Traffic Trace Info


DumpFile: 200903300400.dump
FileSize: 837.96MB
Id: 200903300400
StartTime: Mon Mar 30 04:00:01 2009
EndTime: Mon Mar 30 04:15:01 2009
TotalTime: 899.94 seconds
TotalCapSize: 651.11MB CapLen: 96 bytes
# of packets: 12244711 (8610.56MB)
AvgRate: 80.26Mbps stddev:7.94M

IP flow (unique src/dst pair) Information

# of flows: 741347 (avg. 16.52 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 2.3% 1.3% 1.1% 1.0% 0.9% 0.9% 0.9% 0.9% 0.9%

IP address Information

# of IPv4 addresses: 451058
Top 10 bandwidth usage (bytes/total in %):
21.7% 14.8% 10.2% 8.1% 4.2% 2.4% 2.3% 2.3% 2.0% 1.4%
# of IPv6 addresses: 1752
Top 10 bandwidth usage (bytes/total in %):
36.2% 21.9% 15.2% 13.9% 9.3% 8.0% 7.2% 6.3% 4.9% 4.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3070124
 [   64-  127]:    2293504
 [  128-  255]:     626337
 [  256-  511]:     358111
 [  512- 1023]:     210643
 [ 1024- 2047]:    5685992


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         12244711 (100.00%)       9028829701 (100.00%)    737.37
 ip            12214310 ( 99.75%)       9020455779 ( 99.91%)    738.52
  tcp           9675215 ( 79.02%)       8274251659 ( 91.64%)    855.20
   http(s)      4987202 ( 40.73%)       6910898647 ( 76.54%)   1385.73
   http(c)      2327752 ( 19.01%)        175845003 (  1.95%)     75.54
   squid         441621 (  3.61%)        144237886 (  1.60%)    326.61
   smtp          266798 (  2.18%)         37210874 (  0.41%)    139.47
   ftp           122648 (  1.00%)        112747856 (  1.25%)    919.28
   pop3            3784 (  0.03%)          1669022 (  0.02%)    441.07
   imap            1598 (  0.01%)           305292 (  0.00%)    191.05
   telnet          1534 (  0.01%)           100559 (  0.00%)     65.55
   ssh            18260 (  0.15%)         13685072 (  0.15%)    749.46
   dns            13483 (  0.11%)          1344261 (  0.01%)     99.70
   bgp              122 (  0.00%)            33723 (  0.00%)    276.42
   napster           78 (  0.00%)             4680 (  0.00%)     60.00
   realaud           43 (  0.00%)             5922 (  0.00%)    137.72
   rtsp              91 (  0.00%)            27720 (  0.00%)    304.62
   icecast          248 (  0.00%)            16724 (  0.00%)     67.44
   hotline         1025 (  0.01%)            63468 (  0.00%)     61.92
   other        1488899 ( 12.16%)        876052736 (  9.70%)    588.39
  udp           1829333 ( 14.94%)        639431926 (  7.08%)    349.54
   dns           953578 (  7.79%)        199525940 (  2.21%)    209.24
   realaud           25 (  0.00%)             1940 (  0.00%)     77.60
   halflif          137 (  0.00%)            21494 (  0.00%)    156.89
   starcra           41 (  0.00%)             8690 (  0.00%)    211.95
   everque           62 (  0.00%)            12265 (  0.00%)    197.82
   unreal            15 (  0.00%)             2575 (  0.00%)    171.67
   quake            347 (  0.00%)            24186 (  0.00%)     69.70
   cuseeme            5 (  0.00%)              445 (  0.00%)     89.00
   other         874925 (  7.15%)        439649137 (  4.87%)    502.50
  icmp           679457 (  5.55%)         99729940 (  1.10%)    146.78
  ipip              339 (  0.00%)            40528 (  0.00%)    119.55
  ipsec              52 (  0.00%)             8216 (  0.00%)    158.00
  ip6             23441 (  0.19%)          6085218 (  0.07%)    259.60
  other            6473 (  0.05%)           908292 (  0.01%)    140.32
  frag            80367 (  0.66%)         77503522 (  0.86%)    964.37
 ip6              30401 (  0.25%)          8373922 (  0.09%)    275.45
  tcp6             9012 (  0.07%)          4693694 (  0.05%)    520.83
   http(s)         1223 (  0.01%)           774888 (  0.01%)    633.60
   http(c)         4132 (  0.03%)           641880 (  0.01%)    155.34
   smtp             180 (  0.00%)            84850 (  0.00%)    471.39
   bgp              361 (  0.00%)            29758 (  0.00%)     82.43
   other           3116 (  0.03%)          3162318 (  0.04%)   1014.86
  udp6            13576 (  0.11%)          2339871 (  0.03%)    172.35
   dns            12405 (  0.10%)          2141053 (  0.02%)    172.60
   other           1171 (  0.01%)           198818 (  0.00%)    169.78
  icmp6            7354 (  0.06%)           936175 (  0.01%)    127.30
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6            428 (  0.00%)           399966 (  0.00%)    934.50


tcpdump file: 200903300400.dump.gz (300.69 MB)