Traffic Trace Info


DumpFile: 200810191400.dump
FileSize: 990.07MB
Id: 200810191400
StartTime: Sun Oct 19 14:00:00 2008
EndTime: Sun Oct 19 14:15:00 2008
TotalTime: 899.64 seconds
TotalCapSize: 771.55MB CapLen: 96 bytes
# of packets: 14320699 (9528.24MB)
AvgRate: 88.84Mbps stddev:14.41M

IP flow (unique src/dst pair) Information

# of flows: 478834 (avg. 29.91 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.6% 1.5% 1.5% 1.3% 1.3% 1.2% 1.2% 1.1% 1.1%

IP address Information

# of IPv4 addresses: 266713
Top 10 bandwidth usage (bytes/total in %):
6.8% 6.8% 5.3% 4.8% 3.2% 2.9% 2.9% 2.5% 2.4% 2.1%
# of IPv6 addresses: 702
Top 10 bandwidth usage (bytes/total in %):
33.4% 33.3% 24.8% 22.8% 4.9% 4.9% 4.6% 4.6% 4.0% 3.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3321128
 [   64-  127]:    3270492
 [  128-  255]:     793136
 [  256-  511]:     356414
 [  512- 1023]:     343450
 [ 1024- 2047]:    6236079


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         14320699 (100.00%)       9991084064 (100.00%)    697.67
 ip            14280894 ( 99.72%)       9983946605 ( 99.93%)    699.11
  tcp          11253968 ( 78.59%)       9121087588 ( 91.29%)    810.48
   http(s)      5104202 ( 35.64%)       6855133194 ( 68.61%)   1343.04
   http(c)      2880392 ( 20.11%)        265156602 (  2.65%)     92.06
   squid         408750 (  2.85%)        305810588 (  3.06%)    748.16
   smtp          643015 (  4.49%)        152616663 (  1.53%)    237.35
   ftp           149316 (  1.04%)         11094635 (  0.11%)     74.30
   pop3           20640 (  0.14%)         15072681 (  0.15%)    730.27
   imap            5110 (  0.04%)          1285432 (  0.01%)    251.55
   telnet          1174 (  0.01%)            92773 (  0.00%)     79.02
   ssh            17912 (  0.13%)          3366681 (  0.03%)    187.96
   dns             4238 (  0.03%)           409597 (  0.00%)     96.65
   bgp              181 (  0.00%)            50840 (  0.00%)    280.88
   napster            1 (  0.00%)               62 (  0.00%)     62.00
   realaud            1 (  0.00%)               62 (  0.00%)     62.00
   rtsp          162204 (  1.13%)        174798737 (  1.75%)   1077.65
   icecast         7730 (  0.05%)          4085262 (  0.04%)    528.49
   other        1849102 ( 12.91%)       1332113779 ( 13.33%)    720.41
  udp           2425168 ( 16.93%)        801650839 (  8.02%)    330.55
   dns          1350635 (  9.43%)        217982457 (  2.18%)    161.39
   realaud         1804 (  0.01%)           108530 (  0.00%)     60.16
   halflif           22 (  0.00%)             1797 (  0.00%)     81.68
   starcra           20 (  0.00%)             3123 (  0.00%)    156.15
   everque           54 (  0.00%)             8077 (  0.00%)    149.57
   unreal            60 (  0.00%)            18566 (  0.00%)    309.43
   quake             30 (  0.00%)             2630 (  0.00%)     87.67
   cuseeme            6 (  0.00%)              491 (  0.00%)     81.83
   other        1072496 (  7.49%)        583493225 (  5.84%)    544.05
  icmp           437059 (  3.05%)         39770613 (  0.40%)     91.00
  ipip              320 (  0.00%)            38868 (  0.00%)    121.46
  ipsec            3727 (  0.03%)           505274 (  0.01%)    135.57
  ip6               888 (  0.01%)           112531 (  0.00%)    126.72
  other          159764 (  1.12%)         20780892 (  0.21%)    130.07
  frag            17663 (  0.12%)         15531387 (  0.16%)    879.32
 ip6              39805 (  0.28%)          7137459 (  0.07%)    179.31
  tcp6            28147 (  0.20%)          5076110 (  0.05%)    180.34
   http(c)        19072 (  0.13%)          1790745 (  0.02%)     93.89
   smtp            1866 (  0.01%)          2409498 (  0.02%)   1291.26
   ftp             1939 (  0.01%)           189088 (  0.00%)     97.52
   pop3              78 (  0.00%)             6441 (  0.00%)     82.58
   ssh             1916 (  0.01%)           352780 (  0.00%)    184.12
   bgp              361 (  0.00%)            30159 (  0.00%)     83.54
   other           2915 (  0.02%)           297399 (  0.00%)    102.02
  udp6             7151 (  0.05%)          1463336 (  0.01%)    204.63
   dns             7124 (  0.05%)          1459006 (  0.01%)    204.80
   other             27 (  0.00%)             4330 (  0.00%)    160.37
  icmp6            4455 (  0.03%)           574187 (  0.01%)    128.89
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             22 (  0.00%)            19746 (  0.00%)    897.55


tcpdump file: 200810191400.dump.gz (344.15 MB)