Traffic Trace Info


DumpFile: 200904010630.dump
FileSize: 667.82MB
Id: 200904010630
StartTime: Wed Apr 1 06:30:00 2009
EndTime: Wed Apr 1 06:45:01 2009
TotalTime: 900.33 seconds
TotalCapSize: 523.54MB CapLen: 96 bytes
# of packets: 9454937 (6314.64MB)
AvgRate: 58.84Mbps stddev:9.64M

IP flow (unique src/dst pair) Information

# of flows: 675893 (avg. 13.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 3.7% 2.7% 2.4% 1.4% 1.4% 1.3% 1.3% 1.2% 1.0%

IP address Information

# of IPv4 addresses: 436863
Top 10 bandwidth usage (bytes/total in %):
13.4% 11.7% 10.7% 6.4% 5.8% 4.6% 3.8% 3.7% 3.7% 3.3%
# of IPv6 addresses: 952
Top 10 bandwidth usage (bytes/total in %):
75.6% 75.6% 7.4% 7.2% 3.8% 2.3% 2.0% 1.0% 0.9% 0.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    1783510
 [   64-  127]:    2494070
 [  128-  255]:     509344
 [  256-  511]:     324691
 [  512- 1023]:     254837
 [ 1024- 2047]:    4088485


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total          9454937 (100.00%)       6621378570 (100.00%)    700.31
 ip             9422587 ( 99.66%)       6603356712 ( 99.73%)    700.80
  tcp           7011684 ( 74.16%)       6053711545 ( 91.43%)    863.37
   http(s)      3292811 ( 34.83%)       4400583706 ( 66.46%)   1336.42
   http(c)      1196933 ( 12.66%)         98827351 (  1.49%)     82.57
   squid         549155 (  5.81%)        418179847 (  6.32%)    761.50
   smtp          295075 (  3.12%)         85161156 (  1.29%)    288.61
   ftp            77856 (  0.82%)         67945748 (  1.03%)    872.71
   pop3            5279 (  0.06%)          3796351 (  0.06%)    719.14
   imap            2908 (  0.03%)           293648 (  0.00%)    100.98
   telnet          2907 (  0.03%)           477462 (  0.01%)    164.25
   ssh            94585 (  1.00%)         13846822 (  0.21%)    146.40
   dns            16955 (  0.18%)          3799966 (  0.06%)    224.12
   bgp              154 (  0.00%)            59420 (  0.00%)    385.84
   napster            3 (  0.00%)              184 (  0.00%)     61.33
   realaud            9 (  0.00%)              666 (  0.00%)     74.00
   icecast          105 (  0.00%)             6832 (  0.00%)     65.07
   other        1476865 ( 15.62%)        960723914 ( 14.51%)    650.52
  udp           1400907 ( 14.82%)        422305310 (  6.38%)    301.45
   dns           893572 (  9.45%)        207628359 (  3.14%)    232.36
   realaud            7 (  0.00%)              850 (  0.00%)    121.43
   halflif           47 (  0.00%)             6663 (  0.00%)    141.77
   starcra           52 (  0.00%)            11236 (  0.00%)    216.08
   everque           59 (  0.00%)            11353 (  0.00%)    192.42
   unreal            20 (  0.00%)             4399 (  0.00%)    219.95
   quake             21 (  0.00%)             2771 (  0.00%)    131.95
   cuseeme            4 (  0.00%)              562 (  0.00%)    140.50
   other         506952 (  5.36%)        214486391 (  3.24%)    423.09
  icmp           978523 ( 10.35%)        122236784 (  1.85%)    124.92
  ipip              296 (  0.00%)            37088 (  0.00%)    125.30
  ipsec             110 (  0.00%)            17380 (  0.00%)    158.00
  ip6             21175 (  0.22%)          3733998 (  0.06%)    176.34
  other            9892 (  0.10%)          1314607 (  0.02%)    132.90
  frag            48588 (  0.51%)         53153221 (  0.80%)   1093.96
 ip6              32350 (  0.34%)         18021858 (  0.27%)    557.09
  tcp6            14958 (  0.16%)         15583845 (  0.24%)   1041.84
   http(s)         9159 (  0.10%)         13631246 (  0.21%)   1488.29
   http(c)         3235 (  0.03%)           292328 (  0.00%)     90.36
   smtp             410 (  0.00%)           172009 (  0.00%)    419.53
   dns               10 (  0.00%)             1120 (  0.00%)    112.00
   bgp              365 (  0.00%)            31149 (  0.00%)     85.34
   other           1779 (  0.02%)          1455993 (  0.02%)    818.43
  udp6             9436 (  0.10%)          1462143 (  0.02%)    154.95
   dns             9379 (  0.10%)          1455750 (  0.02%)    155.21
   other             57 (  0.00%)             6393 (  0.00%)    112.16
  icmp6            7911 (  0.08%)           950596 (  0.01%)    120.16
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             15 (  0.00%)            21194 (  0.00%)   1412.93


tcpdump file: 200904010630.dump.gz (229.97 MB)