Traffic Trace Info


DumpFile: 200903310630.dump
FileSize: 636.92MB
Id: 200903310630
StartTime: Tue Mar 31 06:30:01 2009
EndTime: Tue Mar 31 06:45:00 2009
TotalTime: 899.69 seconds
TotalCapSize: 497.61MB CapLen: 96 bytes
# of packets: 9128822 (6354.61MB)
AvgRate: 59.23Mbps stddev:10.51M

IP flow (unique src/dst pair) Information

# of flows: 558075 (avg. 16.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.9% 2.5% 2.3% 1.6% 1.5% 1.3% 1.2% 1.2% 1.2%

IP address Information

# of IPv4 addresses: 354598
Top 10 bandwidth usage (bytes/total in %):
14.5% 13.0% 7.1% 7.0% 6.5% 4.2% 3.4% 3.3% 2.9% 2.9%
# of IPv6 addresses: 2021
Top 10 bandwidth usage (bytes/total in %):
21.8% 21.8% 16.1% 10.1% 7.5% 7.5% 5.6% 5.5% 4.9% 4.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    1788844
 [   64-  127]:    2124905
 [  128-  255]:     497133
 [  256-  511]:     332602
 [  512- 1023]:     217222
 [ 1024- 2047]:    4168116


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total          9128822 (100.00%)       6663294016 (100.00%)    729.92
 ip             9102155 ( 99.71%)       6657417652 ( 99.91%)    731.41
  tcp           7032165 ( 77.03%)       6009411912 ( 90.19%)    854.56
   http(s)      3188611 ( 34.93%)       4256024861 ( 63.87%)   1334.76
   http(c)      1415969 ( 15.51%)        113410991 (  1.70%)     80.09
   squid         301247 (  3.30%)        169226657 (  2.54%)    561.75
   smtp          266563 (  2.92%)         45520943 (  0.68%)    170.77
   nntp               3 (  0.00%)              194 (  0.00%)     64.67
   ftp           169877 (  1.86%)        180397748 (  2.71%)   1061.93
   pop3            3910 (  0.04%)          1488886 (  0.02%)    380.79
   imap             949 (  0.01%)            85555 (  0.00%)     90.15
   telnet          2970 (  0.03%)           484483 (  0.01%)    163.13
   ssh           118343 (  1.30%)         20888574 (  0.31%)    176.51
   dns            14229 (  0.16%)          3474087 (  0.05%)    244.16
   bgp              131 (  0.00%)            41174 (  0.00%)    314.31
   napster           92 (  0.00%)             5546 (  0.00%)     60.28
   realaud           12 (  0.00%)             2062 (  0.00%)    171.83
   rtsp            4987 (  0.05%)           343744 (  0.01%)     68.93
   icecast          102 (  0.00%)             6535 (  0.00%)     64.07
   hotline            2 (  0.00%)              124 (  0.00%)     62.00
   other        1544037 ( 16.91%)       1218001888 ( 18.28%)    788.84
  udp           1492020 ( 16.34%)        556220835 (  8.35%)    372.80
   dns           883761 (  9.68%)        203404491 (  3.05%)    230.16
   realaud         1272 (  0.01%)            77186 (  0.00%)     60.68
   halflif          135 (  0.00%)            22655 (  0.00%)    167.81
   starcra           12 (  0.00%)             1993 (  0.00%)    166.08
   everque           61 (  0.00%)            13678 (  0.00%)    224.23
   unreal             9 (  0.00%)             1506 (  0.00%)    167.33
   quake             28 (  0.00%)             2731 (  0.00%)     97.54
   cuseeme            2 (  0.00%)              169 (  0.00%)     84.50
   other         606629 (  6.65%)        352595465 (  5.29%)    581.24
  icmp           541974 (  5.94%)         84565590 (  1.27%)    156.03
  ipip              328 (  0.00%)            40948 (  0.00%)    124.84
  ipsec             110 (  0.00%)            17380 (  0.00%)    158.00
  ip6             25770 (  0.28%)          5828939 (  0.09%)    226.19
  other            9788 (  0.11%)          1332048 (  0.02%)    136.09
  frag            45281 (  0.50%)         49549741 (  0.74%)   1094.27
 ip6              26667 (  0.29%)          5876364 (  0.09%)    220.36
  tcp6             9385 (  0.10%)          2744376 (  0.04%)    292.42
   http(s)          200 (  0.00%)            22754 (  0.00%)    113.77
   http(c)         2547 (  0.03%)           241839 (  0.00%)     94.95
   smtp             363 (  0.00%)           228887 (  0.00%)    630.54
   ftp             1792 (  0.02%)           172859 (  0.00%)     96.46
   imap             464 (  0.01%)           441320 (  0.01%)    951.12
   bgp              360 (  0.00%)            30371 (  0.00%)     84.36
   other           3659 (  0.04%)          1606346 (  0.02%)    439.01
  udp6            12052 (  0.13%)          2037011 (  0.03%)    169.02
   dns            10408 (  0.11%)          1568789 (  0.02%)    150.73
   other           1644 (  0.02%)           468222 (  0.01%)    284.81
  icmp6            4691 (  0.05%)           617216 (  0.01%)    131.57
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6            508 (  0.01%)           473545 (  0.01%)    932.18


tcpdump file: 200903310630.dump.gz (223.99 MB)