Traffic Trace Info


DumpFile: 200903310145.dump
FileSize: 1204.47MB
Id: 200903310145
StartTime: Tue Mar 31 01:45:00 2009
EndTime: Tue Mar 31 02:00:00 2009
TotalTime: 900.03 seconds
TotalCapSize: 939.74MB CapLen: 96 bytes
# of packets: 17349094 (13061.89MB)
AvgRate: 121.76Mbps stddev:16.41M

IP flow (unique src/dst pair) Information

# of flows: 875464 (avg. 19.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 5.4% 5.1% 2.0% 1.6% 1.4% 1.3% 1.1% 1.1% 1.0%

IP address Information

# of IPv4 addresses: 511869
Top 10 bandwidth usage (bytes/total in %):
14.8% 10.9% 8.2% 6.0% 6.0% 5.7% 5.6% 5.4% 5.2% 5.2%
# of IPv6 addresses: 3654
Top 10 bandwidth usage (bytes/total in %):
87.1% 87.1% 2.1% 2.1% 2.1% 1.9% 1.7% 1.4% 0.9% 0.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3411573
 [   64-  127]:    3662586
 [  128-  255]:     759605
 [  256-  511]:     421652
 [  512- 1023]:     402279
 [ 1024- 2047]:    8691399


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         17349094 (100.00%)      13696387749 (100.00%)    789.46
 ip            17267562 ( 99.53%)      13636542674 ( 99.56%)    789.72
  tcp          13930788 ( 80.30%)      12722538824 ( 92.89%)    913.27
   http(s)      6464451 ( 37.26%)       8794441908 ( 64.21%)   1360.43
   http(c)      3069649 ( 17.69%)        495130007 (  3.62%)    161.30
   squid         326072 (  1.88%)        148585884 (  1.08%)    455.68
   smtp          425634 (  2.45%)         85991820 (  0.63%)    202.03
   ftp           185889 (  1.07%)        184952479 (  1.35%)    994.96
   pop3           11284 (  0.07%)         11755515 (  0.09%)   1041.79
   imap            1639 (  0.01%)           461418 (  0.00%)    281.52
   telnet          1572 (  0.01%)           154409 (  0.00%)     98.22
   ssh           943011 (  5.44%)        888238909 (  6.49%)    941.92
   dns            17138 (  0.10%)          3055317 (  0.02%)    178.28
   bgp              191 (  0.00%)            91841 (  0.00%)    480.84
   napster            7 (  0.00%)              751 (  0.00%)    107.29
   realaud           31 (  0.00%)             2018 (  0.00%)     65.10
   rtsp             212 (  0.00%)            58749 (  0.00%)    277.12
   icecast        12319 (  0.07%)           812994 (  0.01%)     66.00
   hotline            4 (  0.00%)              583 (  0.00%)    145.75
   other        2471667 ( 14.25%)       2108803142 ( 15.40%)    853.19
  udp           2344191 ( 13.51%)        777303384 (  5.68%)    331.59
   dns          1113505 (  6.42%)        243689117 (  1.78%)    218.85
   realaud        19245 (  0.11%)          8514324 (  0.06%)    442.42
   halflif        54129 (  0.31%)         17014380 (  0.12%)    314.33
   starcra           30 (  0.00%)             5121 (  0.00%)    170.70
   everque           72 (  0.00%)            13226 (  0.00%)    183.69
   unreal           477 (  0.00%)           222178 (  0.00%)    465.78
   quake             23 (  0.00%)             2329 (  0.00%)    101.26
   cuseeme            6 (  0.00%)              529 (  0.00%)     88.17
   other        1156337 (  6.67%)        507719748 (  3.71%)    439.08
  icmp           948108 (  5.46%)        123383777 (  0.90%)    130.14
  ipip              319 (  0.00%)            38308 (  0.00%)    120.09
  ipsec             114 (  0.00%)            18044 (  0.00%)    158.28
  ip6             34852 (  0.20%)         11090470 (  0.08%)    318.22
  other            9190 (  0.05%)          2169867 (  0.02%)    236.11
  frag           100812 (  0.58%)         95862088 (  0.70%)    950.90
 ip6              81532 (  0.47%)         59845075 (  0.44%)    734.01
  tcp6            60560 (  0.35%)         55769952 (  0.41%)    920.90
   http(s)          247 (  0.00%)            28401 (  0.00%)    114.98
   http(c)        18091 (  0.10%)          1388741 (  0.01%)     76.76
   smtp             974 (  0.01%)           501647 (  0.00%)    515.04
   ftp              106 (  0.00%)            19639 (  0.00%)    185.27
   ssh                2 (  0.00%)              172 (  0.00%)     86.00
   bgp              396 (  0.00%)            35060 (  0.00%)     88.54
   other          40744 (  0.23%)         53796292 (  0.39%)   1320.35
  udp6            16635 (  0.10%)          3145855 (  0.02%)    189.11
   dns            11045 (  0.06%)          1711021 (  0.01%)    154.91
   halflif            2 (  0.00%)              209 (  0.00%)    104.50
   other           5588 (  0.03%)          1434625 (  0.01%)    256.73
  icmp6            3871 (  0.02%)           523969 (  0.00%)    135.36
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            436 (  0.00%)           401219 (  0.00%)    920.23


tcpdump file: 200903310145.dump.gz (418.92 MB)