Traffic Trace Info


DumpFile: 200903300630.dump
FileSize: 737.60MB
Id: 200903300630
StartTime: Mon Mar 30 06:30:00 2009
EndTime: Mon Mar 30 06:45:00 2009
TotalTime: 900.28 seconds
TotalCapSize: 573.67MB CapLen: 96 bytes
# of packets: 10741540 (7650.01MB)
AvgRate: 71.29Mbps stddev:8.58M

IP flow (unique src/dst pair) Information

# of flows: 617007 (avg. 17.41 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.5% 2.8% 2.5% 1.5% 1.4% 1.4% 1.2% 1.2% 1.1% 1.1%

IP address Information

# of IPv4 addresses: 415557
Top 10 bandwidth usage (bytes/total in %):
15.8% 10.3% 7.8% 7.7% 7.6% 7.2% 7.0% 2.8% 2.8% 2.7%
# of IPv6 addresses: 1752
Top 10 bandwidth usage (bytes/total in %):
23.9% 23.5% 17.2% 12.1% 11.4% 11.1% 8.0% 6.1% 3.7% 3.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2333912
 [   64-  127]:    2236806
 [  128-  255]:     454837
 [  256-  511]:     319870
 [  512- 1023]:     232673
 [ 1024- 2047]:    5163442


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         10741540 (100.00%)       8021612459 (100.00%)    746.78
 ip            10716458 ( 99.77%)       8016032077 ( 99.93%)    748.01
  tcp           7935627 ( 73.88%)       6863598696 ( 85.56%)    864.91
   http(s)      3710292 ( 34.54%)       5054271173 ( 63.01%)   1362.23
   http(c)      1593007 ( 14.83%)        121346334 (  1.51%)     76.17
   squid         389078 (  3.62%)        168162874 (  2.10%)    432.21
   smtp          207522 (  1.93%)         26408726 (  0.33%)    127.26
   nntp               1 (  0.00%)               60 (  0.00%)     60.00
   ftp           111971 (  1.04%)        125175292 (  1.56%)   1117.93
   pop3            7266 (  0.07%)          1780592 (  0.02%)    245.06
   imap            1198 (  0.01%)           172587 (  0.00%)    144.06
   telnet          1925 (  0.02%)           397142 (  0.00%)    206.31
   ssh            65799 (  0.61%)          8827091 (  0.11%)    134.15
   dns            14337 (  0.13%)          3436125 (  0.04%)    239.67
   bgp              144 (  0.00%)            44678 (  0.00%)    310.26
   napster          144 (  0.00%)             8752 (  0.00%)     60.78
   realaud           12 (  0.00%)             2078 (  0.00%)    173.17
   rtsp              45 (  0.00%)            11655 (  0.00%)    259.00
   icecast          381 (  0.00%)            91897 (  0.00%)    241.20
   hotline          602 (  0.01%)            37276 (  0.00%)     61.92
   other        1831892 ( 17.05%)       1353423704 ( 16.87%)    738.81
  udp           1998706 ( 18.61%)       1049885945 ( 13.09%)    525.28
   dns           842338 (  7.84%)        194364030 (  2.42%)    230.74
   realaud            5 (  0.00%)              418 (  0.00%)     83.60
   halflif          102 (  0.00%)            21075 (  0.00%)    206.62
   starcra           38 (  0.00%)             6973 (  0.00%)    183.50
   everque           58 (  0.00%)            11551 (  0.00%)    199.16
   unreal          1315 (  0.01%)           815509 (  0.01%)    620.16
   quake             22 (  0.00%)             2830 (  0.00%)    128.64
   cuseeme            5 (  0.00%)              785 (  0.00%)    157.00
   other        1154642 ( 10.75%)        854511235 ( 10.65%)    740.07
  icmp           749307 (  6.98%)         92405802 (  1.15%)    123.32
  ipip              312 (  0.00%)            37864 (  0.00%)    121.36
  ipsec              53 (  0.00%)             8374 (  0.00%)    158.00
  ip6             26068 (  0.24%)          9249021 (  0.12%)    354.80
  other            6385 (  0.06%)           846375 (  0.01%)    132.56
  frag            58942 (  0.55%)         58673756 (  0.73%)    995.45
 ip6              25082 (  0.23%)          5580382 (  0.07%)    222.49
  tcp6             6851 (  0.06%)          2680190 (  0.03%)    391.21
   http(s)          985 (  0.01%)           620342 (  0.01%)    629.79
   http(c)         3550 (  0.03%)           549415 (  0.01%)    154.76
   smtp              70 (  0.00%)            24173 (  0.00%)    345.33
   bgp              360 (  0.00%)            29861 (  0.00%)     82.95
   other           1886 (  0.02%)          1456399 (  0.02%)    772.22
  udp6            10454 (  0.10%)          1740762 (  0.02%)    166.52
   dns             8251 (  0.08%)          1248239 (  0.02%)    151.28
   quake              1 (  0.00%)              106 (  0.00%)    106.00
   other           2202 (  0.02%)           492417 (  0.01%)    223.62
  icmp6            7543 (  0.07%)           966943 (  0.01%)    128.19
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            204 (  0.00%)           188407 (  0.00%)    923.56


tcpdump file: 200903300630.dump.gz (253.36 MB)