Traffic Trace Info


DumpFile: 200904010445.dump
FileSize: 735.51MB
Id: 200904010445
StartTime: Wed Apr 1 04:45:01 2009
EndTime: Wed Apr 1 05:00:01 2009
TotalTime: 900.24 seconds
TotalCapSize: 574.19MB CapLen: 96 bytes
# of packets: 10571569 (7196.19MB)
AvgRate: 67.06Mbps stddev:10.49M

IP flow (unique src/dst pair) Information

# of flows: 821969 (avg. 12.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 3.3% 2.7% 2.2% 1.9% 1.1% 1.0% 1.0% 0.8% 0.7%

IP address Information

# of IPv4 addresses: 504863
Top 10 bandwidth usage (bytes/total in %):
16.3% 14.1% 8.5% 7.5% 6.0% 4.5% 4.5% 4.3% 3.6% 3.3%
# of IPv6 addresses: 1033
Top 10 bandwidth usage (bytes/total in %):
95.8% 93.8% 2.1% 0.7% 0.5% 0.4% 0.4% 0.3% 0.3% 0.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2280460
 [   64-  127]:    2315709
 [  128-  255]:     742008
 [  256-  511]:     342100
 [  512- 1023]:     205885
 [ 1024- 2047]:    4685407


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         10571569 (100.00%)       7545750370 (100.00%)    713.78
 ip            10494504 ( 99.27%)       7463042835 ( 98.90%)    711.14
  tcp           8066466 ( 76.30%)       6849784450 ( 90.78%)    849.17
   http(s)      3548953 ( 33.57%)       4838543074 ( 64.12%)   1363.37
   http(c)      1718622 ( 16.26%)        130533024 (  1.73%)     75.95
   squid         760300 (  7.19%)        640337378 (  8.49%)    842.22
   smtp          353469 (  3.34%)         61499882 (  0.82%)    173.99
   ftp            83170 (  0.79%)         56455228 (  0.75%)    678.79
   pop3            6390 (  0.06%)          1949176 (  0.03%)    305.04
   imap            1540 (  0.01%)           182336 (  0.00%)    118.40
   telnet          2641 (  0.02%)           175843 (  0.00%)     66.58
   ssh            14761 (  0.14%)          2241527 (  0.03%)    151.85
   dns            18214 (  0.17%)          2112282 (  0.03%)    115.97
   bgp              125 (  0.00%)            36319 (  0.00%)    290.55
   napster           17 (  0.00%)             1026 (  0.00%)     60.35
   realaud           15 (  0.00%)             1074 (  0.00%)     71.60
   rtsp             192 (  0.00%)           149999 (  0.00%)    781.24
   icecast           63 (  0.00%)             3990 (  0.00%)     63.33
   other        1557874 ( 14.74%)       1115555092 ( 14.78%)    716.08
  udp           1676081 ( 15.85%)        485776200 (  6.44%)    289.83
   dns          1093813 ( 10.35%)        226435266 (  3.00%)    207.01
   realaud            7 (  0.00%)              656 (  0.00%)     93.71
   halflif           42 (  0.00%)             4163 (  0.00%)     99.12
   starcra           59 (  0.00%)            11502 (  0.00%)    194.95
   everque           93 (  0.00%)            19141 (  0.00%)    205.82
   unreal            31 (  0.00%)             5474 (  0.00%)    176.58
   quake             23 (  0.00%)             2481 (  0.00%)    107.87
   cuseeme            8 (  0.00%)             1479 (  0.00%)    184.88
   other         581819 (  5.50%)        259137685 (  3.43%)    445.39
  icmp           716135 (  6.77%)        114493122 (  1.52%)    159.88
  ipip              354 (  0.00%)            42580 (  0.00%)    120.28
  ipsec             116 (  0.00%)            18368 (  0.00%)    158.34
  ip6             26436 (  0.25%)         11711057 (  0.16%)    443.00
  other            8916 (  0.08%)          1217058 (  0.02%)    136.50
  frag            53575 (  0.51%)         58827490 (  0.78%)   1098.04
 ip6              77065 (  0.73%)         82707535 (  1.10%)   1073.22
  tcp6            60124 (  0.57%)         80030378 (  1.06%)   1331.09
   http(s)            4 (  0.00%)              530 (  0.00%)    132.50
   http(c)         5292 (  0.05%)           469523 (  0.01%)     88.72
   smtp             428 (  0.00%)           174489 (  0.00%)    407.68
   ssh                2 (  0.00%)              172 (  0.00%)     86.00
   bgp              379 (  0.00%)            32908 (  0.00%)     86.83
   other          54019 (  0.51%)         79352756 (  1.05%)   1468.98
  udp6            11980 (  0.11%)          2060479 (  0.03%)    171.99
   dns            11839 (  0.11%)          2042384 (  0.03%)    172.51
   everque            1 (  0.00%)              103 (  0.00%)    103.00
   other            140 (  0.00%)            17992 (  0.00%)    128.51
  icmp6            4922 (  0.05%)           604326 (  0.01%)    122.78
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              9 (  0.00%)             8272 (  0.00%)    919.11


tcpdump file: 200904010445.dump.gz (262.78 MB)