Traffic Trace Info


DumpFile: 200903311045.dump
FileSize: 812.53MB
Id: 200903311045
StartTime: Tue Mar 31 10:45:01 2009
EndTime: Tue Mar 31 11:00:00 2009
TotalTime: 899.33 seconds
TotalCapSize: 633.24MB CapLen: 96 bytes
# of packets: 11749314 (7680.06MB)
AvgRate: 71.61Mbps stddev:9.54M

IP flow (unique src/dst pair) Information

# of flows: 599812 (avg. 19.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.5% 2.4% 2.1% 1.8% 1.7% 1.5% 1.3% 1.1% 1.1%

IP address Information

# of IPv4 addresses: 397838
Top 10 bandwidth usage (bytes/total in %):
14.4% 10.0% 6.9% 6.1% 5.6% 3.2% 3.1% 2.5% 2.5% 2.4%
# of IPv6 addresses: 2307
Top 10 bandwidth usage (bytes/total in %):
21.7% 21.7% 15.2% 12.3% 10.0% 6.4% 4.7% 4.5% 4.0% 4.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2768801
 [   64-  127]:    2735238
 [  128-  255]:     522799
 [  256-  511]:     385944
 [  512- 1023]:     364596
 [ 1024- 2047]:    4971936


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         11749314 (100.00%)       8053123991 (100.00%)    685.41
 ip            11723230 ( 99.78%)       8047317550 ( 99.93%)    686.44
  tcp           9448518 ( 80.42%)       7310802411 ( 90.78%)    773.75
   http(s)      3955517 ( 33.67%)       5108195723 ( 63.43%)   1291.41
   http(c)      2498370 ( 21.26%)        263707593 (  3.27%)    105.55
   squid         223405 (  1.90%)         66032469 (  0.82%)    295.57
   smtp          280164 (  2.38%)         78209516 (  0.97%)    279.16
   nntp               2 (  0.00%)              120 (  0.00%)     60.00
   ftp           109265 (  0.93%)         80451358 (  1.00%)    736.30
   pop3           11315 (  0.10%)          6463751 (  0.08%)    571.26
   imap            3050 (  0.03%)           308406 (  0.00%)    101.12
   telnet          3309 (  0.03%)           365560 (  0.00%)    110.47
   ssh            28354 (  0.24%)          4508148 (  0.06%)    159.00
   dns            12577 (  0.11%)          1300385 (  0.02%)    103.39
   bgp              141 (  0.00%)            42466 (  0.00%)    301.18
   napster            2 (  0.00%)              124 (  0.00%)     62.00
   realaud           17 (  0.00%)             1515 (  0.00%)     89.12
   rtsp          150049 (  1.28%)         87348746 (  1.08%)    582.13
   icecast         9193 (  0.08%)          7726063 (  0.10%)    840.43
   other        2163777 ( 18.42%)       1606139808 ( 19.94%)    742.29
  udp           1792805 ( 15.26%)        688755692 (  8.55%)    384.18
   dns           865422 (  7.37%)        185239391 (  2.30%)    214.05
   realaud          746 (  0.01%)            47777 (  0.00%)     64.04
   halflif           28 (  0.00%)             3756 (  0.00%)    134.14
   starcra           31 (  0.00%)             6097 (  0.00%)    196.68
   everque           82 (  0.00%)            15175 (  0.00%)    185.06
   unreal            14 (  0.00%)             2265 (  0.00%)    161.79
   quake             28 (  0.00%)             3047 (  0.00%)    108.82
   cuseeme            4 (  0.00%)              624 (  0.00%)    156.00
   other         926360 (  7.88%)        503362945 (  6.25%)    543.38
  icmp           435063 (  3.70%)         37832721 (  0.47%)     86.96
  ipip              323 (  0.00%)            39624 (  0.00%)    122.67
  ipsec             175 (  0.00%)            27690 (  0.00%)    158.23
  ip6             26280 (  0.22%)          6003881 (  0.07%)    228.46
  other           20066 (  0.17%)          3855531 (  0.05%)    192.14
  frag            40138 (  0.34%)         43993097 (  0.55%)   1096.05
 ip6              26084 (  0.22%)          5806441 (  0.07%)    222.61
  tcp6             5020 (  0.04%)          1762755 (  0.02%)    351.15
   http(s)          240 (  0.00%)            27401 (  0.00%)    114.17
   http(c)         2227 (  0.02%)           200472 (  0.00%)     90.02
   smtp             228 (  0.00%)            87839 (  0.00%)    385.26
   imap              65 (  0.00%)            15136 (  0.00%)    232.86
   ssh                2 (  0.00%)              172 (  0.00%)     86.00
   bgp              362 (  0.00%)            30043 (  0.00%)     82.99
   other           1896 (  0.02%)          1401692 (  0.02%)    739.29
  udp6            16495 (  0.14%)          2634620 (  0.03%)    159.72
   dns            13740 (  0.12%)          2068802 (  0.03%)    150.57
   other           2755 (  0.02%)           565818 (  0.01%)    205.38
  icmp6            3613 (  0.03%)           527860 (  0.01%)    146.10
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            926 (  0.01%)           877126 (  0.01%)    947.22


tcpdump file: 200903311045.dump.gz (290.99 MB)