Traffic Trace Info


DumpFile: 200903310600.dump
FileSize: 743.57MB
Id: 200903310600
StartTime: Tue Mar 31 06:00:00 2009
EndTime: Tue Mar 31 06:15:00 2009
TotalTime: 900.21 seconds
TotalCapSize: 580.27MB CapLen: 96 bytes
# of packets: 10701148 (7407.67MB)
AvgRate: 69.02Mbps stddev:11.57M

IP flow (unique src/dst pair) Information

# of flows: 630950 (avg. 16.96 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 4.1% 2.9% 2.8% 2.5% 2.1% 1.2% 1.1% 1.1% 1.1%

IP address Information

# of IPv4 addresses: 392875
Top 10 bandwidth usage (bytes/total in %):
14.1% 12.3% 8.2% 5.3% 4.3% 4.2% 4.1% 4.1% 4.1% 3.1%
# of IPv6 addresses: 2040
Top 10 bandwidth usage (bytes/total in %):
40.3% 21.7% 19.0% 13.1% 6.2% 5.2% 5.2% 4.0% 4.0% 3.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2052407
 [   64-  127]:    2522844
 [  128-  255]:     692793
 [  256-  511]:     344909
 [  512- 1023]:     206109
 [ 1024- 2047]:    4882086


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         10701148 (100.00%)       7767510014 (100.00%)    725.86
 ip            10673348 ( 99.74%)       7760803330 ( 99.91%)    727.12
  tcp           7844678 ( 73.31%)       6871878706 ( 88.47%)    875.99
   http(s)      3686078 ( 34.45%)       4989340441 ( 64.23%)   1353.56
   http(c)      1831522 ( 17.12%)        458943851 (  5.91%)    250.58
   squid         249235 (  2.33%)        104567488 (  1.35%)    419.55
   smtp          307566 (  2.87%)         59881674 (  0.77%)    194.70
   ftp           156394 (  1.46%)        156161373 (  2.01%)    998.51
   pop3            4164 (  0.04%)          1777915 (  0.02%)    426.97
   imap             981 (  0.01%)           131796 (  0.00%)    134.35
   telnet          1005 (  0.01%)            69764 (  0.00%)     69.42
   ssh            51832 (  0.48%)          9317808 (  0.12%)    179.77
   dns            18858 (  0.18%)          6711635 (  0.09%)    355.90
   bgp              169 (  0.00%)            72224 (  0.00%)    427.36
   napster           81 (  0.00%)             4862 (  0.00%)     60.02
   realaud           27 (  0.00%)             1762 (  0.00%)     65.26
   rtsp             229 (  0.00%)            50212 (  0.00%)    219.27
   icecast          112 (  0.00%)             7682 (  0.00%)     68.59
   other        1536248 ( 14.36%)       1084827599 ( 13.97%)    706.15
  udp           2161679 ( 20.20%)        789412216 ( 10.16%)    365.18
   dns          1316630 ( 12.30%)        239695963 (  3.09%)    182.05
   realaud         2710 (  0.03%)           162775 (  0.00%)     60.06
   halflif          126 (  0.00%)            20815 (  0.00%)    165.20
   starcra           26 (  0.00%)             5243 (  0.00%)    201.65
   everque           59 (  0.00%)            15542 (  0.00%)    263.42
   unreal            13 (  0.00%)             1881 (  0.00%)    144.69
   quake             43 (  0.00%)             3404 (  0.00%)     79.16
   cuseeme            7 (  0.00%)              868 (  0.00%)    124.00
   other         841943 (  7.87%)        549396123 (  7.07%)    652.53
  icmp           628519 (  5.87%)         90009671 (  1.16%)    143.21
  ipip              310 (  0.00%)            38662 (  0.00%)    124.72
  ipsec             110 (  0.00%)            17380 (  0.00%)    158.00
  ip6             27712 (  0.26%)          7863406 (  0.10%)    283.75
  other           10340 (  0.10%)          1583289 (  0.02%)    153.12
  frag            48210 (  0.45%)         52685768 (  0.68%)   1092.84
 ip6              27800 (  0.26%)          6706684 (  0.09%)    241.25
  tcp6            13049 (  0.12%)          3951579 (  0.05%)    302.83
   http(s)          199 (  0.00%)            23030 (  0.00%)    115.73
   http(c)         2086 (  0.02%)           194688 (  0.00%)     93.33
   smtp             498 (  0.00%)           265759 (  0.00%)    533.65
   ftp             1982 (  0.02%)           206644 (  0.00%)    104.26
   bgp              382 (  0.00%)            33350 (  0.00%)     87.30
   other           7902 (  0.07%)          3228108 (  0.04%)    408.52
  udp6            10699 (  0.10%)          1901805 (  0.02%)    177.76
   dns             8895 (  0.08%)          1381962 (  0.02%)    155.36
   halflif            1 (  0.00%)              106 (  0.00%)    106.00
   other           1803 (  0.02%)           519737 (  0.01%)    288.26
  icmp6            3628 (  0.03%)           482803 (  0.01%)    133.08
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            394 (  0.00%)           366417 (  0.00%)    929.99


tcpdump file: 200903310600.dump.gz (260.68 MB)