Traffic Trace Info


DumpFile: 200904010715.dump
FileSize: 782.55MB
Id: 200904010715
StartTime: Wed Apr 1 07:15:01 2009
EndTime: Wed Apr 1 07:30:00 2009
TotalTime: 899.34 seconds
TotalCapSize: 615.26MB CapLen: 96 bytes
# of packets: 10961516 (7770.18MB)
AvgRate: 72.49Mbps stddev:12.91M

IP flow (unique src/dst pair) Information

# of flows: 707314 (avg. 15.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
17.8% 2.6% 2.3% 2.3% 2.1% 1.9% 1.5% 1.4% 1.4% 1.3%

IP address Information

# of IPv4 addresses: 448338
Top 10 bandwidth usage (bytes/total in %):
25.4% 18.3% 10.4% 8.5% 7.9% 3.6% 2.8% 2.6% 2.6% 2.3%
# of IPv6 addresses: 892
Top 10 bandwidth usage (bytes/total in %):
33.5% 33.2% 10.9% 9.8% 4.3% 4.2% 4.1% 3.9% 3.7% 3.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    1907440
 [   64-  127]:    2906343
 [  128-  255]:     489386
 [  256-  511]:     326785
 [  512- 1023]:     219461
 [ 1024- 2047]:    5112101


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         10961516 (100.00%)       8147624991 (100.00%)    743.29
 ip            10940863 ( 99.81%)       8143804064 ( 99.95%)    744.35
  tcp           8719045 ( 79.54%)       7549674322 ( 92.66%)    865.88
   http(s)      4063602 ( 37.07%)       5551362092 ( 68.13%)   1366.12
   http(c)      1809886 ( 16.51%)        142420623 (  1.75%)     78.69
   squid         638242 (  5.82%)        493441170 (  6.06%)    773.13
   smtp          284551 (  2.60%)         75872362 (  0.93%)    266.64
   nntp               2 (  0.00%)              120 (  0.00%)     60.00
   ftp            80728 (  0.74%)         65945890 (  0.81%)    816.89
   pop3            4502 (  0.04%)          2195655 (  0.03%)    487.71
   imap            4944 (  0.05%)           439052 (  0.01%)     88.81
   telnet           530 (  0.00%)            38778 (  0.00%)     73.17
   ssh            38685 (  0.35%)          5623554 (  0.07%)    145.37
   dns            14659 (  0.13%)          1568209 (  0.02%)    106.98
   bgp              143 (  0.00%)            41967 (  0.00%)    293.48
   realaud          137 (  0.00%)             8602 (  0.00%)     62.79
   icecast          112 (  0.00%)             7535 (  0.00%)     67.28
   hotline            2 (  0.00%)              124 (  0.00%)     62.00
   other        1778281 ( 16.22%)       1210705823 ( 14.86%)    680.83
  udp           1379466 ( 12.58%)        478516700 (  5.87%)    346.89
   dns           791469 (  7.22%)        184475346 (  2.26%)    233.08
   realaud            5 (  0.00%)              426 (  0.00%)     85.20
   halflif           40 (  0.00%)             4315 (  0.00%)    107.88
   starcra           47 (  0.00%)             9466 (  0.00%)    201.40
   everque           64 (  0.00%)            13265 (  0.00%)    207.27
   unreal            11 (  0.00%)             2549 (  0.00%)    231.73
   quake             20 (  0.00%)             2180 (  0.00%)    109.00
   cuseeme            7 (  0.00%)              879 (  0.00%)    125.57
   other         587609 (  5.36%)        293841203 (  3.61%)    500.06
  icmp           799078 (  7.29%)        109173237 (  1.34%)    136.62
  ipip              352 (  0.00%)            44976 (  0.00%)    127.77
  ipsec             108 (  0.00%)            17064 (  0.00%)    158.00
  ip6             21742 (  0.20%)          3753645 (  0.05%)    172.64
  other           21072 (  0.19%)          2624120 (  0.03%)    124.53
  frag            45571 (  0.42%)         50057364 (  0.61%)   1098.45
 ip6              20651 (  0.19%)          3820807 (  0.05%)    185.02
  tcp6             6345 (  0.06%)          1792103 (  0.02%)    282.44
   http(c)         3930 (  0.04%)           329187 (  0.00%)     83.76
   smtp             118 (  0.00%)            30181 (  0.00%)    255.77
   bgp              366 (  0.00%)            30553 (  0.00%)     83.48
   other           1931 (  0.02%)          1402182 (  0.02%)    726.14
  udp6             8851 (  0.08%)          1386783 (  0.02%)    156.68
   dns             8767 (  0.08%)          1377333 (  0.02%)    157.10
   other             84 (  0.00%)             9450 (  0.00%)    112.50
  icmp6            5425 (  0.05%)           637841 (  0.01%)    117.57
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00


tcpdump file: 200904010715.dump.gz (258.96 MB)