#Trace File: testfile.crl #$Id: crl_hist.pl,v 2.15 2002/02/28 21:26:14 dmoore Exp $ #$Author: dmoore $ #$Name: $ #$Revision: 2.15 $ #Report Library #$Id: CRL_report.pm,v 2.10 2001/04/11 17:06:08 kkeys Exp $ #$Author: kkeys $ #$Name: $ #$Revision: 2.10 $ #Interesting TCP Ports: 20 25 80 110 119 139 443 554 1051 1062 1085 1144 1755 3128 5501 6000 6688 6697 6699 7070 8000 8080 #Interesting UDP Ports: 53 137 2049 3130 6112 6770 6970 6971 6972 7070 7648 7777 9000 9001 9005 27001 27005 27015 27500 27901 27910 27960 37370 #Starts at 937345564.0000016689, Ends at 937345575.7235686779, Duration 11.7235670090 # 937345575.7235686779 # end_time = Latest timestamp 0 # fragcount = Fragments of IP Datagrams 63418 # nofragcount = IP packets with DF set 0 # nonip = Non-IP packets 0 # opcount = IP Packets with options 937345564.0000016689 # start_time = Earliest timestamp 0 # tcpfragcount = Fragments of TCP Datagrams 31702544 # total_bytes = Total IP Bytes 79029 # total_packets = Total IP Packets 11.7235670090 # total_time = Duration of trace(s) 0 # udpfragcount = Fragments of UDP Datagrams # #Packet and byte counts by IP length #Size Num CumPkts pct. CumByte pct. 28 52 52 0.06579863 1456 0.00459269 32 45 97 0.12273975 2896 0.00913491 36 24 121 0.15310835 3760 0.01186025 37 7 128 0.16196586 4019 0.01267722 38 36 164 0.20751876 5387 0.01699233 39 196 360 0.45552898 13031 0.04110396 40 26783 27143 34.34561996 1084351 3.42039112 41 214 27357 34.61640664 1093125 3.44806713 . . . 540 8 54389 68.82157183 4492596 14.17108987 541 6 54395 68.82916398 4495842 14.18132879 542 9 54404 68.84055220 4500720 14.19671557 543 4 54408 68.84561364 4502892 14.20356675 544 33 54441 68.88737046 4520844 14.26019313 545 7 54448 68.89622797 4524659 14.27222686 546 4 54452 68.90128940 4526843 14.27911590 547 13 54465 68.91773906 4533954 14.30154627 548 17 54482 68.93925015 4543270 14.33093193 549 8 54490 68.94937301 4547662 14.34478571 550 14 54504 68.96708803 4555362 14.36907398 551 4 54508 68.97214946 4557566 14.37602610 552 612 55120 69.74654874 4895390 15.44163144 553 26 55146 69.77944805 4909768 15.48698426 554 10 55156 69.79210163 4915308 15.50445920 555 7 55163 69.80095914 4919193 15.51671374 556 7 55170 69.80981665 4923085 15.52899035 557 6 55176 69.81740880 4926427 15.53953210 558 6 55182 69.82500095 4929775 15.55009276 559 12 55194 69.84018525 4936483 15.57125195 560 4 55198 69.84524668 4938723 15.57831763 561 6 55204 69.85283883 4942089 15.58893507 562 6 55210 69.86043098 4945461 15.59957144 563 3 55213 69.86422706 4947150 15.60489909 564 47 55260 69.92369890 4973658 15.68851383 565 4 55264 69.92876033 4975918 15.69564260 566 8 55272 69.93888319 4980446 15.70992536 567 7 55279 69.94774070 4984415 15.72244486 568 14 55293 69.96545572 4992367 15.74752802 569 8 55301 69.97557859 4996919 15.76188649 570 7 55308 69.98443609 5000909 15.77447223 571 6 55314 69.99202824 5004335 15.78527894 572 8 55322 70.00215111 5008911 15.79971311 573 5 55327 70.00847790 5011776 15.80875024 574 12 55339 70.02366220 5018664 15.83047720 575 4 55343 70.02872363 5020964 15.83773214 576 5886 61229 77.47662251 8411300 26.53194015 578 18 61247 77.49939895 8421704 26.56475771 . . . 