Traffic Trace Info


DumpFile: 200904010645.dump
FileSize: 657.17MB
Id: 200904010645
StartTime: Wed Apr 1 06:45:01 2009
EndTime: Wed Apr 1 07:00:00 2009
TotalTime: 899.80 seconds
TotalCapSize: 514.14MB CapLen: 96 bytes
# of packets: 9372710 (6320.84MB)
AvgRate: 58.95Mbps stddev:8.57M

IP flow (unique src/dst pair) Information

# of flows: 773580 (avg. 12.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 3.3% 2.5% 2.3% 1.9% 1.7% 1.5% 1.2% 0.9% 0.8%

IP address Information

# of IPv4 addresses: 489054
Top 10 bandwidth usage (bytes/total in %):
14.7% 10.0% 9.9% 6.6% 5.6% 4.0% 3.4% 3.4% 3.3% 3.1%
# of IPv6 addresses: 916
Top 10 bandwidth usage (bytes/total in %):
31.5% 31.2% 13.1% 9.4% 6.3% 5.2% 4.1% 4.0% 3.7% 3.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    1945785
 [   64-  127]:    2225746
 [  128-  255]:     536281
 [  256-  511]:     328667
 [  512- 1023]:     220575
 [ 1024- 2047]:    4115656


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total          9372710 (100.00%)       6627881127 (100.00%)    707.15
 ip             9351669 ( 99.78%)       6623830572 ( 99.94%)    708.30
  tcp           7269951 ( 77.57%)       6056282019 ( 91.38%)    833.06
   http(s)      3305020 ( 35.26%)       4417411248 ( 66.65%)   1336.58
   http(c)      1295002 ( 13.82%)        103497672 (  1.56%)     79.92
   squid         638564 (  6.81%)        439734445 (  6.63%)    688.63
   smtp          274668 (  2.93%)         50378277 (  0.76%)    183.42
   ftp            86127 (  0.92%)         71466444 (  1.08%)    829.78
   pop3            3949 (  0.04%)          1838235 (  0.03%)    465.49
   imap            1559 (  0.02%)           291058 (  0.00%)    186.70
   telnet          2085 (  0.02%)           168680 (  0.00%)     80.90
   ssh            91462 (  0.98%)         13011431 (  0.20%)    142.26
   dns            15817 (  0.17%)          1776345 (  0.03%)    112.31
   bgp              127 (  0.00%)            43739 (  0.00%)    344.40
   napster            4 (  0.00%)              240 (  0.00%)     60.00
   realaud           10 (  0.00%)              740 (  0.00%)     74.00
   rtsp               1 (  0.00%)               60 (  0.00%)     60.00
   icecast           92 (  0.00%)             7544 (  0.00%)     82.00
   hotline            5 (  0.00%)              308 (  0.00%)     61.60
   other        1555276 ( 16.59%)        956642077 ( 14.43%)    615.09
  udp           1430659 ( 15.26%)        465475927 (  7.02%)    325.36
   dns           887710 (  9.47%)        204510942 (  3.09%)    230.38
   realaud            5 (  0.00%)              419 (  0.00%)     83.80
   halflif           43 (  0.00%)             6354 (  0.00%)    147.77
   starcra           52 (  0.00%)            10904 (  0.00%)    209.69
   everque           95 (  0.00%)            15465 (  0.00%)    162.79
   unreal            15 (  0.00%)             3185 (  0.00%)    212.33
   quake             13 (  0.00%)             1111 (  0.00%)     85.46
   cuseeme            2 (  0.00%)              160 (  0.00%)     80.00
   other         542564 (  5.79%)        260777853 (  3.93%)    480.64
  icmp           615450 (  6.57%)         96507578 (  1.46%)    156.81
  ipip              357 (  0.00%)            44262 (  0.00%)    123.98
  ipsec             110 (  0.00%)            17412 (  0.00%)    158.29
  ip6             22098 (  0.24%)          3825872 (  0.06%)    173.13
  other           13044 (  0.14%)          1677502 (  0.03%)    128.60
  frag            48549 (  0.52%)         53113732 (  0.80%)   1094.02
 ip6              21041 (  0.22%)          4050555 (  0.06%)    192.51
  tcp6             4632 (  0.05%)          1755852 (  0.03%)    379.07
   http(s)           32 (  0.00%)            35709 (  0.00%)   1115.91
   http(c)         2332 (  0.02%)           211746 (  0.00%)     90.80
   smtp             194 (  0.00%)            92513 (  0.00%)    476.87
   imap               2 (  0.00%)              225 (  0.00%)    112.50
   ssh                2 (  0.00%)              172 (  0.00%)     86.00
   bgp              379 (  0.00%)            32705 (  0.00%)     86.29
   other           1691 (  0.02%)          1382782 (  0.02%)    817.73
  udp6            10672 (  0.11%)          1621557 (  0.02%)    151.94
   dns            10603 (  0.11%)          1613838 (  0.02%)    152.21
   other             69 (  0.00%)             7719 (  0.00%)    111.87
  icmp6            5703 (  0.06%)           664960 (  0.01%)    116.60
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              4 (  0.00%)             4106 (  0.00%)   1026.50


tcpdump file: 200904010645.dump.gz (230.04 MB)