Traffic Trace Info


DumpFile: 200903301630.dump
FileSize: 1504.86MB
Id: 200903301630
StartTime: Mon Mar 30 16:30:00 2009
EndTime: Mon Mar 30 16:45:00 2009
TotalTime: 899.84 seconds
TotalCapSize: 1177.49MB CapLen: 96 bytes
# of packets: 21442664 (15564.56MB)
AvgRate: 145.11Mbps stddev:15.57M

IP flow (unique src/dst pair) Information

# of flows: 758566 (avg. 28.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 5.0% 3.1% 2.3% 2.1% 1.6% 1.3% 1.1% 1.0% 1.0%

IP address Information

# of IPv4 addresses: 512782
Top 10 bandwidth usage (bytes/total in %):
10.0% 9.6% 8.0% 5.5% 5.5% 5.2% 5.0% 5.0% 4.8% 4.6%
# of IPv6 addresses: 1938
Top 10 bandwidth usage (bytes/total in %):
19.9% 15.8% 15.7% 13.3% 10.5% 8.8% 7.4% 6.7% 4.1% 4.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4612901
 [   64-  127]:    4394483
 [  128-  255]:     959857
 [  256-  511]:     517187
 [  512- 1023]:     791962
 [ 1024- 2047]:   10166274


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         21442664 (100.00%)      16320622558 (100.00%)    761.13
 ip            21409614 ( 99.85%)      16312582807 ( 99.95%)    761.93
  tcp          18683334 ( 87.13%)      15431382955 ( 94.55%)    825.94
   http(s)      8610577 ( 40.16%)      11589150806 ( 71.01%)   1345.92
   http(c)      5397668 ( 25.17%)        528709043 (  3.24%)     97.95
   squid         302277 (  1.41%)        104574992 (  0.64%)    345.96
   smtp          286931 (  1.34%)        135567694 (  0.83%)    472.47
   nntp               1 (  0.00%)               62 (  0.00%)     62.00
   ftp           130281 (  0.61%)        121970400 (  0.75%)    936.21
   pop3            7384 (  0.03%)          2169580 (  0.01%)    293.82
   imap            9432 (  0.04%)          9137950 (  0.06%)    968.82
   telnet         12213 (  0.06%)          3433207 (  0.02%)    281.11
   ssh           448797 (  2.09%)         55578997 (  0.34%)    123.84
   dns            15640 (  0.07%)          3560439 (  0.02%)    227.65
   bgp              181 (  0.00%)            79255 (  0.00%)    437.87
   napster           87 (  0.00%)             7134 (  0.00%)     82.00
   realaud           75 (  0.00%)             8945 (  0.00%)    119.27
   rtsp           15751 (  0.07%)         12436758 (  0.08%)    789.59
   icecast        33105 (  0.15%)          9675640 (  0.06%)    292.27
   hotline          103 (  0.00%)             8578 (  0.00%)     83.28
   other        3412825 ( 15.92%)       2855313115 ( 17.50%)    836.64
  udp           2154639 ( 10.05%)        748804486 (  4.59%)    347.53
   dns          1147846 (  5.35%)        278077388 (  1.70%)    242.26
   realaud          480 (  0.00%)            31702 (  0.00%)     66.05
   halflif          147 (  0.00%)            26807 (  0.00%)    182.36
   starcra           31 (  0.00%)             5921 (  0.00%)    191.00
   everque          115 (  0.00%)            23417 (  0.00%)    203.63
   unreal           547 (  0.00%)           272179 (  0.00%)    497.59
   quake             15 (  0.00%)             1311 (  0.00%)     87.40
   cuseeme           11 (  0.00%)             2088 (  0.00%)    189.82
   other        1005277 (  4.69%)        470226341 (  2.88%)    467.76
  icmp           435938 (  2.03%)         39535419 (  0.24%)     90.69
  ipip              311 (  0.00%)            39162 (  0.00%)    125.92
  ipsec             112 (  0.00%)            17696 (  0.00%)    158.00
  ip6             86665 (  0.40%)         83195106 (  0.51%)    959.96
  other           48615 (  0.23%)          9607983 (  0.06%)    197.63
  frag            49518 (  0.23%)         53837472 (  0.33%)   1087.23
 ip6              33050 (  0.15%)          8039751 (  0.05%)    243.26
  tcp6            10139 (  0.05%)          4047026 (  0.02%)    399.15
   http(s)         2917 (  0.01%)          1686508 (  0.01%)    578.17
   http(c)         3829 (  0.02%)           709990 (  0.00%)    185.42
   smtp             224 (  0.00%)            83260 (  0.00%)    371.70
   bgp              368 (  0.00%)            30965 (  0.00%)     84.14
   other           2801 (  0.01%)          1536303 (  0.01%)    548.48
  udp6            17464 (  0.08%)          2895422 (  0.02%)    165.79
   dns            15873 (  0.07%)          2523147 (  0.02%)    158.96
   halflif            1 (  0.00%)              108 (  0.00%)    108.00
   starcra            1 (  0.00%)              107 (  0.00%)    107.00
   other           1589 (  0.01%)           372060 (  0.00%)    234.15
  icmp6            4926 (  0.02%)           625085 (  0.00%)    126.90
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            491 (  0.00%)           468138 (  0.00%)    953.44


tcpdump file: 200903301630.dump.gz (517.70 MB)