Traffic Trace Info


DumpFile: 200903300730.dump
FileSize: 693.12MB
Id: 200903300730
StartTime: Mon Mar 30 07:30:00 2009
EndTime: Mon Mar 30 07:45:00 2009
TotalTime: 900.24 seconds
TotalCapSize: 534.29MB CapLen: 96 bytes
# of packets: 10408617 (7012.25MB)
AvgRate: 65.34Mbps stddev:9.68M

IP flow (unique src/dst pair) Information

# of flows: 617322 (avg. 16.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.2% 3.1% 3.0% 1.6% 1.2% 1.2% 1.1% 0.9% 0.9% 0.9%

IP address Information

# of IPv4 addresses: 411814
Top 10 bandwidth usage (bytes/total in %):
13.6% 12.9% 12.9% 10.5% 7.8% 5.5% 5.1% 4.3% 3.1% 3.1%
# of IPv6 addresses: 1675
Top 10 bandwidth usage (bytes/total in %):
21.7% 21.7% 15.1% 14.0% 13.8% 13.6% 8.8% 8.8% 8.7% 6.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    1899422
 [   64-  127]:    2537684
 [  128-  255]:     458818
 [  256-  511]:     437742
 [  512- 1023]:     707953
 [ 1024- 2047]:    4366998


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         10408617 (100.00%)       7352875818 (100.00%)    706.42
 ip            10354191 ( 99.48%)       7343737051 ( 99.88%)    709.25
  tcp           6413686 ( 61.62%)       5015657236 ( 68.21%)    782.02
   http(s)      2784065 ( 26.75%)       3683914412 ( 50.10%)   1323.21
   http(c)      1199746 ( 11.53%)        102868528 (  1.40%)     85.74
   squid         329866 (  3.17%)        111394678 (  1.51%)    337.70
   smtp          233956 (  2.25%)         41883802 (  0.57%)    179.02
   ftp           141679 (  1.36%)        146152257 (  1.99%)   1031.57
   pop3            3878 (  0.04%)          1583701 (  0.02%)    408.38
   imap            1532 (  0.01%)           199656 (  0.00%)    130.32
   telnet           493 (  0.00%)            35479 (  0.00%)     71.97
   ssh           107809 (  1.04%)         19272024 (  0.26%)    178.76
   dns            13222 (  0.13%)          3338145 (  0.05%)    252.47
   bgp              129 (  0.00%)            39542 (  0.00%)    306.53
   napster           83 (  0.00%)             4982 (  0.00%)     60.02
   realaud           13 (  0.00%)             2138 (  0.00%)    164.46
   rtsp           72409 (  0.70%)         60993518 (  0.83%)    842.35
   icecast          188 (  0.00%)            12296 (  0.00%)     65.40
   hotline            3 (  0.00%)              186 (  0.00%)     62.00
   other        1524613 ( 14.65%)        843961772 ( 11.48%)    553.56
  udp           3483406 ( 33.47%)       2235781607 ( 30.41%)    641.84
   dns           770207 (  7.40%)        173657074 (  2.36%)    225.47
   realaud            9 (  0.00%)              798 (  0.00%)     88.67
   halflif          116 (  0.00%)            20042 (  0.00%)    172.78
   starcra           22 (  0.00%)             3899 (  0.00%)    177.23
   everque           45 (  0.00%)             9751 (  0.00%)    216.69
   unreal          1223 (  0.01%)           758802 (  0.01%)    620.44
   quake             13 (  0.00%)             1108 (  0.00%)     85.23
   cuseeme            5 (  0.00%)              633 (  0.00%)    126.60
   other        2708602 ( 26.02%)       2060599662 ( 28.02%)    760.76
  icmp           414441 (  3.98%)         68014607 (  0.93%)    164.11
  ipip              308 (  0.00%)            38218 (  0.00%)    124.08
  ipsec              52 (  0.00%)             8216 (  0.00%)    158.00
  ip6             35811 (  0.34%)         23372141 (  0.32%)    652.65
  other            6487 (  0.06%)           865026 (  0.01%)    133.35
  frag            43916 (  0.42%)         45907067 (  0.62%)   1045.34
 ip6              54424 (  0.52%)          9138647 (  0.12%)    167.92
  tcp6            37026 (  0.36%)          6210581 (  0.08%)    167.74
   http(s)         1639 (  0.02%)          1268802 (  0.02%)    774.13
   http(c)        29628 (  0.28%)          2671548 (  0.04%)     90.17
   smtp             104 (  0.00%)            34242 (  0.00%)    329.25
   ssh             3596 (  0.03%)           804524 (  0.01%)    223.73
   bgp              402 (  0.00%)            40589 (  0.00%)    100.97
   other           1657 (  0.02%)          1390876 (  0.02%)    839.39
  udp6            10142 (  0.10%)          1724206 (  0.02%)    170.01
   dns             8019 (  0.08%)          1257287 (  0.02%)    156.79
   halflif            1 (  0.00%)              105 (  0.00%)    105.00
   starcra            2 (  0.00%)              705 (  0.00%)    352.50
   unreal             1 (  0.00%)              120 (  0.00%)    120.00
   other           2119 (  0.02%)           465989 (  0.01%)    219.91
  icmp6            6875 (  0.07%)           871446 (  0.01%)    126.76
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            351 (  0.00%)           328334 (  0.00%)    935.42


tcpdump file: 200903300730.dump.gz (241.09 MB)