1491 1 67809 85.80268003 14875824 46.92312390 1492 1 67810 85.80394539 14877316 46.92783015 1493 3 67813 85.80774146 14881795 46.94195835 1494 5 67818 85.81406825 14889265 46.96552113 1495 8 67826 85.82419112 14901225 47.00324681 1496 786 68612 86.81876273 16077081 50.71227407 1497 6 68618 86.82635488 16086063 50.74060618 1498 6 68624 86.83394703 16095051 50.76895722 1499 7 68631 86.84280454 16105544 50.80205551 1500 10398 79029 100.00000000 31702544 100.00000000 # #Traffic breakdown by protocol: #proto pcount pct. bytes pct. avg. size 6 70224 88.85852029 30603213 96.53235715 435 17 6756 8.54876058 899399 2.83699314 133 1 1755 2.22070379 105028 0.33129203 59 50 186 0.23535664 60744 0.19160607 326 94 45 0.05694112 25184 0.07943842 559 2 10 0.01265358 4849 0.01529530 484 4 49 0.06200256 3832 0.01208736 78 47 4 0.00506143 295 0.00093052 73 # #TCP Traffic matrix: #src dst packets pct. bytes pct avg. size 80 0 26276 37.41740715 18246167 59.62173645 694 0 25 7832 11.15288221 4257019 13.91036621 543 443 0 2327 3.31368193 2149294 7.02309918 923 0 0 5181 7.37781955 1974318 6.45134222 381 0 80 19254 27.41797676 1602202 5.23540453 83 20 0 700 0.99681021 509613 1.66522711 728 119 0 1054 1.50091137 312526 1.02121957 296 139 0 230 0.32752335 298589 0.97567860 1298 8000 0 168 0.23923445 212091 0.69303507 1262 0 119 225 0.32040328 179785 0.58747100 799 110 0 482 0.68637503 141464 0.46225212 293 25 0 1867 2.65863522 102136 0.33374273 54 0 20 570 0.81168831 90626 0.29613230 158 554 0 64 0.09113693 75897 0.24800337 1185 1755 0 85 0.12104124 71476 0.23355718 840 22 0 734 1.04522670 70676 0.23094307 96 . . . # #UDP Traffic matrix: #src dst packets pct. bytes pct avg. size 0 7070 480 7.10479574 251055 27.91364011 523 27015 27005 609 9.01420959 146224 16.25796782 240 53 0 528 7.81527531 107169 11.91562366 202 0 0 1045 15.46773239 94942 10.55616028 90 53 53 742 10.98283008 72567 8.06838789 97 27500 27001 445 6.58673771 59586 6.62509076 133 27901 0 707 10.46477205 40299 4.48065875 57 27005 27015 703 10.40556542 38317 4.26028937 54 27901 27910 610 9.02901125 37891 4.21292441 62 6112 6112 362 5.35820012 18423 2.04836785 50 0 53 201 2.97513321 13081 1.45441567 65 . . . # #Fragment breakdown by protocol: #proto pcount pct. bytes pct. avg. size # #Packet and byte counts from 554/tcp by IP length #Size Num CumPkts pct. CumByte pct. 40 1 1 1.56250000 40 0.05270301 116 1 2 3.12500000 156 0.20554172 271 1 3 4.68750000 427 0.56260458 349 1 4 6.25000000 776 1.02243830 600 1 5 7.81250000 1376 1.81298339 649 1 6 9.37500000 2025 2.66808965 653 1 7 10.93750000 2678 3.52846621 654 11 18 28.12500000 9872 13.00710173 663 3 21 32.81250000 11861 15.62775867 1268 2 23 35.93750000 14397 18.96912921 1500 41 64 100.00000000 75897 100.00000000 # #Packet and byte counts from 80/tcp by IP length #Size Num CumPkts pct. CumByte pct. 40 4998 4998 19.02115999 199920 1.09568218 41 36 5034 19.15816715 201396 1.10377155 42 2 5036 19.16577866 201480 1.10423192 43 5 5041 19.18480743 201695 1.10541025 44 2069 7110 27.05891308 292731 1.60434244 . . . 