Traffic Trace Info


DumpFile: 200903312100.dump
FileSize: 1417.28MB
Id: 200903312100
StartTime: Tue Mar 31 21:00:01 2009
EndTime: Tue Mar 31 21:15:01 2009
TotalTime: 899.95 seconds
TotalCapSize: 1101.45MB CapLen: 96 bytes
# of packets: 20687271 (14809.74MB)
AvgRate: 137.99Mbps stddev:14.75M

IP flow (unique src/dst pair) Information

# of flows: 845223 (avg. 24.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 3.4% 3.3% 2.5% 1.6% 1.6% 1.4% 1.3% 1.2% 1.2%

IP address Information

# of IPv4 addresses: 546378
Top 10 bandwidth usage (bytes/total in %):
9.0% 8.3% 7.1% 7.0% 6.9% 6.8% 6.1% 3.5% 3.4% 3.4%
# of IPv6 addresses: 2154
Top 10 bandwidth usage (bytes/total in %):
44.8% 44.7% 18.0% 9.2% 9.1% 5.7% 5.1% 3.5% 3.5% 3.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3814795
 [   64-  127]:    4681856
 [  128-  255]:    1297773
 [  256-  511]:     453303
 [  512- 1023]:     370922
 [ 1024- 2047]:   10068622


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         20687271 (100.00%)      15529141932 (100.00%)    750.66
 ip            20564966 ( 99.41%)      15515067914 ( 99.91%)    754.44
  tcp          14585420 ( 70.50%)      12717396401 ( 81.89%)    871.93
   http(s)      5750619 ( 27.80%)       7867095462 ( 50.66%)   1368.04
   http(c)      3287435 ( 15.89%)        357431828 (  2.30%)    108.73
   squid         808190 (  3.91%)        675437084 (  4.35%)    835.74
   smtp          408557 (  1.97%)        109622512 (  0.71%)    268.32
   ftp           620167 (  3.00%)        601897776 (  3.88%)    970.54
   pop3           13088 (  0.06%)         12188976 (  0.08%)    931.31
   imap           22120 (  0.11%)          2145152 (  0.01%)     96.98
   telnet         11244 (  0.05%)          2665250 (  0.02%)    237.04
   ssh           204762 (  0.99%)        257293799 (  1.66%)   1256.55
   dns            18971 (  0.09%)          3434251 (  0.02%)    181.03
   bgp              135 (  0.00%)            45740 (  0.00%)    338.81
   napster           78 (  0.00%)             8216 (  0.00%)    105.33
   realaud           49 (  0.00%)             7850 (  0.00%)    160.20
   rtsp             162 (  0.00%)            50313 (  0.00%)    310.57
   icecast          327 (  0.00%)            42340 (  0.00%)    129.48
   hotline           36 (  0.00%)             4159 (  0.00%)    115.53
   other        3439131 ( 16.62%)       2828004753 ( 18.21%)    822.30
  udp           5022516 ( 24.28%)       2660644281 ( 17.13%)    529.74
   dns          1750444 (  8.46%)        323854855 (  2.09%)    185.01
   realaud        14937 (  0.07%)          6483274 (  0.04%)    434.04
   halflif           45 (  0.00%)             4433 (  0.00%)     98.51
   starcra           40 (  0.00%)             7233 (  0.00%)    180.82
   everque           75 (  0.00%)            15466 (  0.00%)    206.21
   unreal            16 (  0.00%)             2762 (  0.00%)    172.62
   quake             27 (  0.00%)             2593 (  0.00%)     96.04
   other        3256747 ( 15.74%)       2330119759 ( 15.00%)    715.47
  icmp           912565 (  4.41%)        128703707 (  0.83%)    141.04
  ipip              290 (  0.00%)            36008 (  0.00%)    124.17
  ipsec             160 (  0.00%)            25112 (  0.00%)    156.95
  ip6             26074 (  0.13%)          4743058 (  0.03%)    181.91
  other           17941 (  0.09%)          3519347 (  0.02%)    196.16
  frag            57752 (  0.28%)         63293370 (  0.41%)   1095.95
 ip6             122305 (  0.59%)         14074018 (  0.09%)    115.07
  tcp6            98322 (  0.48%)         10061104 (  0.06%)    102.33
   http(s)           66 (  0.00%)            52887 (  0.00%)    801.32
   http(c)         9315 (  0.05%)           769558 (  0.00%)     82.61
   smtp             444 (  0.00%)           188464 (  0.00%)    424.47
   ssh                2 (  0.00%)              172 (  0.00%)     86.00
   dns               17 (  0.00%)             1925 (  0.00%)    113.24
   bgp              378 (  0.00%)            32580 (  0.00%)     86.19
   other          88100 (  0.43%)          9015518 (  0.06%)    102.33
  udp6            18821 (  0.09%)          3054939 (  0.02%)    162.32
   dns            16882 (  0.08%)          2706956 (  0.02%)    160.35
   other           1939 (  0.01%)           347983 (  0.00%)    179.47
  icmp6            4684 (  0.02%)           583804 (  0.00%)    124.64
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            448 (  0.00%)           370091 (  0.00%)    826.10


tcpdump file: 200903312100.dump.gz (483.62 MB)