Traffic Trace Info


DumpFile: 200904010530.dump
FileSize: 730.06MB
Id: 200904010530
StartTime: Wed Apr 1 05:30:00 2009
EndTime: Wed Apr 1 05:45:01 2009
TotalTime: 900.38 seconds
TotalCapSize: 570.26MB CapLen: 96 bytes
# of packets: 10471488 (7486.64MB)
AvgRate: 69.76Mbps stddev:11.31M

IP flow (unique src/dst pair) Information

# of flows: 762783 (avg. 13.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.4% 2.3% 2.2% 2.2% 2.1% 1.9% 1.4% 1.4% 1.2%

IP address Information

# of IPv4 addresses: 464181
Top 10 bandwidth usage (bytes/total in %):
15.5% 14.4% 8.0% 6.3% 5.6% 5.4% 3.6% 3.5% 3.0% 2.4%
# of IPv6 addresses: 1001
Top 10 bandwidth usage (bytes/total in %):
27.0% 26.6% 18.9% 12.5% 8.8% 4.5% 4.2% 3.5% 3.1% 3.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2138383
 [   64-  127]:    2196822
 [  128-  255]:     613644
 [  256-  511]:     340275
 [  512- 1023]:     239271
 [ 1024- 2047]:    4943093


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         10471488 (100.00%)       7850314305 (100.00%)    749.68
 ip            10445343 ( 99.75%)       7845519384 ( 99.94%)    751.10
  tcp           8068233 ( 77.05%)       7034978998 ( 89.61%)    871.94
   http(s)      3869789 ( 36.96%)       5279306437 ( 67.25%)   1364.24
   http(c)      1561777 ( 14.91%)        121415616 (  1.55%)     77.74
   squid         697379 (  6.66%)        566181632 (  7.21%)    811.87
   smtp          329462 (  3.15%)         61516721 (  0.78%)    186.72
   ftp           104445 (  1.00%)         58645759 (  0.75%)    561.50
   pop3            4595 (  0.04%)          1712618 (  0.02%)    372.71
   imap            1814 (  0.02%)           216977 (  0.00%)    119.61
   telnet          3012 (  0.03%)           197929 (  0.00%)     65.71
   ssh            51404 (  0.49%)          5848664 (  0.07%)    113.78
   dns            20004 (  0.19%)          5424304 (  0.07%)    271.16
   bgp              139 (  0.00%)            48300 (  0.00%)    347.48
   napster            5 (  0.00%)              304 (  0.00%)     60.80
   realaud          117 (  0.00%)             7617 (  0.00%)     65.10
   rtsp              46 (  0.00%)             9930 (  0.00%)    215.87
   icecast           81 (  0.00%)             5220 (  0.00%)     64.44
   other        1424030 ( 13.60%)        934432930 ( 11.90%)    656.19
  udp           1770959 ( 16.91%)        704789768 (  8.98%)    397.97
   dns          1019367 (  9.73%)        225017179 (  2.87%)    220.74
   realaud           13 (  0.00%)             1987 (  0.00%)    152.85
   halflif           46 (  0.00%)             4890 (  0.00%)    106.30
   starcra           55 (  0.00%)            10960 (  0.00%)    199.27
   everque           60 (  0.00%)            11379 (  0.00%)    189.65
   unreal            22 (  0.00%)             3579 (  0.00%)    162.68
   quake             22 (  0.00%)             3051 (  0.00%)    138.68
   cuseeme            4 (  0.00%)              357 (  0.00%)     89.25
   other         751188 (  7.17%)        479587123 (  6.11%)    638.44
  icmp           573078 (  5.47%)         96794800 (  1.23%)    168.90
  ipip              302 (  0.00%)            37528 (  0.00%)    124.26
  ipsec             114 (  0.00%)            17940 (  0.00%)    157.37
  ip6             23597 (  0.23%)          7697047 (  0.10%)    326.19
  other            9060 (  0.09%)          1203303 (  0.02%)    132.81
  frag            52426 (  0.50%)         57297818 (  0.73%)   1092.93
 ip6              26145 (  0.25%)          4794921 (  0.06%)    183.40
  tcp6             5383 (  0.05%)          1836725 (  0.02%)    341.21
   http(c)         2881 (  0.03%)           263919 (  0.00%)     91.61
   smtp             323 (  0.00%)           150387 (  0.00%)    465.59
   ssh                4 (  0.00%)              344 (  0.00%)     86.00
   dns                4 (  0.00%)              457 (  0.00%)    114.25
   bgp              380 (  0.00%)            32829 (  0.00%)     86.39
   other           1791 (  0.02%)          1388789 (  0.02%)    775.43
  udp6            10767 (  0.10%)          1739765 (  0.02%)    161.58
   dns            10668 (  0.10%)          1729139 (  0.02%)    162.09
   realaud            1 (  0.00%)              110 (  0.00%)    110.00
   other             98 (  0.00%)            10516 (  0.00%)    107.31
  icmp6            9955 (  0.10%)          1206379 (  0.02%)    121.18
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             10 (  0.00%)             7972 (  0.00%)    797.20


tcpdump file: 200904010530.dump.gz (258.33 MB)