Traffic Trace Info


DumpFile: 200903300545.dump
FileSize: 756.02MB
Id: 200903300545
StartTime: Mon Mar 30 05:45:00 2009
EndTime: Mon Mar 30 06:00:01 2009
TotalTime: 900.54 seconds
TotalCapSize: 588.05MB CapLen: 96 bytes
# of packets: 11007412 (7735.26MB)
AvgRate: 72.06Mbps stddev:12.01M

IP flow (unique src/dst pair) Information

# of flows: 710588 (avg. 15.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.7% 2.4% 1.8% 1.5% 1.3% 1.3% 1.3% 1.2% 1.2%

IP address Information

# of IPv4 addresses: 450843
Top 10 bandwidth usage (bytes/total in %):
18.4% 13.3% 12.3% 7.6% 4.3% 3.3% 3.0% 2.7% 2.7% 2.4%
# of IPv6 addresses: 2385
Top 10 bandwidth usage (bytes/total in %):
21.8% 21.1% 15.1% 12.9% 10.3% 8.9% 6.9% 6.3% 5.3% 4.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2426433
 [   64-  127]:    2357579
 [  128-  255]:     515265
 [  256-  511]:     336293
 [  512- 1023]:     220934
 [ 1024- 2047]:    5150908


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         11007412 (100.00%)       8111006544 (100.00%)    736.87
 ip            10978905 ( 99.74%)       8104954597 ( 99.93%)    738.23
  tcp           8309732 ( 75.49%)       7174337798 ( 88.45%)    863.37
   http(s)      4151073 ( 37.71%)       5733166133 ( 70.68%)   1381.13
   http(c)      1693958 ( 15.39%)        130672978 (  1.61%)     77.14
   squid         413381 (  3.76%)        112394903 (  1.39%)    271.89
   smtp          223549 (  2.03%)         26038607 (  0.32%)    116.48
   ftp           132614 (  1.20%)        147007493 (  1.81%)   1108.54
   pop3            3557 (  0.03%)          1371709 (  0.02%)    385.64
   imap            1376 (  0.01%)           201978 (  0.00%)    146.79
   telnet          2697 (  0.02%)           181839 (  0.00%)     67.42
   ssh            40106 (  0.36%)          6572518 (  0.08%)    163.88
   dns            11261 (  0.10%)          1121457 (  0.01%)     99.59
   bgp              138 (  0.00%)            52753 (  0.00%)    382.27
   napster           93 (  0.00%)             5580 (  0.00%)     60.00
   realaud           24 (  0.00%)             1600 (  0.00%)     66.67
   rtsp              45 (  0.00%)            11655 (  0.00%)    259.00
   icecast          208 (  0.00%)            13961 (  0.00%)     67.12
   hotline         1014 (  0.01%)            62812 (  0.00%)     61.94
   other        1634620 ( 14.85%)       1015458742 ( 12.52%)    621.22
  udp           2070307 ( 18.81%)        841301365 ( 10.37%)    406.37
   dns          1008836 (  9.17%)        214583705 (  2.65%)    212.70
   realaud            9 (  0.00%)             1362 (  0.00%)    151.33
   halflif          148 (  0.00%)            26443 (  0.00%)    178.67
   starcra           36 (  0.00%)             7076 (  0.00%)    196.56
   everque           71 (  0.00%)            14108 (  0.00%)    198.70
   unreal          2856 (  0.03%)          1993633 (  0.02%)    698.05
   quake              7 (  0.00%)              544 (  0.00%)     77.71
   cuseeme            2 (  0.00%)              170 (  0.00%)     85.00
   other        1058144 (  9.61%)        624502397 (  7.70%)    590.19
  icmp           567885 (  5.16%)         80044191 (  0.99%)    140.95
  ipip              316 (  0.00%)            40034 (  0.00%)    126.69
  ipsec              53 (  0.00%)             8374 (  0.00%)    158.00
  ip6             24555 (  0.22%)          8404724 (  0.10%)    342.28
  other            6057 (  0.06%)           818111 (  0.01%)    135.07
  frag            49732 (  0.45%)         51874689 (  0.64%)   1043.08
 ip6              28507 (  0.26%)          6051947 (  0.07%)    212.30
  tcp6            10197 (  0.09%)          2778463 (  0.03%)    272.48
   http(s)          821 (  0.01%)           538727 (  0.01%)    656.18
   http(c)         7278 (  0.07%)           805284 (  0.01%)    110.65
   smtp             114 (  0.00%)            38117 (  0.00%)    334.36
   ssh                2 (  0.00%)              172 (  0.00%)     86.00
   bgp              357 (  0.00%)            29830 (  0.00%)     83.56
   other           1625 (  0.01%)          1366333 (  0.02%)    840.82
  udp6            10848 (  0.10%)          1831156 (  0.02%)    168.80
   dns             8869 (  0.08%)          1419740 (  0.02%)    160.08
   realaud            1 (  0.00%)              139 (  0.00%)    139.00
   other           1978 (  0.02%)           411277 (  0.01%)    207.93
  icmp6            6856 (  0.06%)           891274 (  0.01%)    130.00
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            576 (  0.01%)           546974 (  0.01%)    949.61


tcpdump file: 200903300545.dump.gz (266.23 MB)