1496 600 18996 72.29410869 7326186 40.15191793 1497 1 18997 72.29791445 7327683 40.16012240 1498 6 19003 72.32074897 7336671 40.20938206 1499 4 19007 72.33597199 7342667 40.24224375 1500 7269 26276 100.00000000 18246167 100.00000000 # #Packet and byte counts from 8000/tcp by IP length #Size Num CumPkts pct. CumByte pct. 41 10 10 5.95238095 410 0.19331325 46 1 11 6.54761905 456 0.21500205 77 1 12 7.14285714 533 0.25130722 . . . 1430 1 52 30.95238095 38123 17.97483156 1468 1 53 31.54761905 39591 18.66698728 1500 115 168 100.00000000 212091 100.00000000 . . . . . # #ICMP traffic breakdown #Type Code packets pct. bytes pct avg. size 5 0 1218 69.40170940 68208 64.94268195 56 8 0 286 16.29629630 19822 18.87306242 69 3 3 75 4.27350427 6406 6.09932589 85 11 0 53 3.01994302 2980 2.83733861 56 3 13 38 2.16524217 2128 2.02612637 56 69 0 25 1.42450142 1972 1.87759455 78 0 0 29 1.65242165 1776 1.69097764 61 3 1 31 1.76638177 1736 1.65289256 56 # #IGMP traffic breakdown #Type Code packets pct. bytes pct avg. size 19 2 9 90.00000000 4813 99.25757888 534 19 1 1 10.00000000 36 0.74242112 36 # #TCP packet and byte counts by source port (top 10) #Port packets pct. bytes pct avg. size 80 26276 37.41740715 18246167 59.62173645 694 443 2327 3.31368193 2149294 7.02309918 923 1069 520 0.74048758 566063 1.84968487 1088 20 700 0.99681021 509613 1.66522711 728 119 1054 1.50091137 312526 1.02121957 296 139 230 0.32752335 298589 0.97567860 1298 8000 168 0.23923445 212091 0.69303507 1262 2858 116 0.16518569 169704 0.55453001 1462 2995 132 0.18796992 168962 0.55210543 1280 1999 134 0.19081795 165993 0.54240383 1238 # #TCP packet and byte counts by destination port (top 10) #Port packets pct. bytes pct avg. size 25 7853 11.18278651 4268116 13.94662711 543 80 19254 27.41797676 1602202 5.23540453 83 1087 1570 2.23570289 1540886 5.03504648 981 38776 1055 1.50233538 989135 3.23212795 937 1215 531 0.75615174 577984 1.88863829 1088 1142 287 0.40869219 346306 1.13160014 1206 1512 218 0.31043518 297705 0.97279001 1365 57596 198 0.28195489 292166 0.95469061 1475 1294 192 0.27341080 216961 0.70894844 1130 50109 133 0.18939394 190164 0.62138573 1429 # #UDP packet and byte counts by source port (top 10) #Port packets pct. bytes pct avg. size 53 1270 18.79810539 179736 19.98401155 141 27015 609 9.01420959 146224 16.25796782 240 2000 176 2.60509177 113459 12.61497956 644 27901 1317 19.49378330 78190 8.69358316 59 27500 445 6.58673771 59586 6.62509076 133 1892 85 1.25814091 50760 5.64376878 597 27005 703 10.40556542 38317 4.26028937 54 21470 52 0.76968620 33275 3.69969279 639 47774 84 1.24333925 26812 2.98110182 319 16519 84 1.24333925 26628 2.96064372 317 # #UDP packet and byte counts by destination port (top 10) #Port packets pct. bytes pct avg. size 6970 335 4.95855536 209109 23.24985907 624 27005 609 9.01420959 146224 16.25796782 240 53 943 13.95796329 85648 9.52280356 90 27001 445 6.58673771 59586 6.62509076 133 27930 707 10.46477205 40299 4.48065875 57 27015 712 10.53878034 38664 4.29887069 54 27910 610 9.02901125 37891 4.21292441 62 7029 84 1.24333925 26812 2.98110182 319 3568 67 0.99171107 20538 2.28352489 306 2233 132 1.95381883 20400 2.26818131 154 #