 ( 11.97%)        931965510 (  5.22%)    292.98
   dns          1326418 (  4.99%)        236427770 (  1.32%)    178.25
   realaud        18497 (  0.07%)          4698845 (  0.03%)    254.03
   halflif           21 (  0.00%)             2337 (  0.00%)    111.29
   starcra           28 (  0.00%)             4544 (  0.00%)    162.29
   everque           38 (  0.00%)             6079 (  0.00%)    159.97
   unreal            22 (  0.00%)             1887 (  0.00%)     85.77
   quake             32 (  0.00%)             2738 (  0.00%)     85.56
   cuseeme            3 (  0.00%)              254 (  0.00%)     84.67
   other        1826466 (  6.87%)        688916906 (  3.86%)    377.19
  icmp           335368 (  1.26%)         39436334 (  0.22%)    117.59
  ipip              351 (  0.00%)            42972 (  0.00%)    122.43
  ipsec            6395 (  0.02%)          1413306 (  0.01%)    221.00
  ip6               747 (  0.00%)            94434 (  0.00%)    126.42
  other          139552 (  0.53%)         32316970 (  0.18%)    231.58
  frag            90440 (  0.34%)         69795386 (  0.39%)    771.73
 ip6             594648 (  2.24%)        804761154 (  4.50%)   1353.34
  tcp6           579776 (  2.18%)        802198186 (  4.49%)   1383.63
   http(s)       557476 (  2.10%)        800058338 (  4.48%)   1435.14
   http(c)        19696 (  0.07%)          1846159 (  0.01%)     93.73
   smtp             193 (  0.00%)            46879 (  0.00%)    242.90
   ssh              223 (  0.00%)            48763 (  0.00%)    218.67
   bgp              350 (  0.00%)            28839 (  0.00%)     82.40
   other           1838 (  0.01%)           169208 (  0.00%)     92.06
  udp6             9431 (  0.04%)          1807497 (  0.01%)    191.65
   dns             9394 (  0.04%)          1803859 (  0.01%)    192.02
   other             37 (  0.00%)             3638 (  0.00%)     98.32
  icmp6            5404 (  0.02%)           746802 (  0.00%)    138.19
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6              6 (  0.00%)             4453 (  0.00%)    742.17


tcpdump file: 200810071400.dump.gz (656.52 MB)