Traffic Trace Info


DumpFile: 200904010730.dump
FileSize: 799.81MB
Id: 200904010730
StartTime: Wed Apr 1 07:30:00 2009
EndTime: Wed Apr 1 07:45:00 2009
TotalTime: 900.59 seconds
TotalCapSize: 629.07MB CapLen: 96 bytes
# of packets: 11189350 (8060.80MB)
AvgRate: 75.08Mbps stddev:11.86M

IP flow (unique src/dst pair) Information

# of flows: 705527 (avg. 15.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
21.3% 2.7% 2.6% 2.4% 2.0% 1.3% 1.3% 1.1% 1.1% 1.0%

IP address Information

# of IPv4 addresses: 432805
Top 10 bandwidth usage (bytes/total in %):
30.2% 21.9% 8.5% 7.4% 6.1% 4.4% 3.8% 2.7% 2.7% 2.6%
# of IPv6 addresses: 901
Top 10 bandwidth usage (bytes/total in %):
28.3% 27.8% 12.4% 10.9% 10.1% 8.1% 3.9% 3.9% 3.7% 3.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    1922175
 [   64-  127]:    2880584
 [  128-  255]:     512515
 [  256-  511]:     306856
 [  512- 1023]:     266166
 [ 1024- 2047]:    5301054


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         11189350 (100.00%)       8452361808 (100.00%)    755.39
 ip            11163498 ( 99.77%)       8447808955 ( 99.95%)    756.73
  tcp           9128509 ( 81.58%)       7847189639 ( 92.84%)    859.64
   http(s)      4318208 ( 38.59%)       5908378385 ( 69.90%)   1368.25
   http(c)      1939317 ( 17.33%)        153451552 (  1.82%)     79.13
   squid         684395 (  6.12%)        514287040 (  6.08%)    751.45
   smtp          313367 (  2.80%)         48825051 (  0.58%)    155.81
   nntp               2 (  0.00%)              124 (  0.00%)     62.00
   ftp            73118 (  0.65%)         61142564 (  0.72%)    836.22
   pop3            4261 (  0.04%)          1741973 (  0.02%)    408.82
   imap            1941 (  0.02%)           287890 (  0.00%)    148.32
   telnet           530 (  0.00%)            40763 (  0.00%)     76.91
   ssh            61283 (  0.55%)          6326983 (  0.07%)    103.24
   dns            16933 (  0.15%)          5134855 (  0.06%)    303.25
   bgp              192 (  0.00%)            89449 (  0.00%)    465.88
   napster            8 (  0.00%)              775 (  0.00%)     96.88
   realaud          224 (  0.00%)            13952 (  0.00%)     62.29
   rtsp              19 (  0.00%)             9774 (  0.00%)    514.42
   icecast          124 (  0.00%)             8747 (  0.00%)     70.54
   hotline           10 (  0.00%)             1827 (  0.00%)    182.70
   other        1714510 ( 15.32%)       1147443915 ( 13.58%)    669.25
  udp           1438718 ( 12.86%)        502298356 (  5.94%)    349.13
   dns           845329 (  7.55%)        191368104 (  2.26%)    226.38
   realaud            8 (  0.00%)              730 (  0.00%)     91.25
   halflif           28 (  0.00%)             3028 (  0.00%)    108.14
   starcra           37 (  0.00%)             6985 (  0.00%)    188.78
   everque           49 (  0.00%)            10390 (  0.00%)    212.04
   unreal            12 (  0.00%)             6418 (  0.00%)    534.83
   quake             18 (  0.00%)             2373 (  0.00%)    131.83
   cuseeme            4 (  0.00%)              327 (  0.00%)     81.75
   other         593031 (  5.30%)        310729985 (  3.68%)    523.97
  icmp           553079 (  4.94%)         91806138 (  1.09%)    165.99
  ipip              297 (  0.00%)            35566 (  0.00%)    119.75
  ipsec             110 (  0.00%)            17380 (  0.00%)    158.00
  ip6             23005 (  0.21%)          3962497 (  0.05%)    172.25
  other           19780 (  0.18%)          2499379 (  0.03%)    126.36
  frag            43508 (  0.39%)         47698520 (  0.56%)   1096.32
 ip6              25852 (  0.23%)          4552853 (  0.05%)    176.11
  tcp6            10947 (  0.10%)          2476845 (  0.03%)    226.26
   http(s)          221 (  0.00%)           182614 (  0.00%)    826.31
   http(c)         2614 (  0.02%)           236949 (  0.00%)     90.65
   smtp             255 (  0.00%)           103154 (  0.00%)    404.53
   ftp               12 (  0.00%)             1117 (  0.00%)     93.08
   ssh                4 (  0.00%)              344 (  0.00%)     86.00
   dns                5 (  0.00%)              625 (  0.00%)    125.00
   bgp              375 (  0.00%)            38044 (  0.00%)    101.45
   other           7461 (  0.07%)          1913998 (  0.02%)    256.53
  udp6             9378 (  0.08%)          1423074 (  0.02%)    151.75
   dns             9291 (  0.08%)          1413469 (  0.02%)    152.13
   other             87 (  0.00%)             9605 (  0.00%)    110.40
  icmp6            5497 (  0.05%)           648854 (  0.01%)    118.04
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00


tcpdump file: 200904010730.dump.gz (266.11 MB)