Traffic Trace Info


DumpFile: 200903300200.dump
FileSize: 974.66MB
Id: 200903300200
StartTime: Mon Mar 30 02:00:01 2009
EndTime: Mon Mar 30 02:15:00 2009
TotalTime: 899.23 seconds
TotalCapSize: 759.06MB CapLen: 96 bytes
# of packets: 14128827 (9848.27MB)
AvgRate: 91.87Mbps stddev:10.03M

IP flow (unique src/dst pair) Information

# of flows: 837715 (avg. 16.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.8% 1.6% 1.6% 1.4% 1.2% 1.0% 1.0% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 489989
Top 10 bandwidth usage (bytes/total in %):
18.6% 13.3% 10.4% 7.6% 4.2% 2.1% 2.1% 1.9% 1.8% 1.7%
# of IPv6 addresses: 1709
Top 10 bandwidth usage (bytes/total in %):
29.8% 25.8% 20.0% 15.8% 15.0% 8.3% 7.7% 5.8% 5.8% 2.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3256170
 [   64-  127]:    3008413
 [  128-  255]:     682485
 [  256-  511]:     385100
 [  512- 1023]:     271274
 [ 1024- 2047]:    6525385


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         14128827 (100.00%)      10326662855 (100.00%)    730.89
 ip            14098165 ( 99.78%)      10318101929 ( 99.92%)    731.88
  tcp          10913338 ( 77.24%)       9334622271 ( 90.39%)    855.34
   http(s)      5380233 ( 38.08%)       7421190305 ( 71.86%)   1379.34
   http(c)      2556230 ( 18.09%)        218356491 (  2.11%)     85.42
   squid         420356 (  2.98%)        161042929 (  1.56%)    383.11
   smtp          358203 (  2.54%)        104640821 (  1.01%)    292.13
   ftp            43496 (  0.31%)         42710612 (  0.41%)    981.94
   pop3            5989 (  0.04%)          3461055 (  0.03%)    577.90
   imap            3054 (  0.02%)          1447474 (  0.01%)    473.96
   telnet         10266 (  0.07%)          2584182 (  0.03%)    251.72
   ssh            44022 (  0.31%)         35325469 (  0.34%)    802.45
   dns            13764 (  0.10%)          1381173 (  0.01%)    100.35
   bgp              132 (  0.00%)            43440 (  0.00%)    329.09
   napster           81 (  0.00%)             4864 (  0.00%)     60.05
   realaud           36 (  0.00%)             2610 (  0.00%)     72.50
   rtsp           31574 (  0.22%)         45249627 (  0.44%)   1433.13
   icecast          233 (  0.00%)            16493 (  0.00%)     70.79
   hotline         1085 (  0.01%)            67406 (  0.00%)     62.13
   other        2044584 ( 14.47%)       1297097320 ( 12.56%)    634.41
  udp           2066215 ( 14.62%)        850073603 (  8.23%)    411.42
   dns          1008145 (  7.14%)        210544175 (  2.04%)    208.84
   realaud           17 (  0.00%)             1844 (  0.00%)    108.47
   halflif          208 (  0.00%)            34306 (  0.00%)    164.93
   starcra           20 (  0.00%)             3403 (  0.00%)    170.15
   everque           69 (  0.00%)            13062 (  0.00%)    189.30
   unreal           300 (  0.00%)           121653 (  0.00%)    405.51
   quake             16 (  0.00%)             1756 (  0.00%)    109.75
   cuseeme            5 (  0.00%)              488 (  0.00%)     97.60
   other        1057246 (  7.48%)        639197708 (  6.19%)    604.59
  icmp          1089079 (  7.71%)        127987433 (  1.24%)    117.52
  ipip              314 (  0.00%)            38524 (  0.00%)    122.69
  ipsec              53 (  0.00%)             8374 (  0.00%)    158.00
  ip6             21532 (  0.15%)          4268190 (  0.04%)    198.23
  other            7634 (  0.05%)          1103534 (  0.01%)    144.56
  frag            61016 (  0.43%)         62504585 (  0.61%)   1024.40
 ip6              30662 (  0.22%)          8560926 (  0.08%)    279.20
  tcp6            11548 (  0.08%)          5498657 (  0.05%)    476.16
   http(s)         2502 (  0.02%)          1713950 (  0.02%)    685.03
   http(c)         5509 (  0.04%)           977147 (  0.01%)    177.37
   smtp             258 (  0.00%)           112434 (  0.00%)    435.79
   bgp              353 (  0.00%)            29568 (  0.00%)     83.76
   other           2926 (  0.02%)          2665558 (  0.03%)    910.99
  udp6            11812 (  0.08%)          1886966 (  0.02%)    159.75
   dns            10614 (  0.08%)          1673959 (  0.02%)    157.71
   starcra            1 (  0.00%)              566 (  0.00%)    566.00
   other           1197 (  0.01%)           212441 (  0.00%)    177.48
  icmp6            6968 (  0.05%)           890025 (  0.01%)    127.73
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            304 (  0.00%)           281198 (  0.00%)    924.99


tcpdump file: 200903300200.dump.gz (344.87 MB)