Traffic Trace Info


DumpFile: 200904010430.dump
FileSize: 782.27MB
Id: 200904010430
StartTime: Wed Apr 1 04:30:01 2009
EndTime: Wed Apr 1 04:45:01 2009
TotalTime: 899.95 seconds
TotalCapSize: 611.44MB CapLen: 96 bytes
# of packets: 11195551 (7632.69MB)
AvgRate: 72.17Mbps stddev:10.91M

IP flow (unique src/dst pair) Information

# of flows: 887184 (avg. 12.62 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.6% 2.3% 2.1% 1.6% 1.5% 1.3% 1.2% 1.2% 0.9%

IP address Information

# of IPv4 addresses: 530859
Top 10 bandwidth usage (bytes/total in %):
16.6% 13.1% 7.8% 7.4% 4.5% 4.4% 4.2% 3.0% 2.9% 2.6%
# of IPv6 addresses: 1075
Top 10 bandwidth usage (bytes/total in %):
40.9% 40.5% 17.2% 17.0% 5.8% 5.6% 4.3% 2.5% 2.3% 2.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2353562
 [   64-  127]:    2589239
 [  128-  255]:     683909
 [  256-  511]:     331466
 [  512- 1023]:     241221
 [ 1024- 2047]:    4996154


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         11195551 (100.00%)       8003454595 (100.00%)    714.88
 ip            11141088 ( 99.51%)       7996349326 ( 99.91%)    717.74
  tcp           8305360 ( 74.18%)       7188730483 ( 89.82%)    865.55
   http(s)      3637711 ( 32.49%)       4943031457 ( 61.76%)   1358.83
   http(c)      1697156 ( 15.16%)        127993359 (  1.60%)     75.42
   squid         864261 (  7.72%)        742769543 (  9.28%)    859.43
   smtp          331777 (  2.96%)         60276505 (  0.75%)    181.68
   ftp            50854 (  0.45%)         40000501 (  0.50%)    786.58
   pop3            4364 (  0.04%)          1930752 (  0.02%)    442.43
   imap            1606 (  0.01%)           220429 (  0.00%)    137.25
   telnet          2551 (  0.02%)           168956 (  0.00%)     66.23
   ssh            19282 (  0.17%)          4007389 (  0.05%)    207.83
   dns            19190 (  0.17%)          4546170 (  0.06%)    236.90
   bgp              133 (  0.00%)            45241 (  0.00%)    340.16
   napster            5 (  0.00%)              300 (  0.00%)     60.00
   realaud            8 (  0.00%)              592 (  0.00%)     74.00
   rtsp              82 (  0.00%)            22666 (  0.00%)    276.41
   icecast           74 (  0.00%)             4644 (  0.00%)     62.76
   other        1676188 ( 14.97%)       1263698601 ( 15.79%)    753.91
  udp           1732214 ( 15.47%)        592530361 (  7.40%)    342.07
   dns          1047559 (  9.36%)        227076898 (  2.84%)    216.77
   realaud           23 (  0.00%)             3451 (  0.00%)    150.04
   halflif           31 (  0.00%)             3101 (  0.00%)    100.03
   starcra           56 (  0.00%)            11676 (  0.00%)    208.50
   everque           69 (  0.00%)            13193 (  0.00%)    191.20
   unreal            34 (  0.00%)             7066 (  0.00%)    207.82
   quake             19 (  0.00%)             2869 (  0.00%)    151.00
   cuseeme           13 (  0.00%)             2255 (  0.00%)    173.46
   other         684277 (  6.11%)        365291915 (  4.56%)    533.84
  icmp          1019796 (  9.11%)        135648996 (  1.69%)    133.02
  ipip              284 (  0.00%)            35710 (  0.00%)    125.74
  ipsec             110 (  0.00%)            17308 (  0.00%)    157.35
  ip6             74556 (  0.67%)         78224442 (  0.98%)   1049.20
  other            8768 (  0.08%)          1162026 (  0.01%)    132.53
  frag            51261 (  0.46%)         56321222 (  0.70%)   1098.71
 ip6              54463 (  0.49%)          7105269 (  0.09%)    130.46
  tcp6            38301 (  0.34%)          4557020 (  0.06%)    118.98
   http(s)            1 (  0.00%)               74 (  0.00%)     74.00
   http(c)        35921 (  0.32%)          3109997 (  0.04%)     86.58
   squid              2 (  0.00%)              148 (  0.00%)     74.00
   smtp             317 (  0.00%)           103824 (  0.00%)    327.52
   bgp              391 (  0.00%)            35516 (  0.00%)     90.83
   icecast            1 (  0.00%)               74 (  0.00%)     74.00
   other           1668 (  0.01%)          1307387 (  0.02%)    783.81
  udp6            11925 (  0.11%)          2025842 (  0.03%)    169.88
   dns            11767 (  0.11%)          2004652 (  0.03%)    170.36
   other            158 (  0.00%)            21190 (  0.00%)    134.11
  icmp6            4200 (  0.04%)           514041 (  0.01%)    122.39
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              7 (  0.00%)             4286 (  0.00%)    612.29


tcpdump file: 200904010430.dump.gz (274.94 MB)