Traffic Trace Info


DumpFile: 200904010830.dump
FileSize: 653.47MB
Id: 200904010830
StartTime: Wed Apr 1 08:30:00 2009
EndTime: Wed Apr 1 08:45:00 2009
TotalTime: 900.09 seconds
TotalCapSize: 509.35MB CapLen: 96 bytes
# of packets: 9444452 (6632.88MB)
AvgRate: 61.82Mbps stddev:9.65M

IP flow (unique src/dst pair) Information

# of flows: 595906 (avg. 15.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 3.0% 2.9% 2.5% 2.4% 2.1% 1.9% 1.9% 1.8% 1.6%

IP address Information

# of IPv4 addresses: 398504
Top 10 bandwidth usage (bytes/total in %):
10.3% 8.3% 6.4% 6.4% 6.2% 4.1% 4.1% 3.6% 3.2% 3.2%
# of IPv6 addresses: 881
Top 10 bandwidth usage (bytes/total in %):
23.8% 23.8% 21.9% 21.7% 10.7% 8.9% 8.9% 6.7% 4.3% 3.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    1764187
 [   64-  127]:    2251855
 [  128-  255]:     484028
 [  256-  511]:     300563
 [  512- 1023]:     233810
 [ 1024- 2047]:    4410009


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total          9444452 (100.00%)       6955075409 (100.00%)    736.42
 ip             9411839 ( 99.65%)       6949762519 ( 99.92%)    738.41
  tcp           7044474 ( 74.59%)       6050042060 ( 86.99%)    858.84
   http(s)      3158952 ( 33.45%)       4213505080 ( 60.58%)   1333.83
   http(c)      1274275 ( 13.49%)        116867621 (  1.68%)     91.71
   squid         694677 (  7.36%)        506291243 (  7.28%)    728.82
   smtp          224146 (  2.37%)         49722919 (  0.71%)    221.83
   ftp            84201 (  0.89%)         72025124 (  1.04%)    855.40
   pop3            8013 (  0.08%)          2460072 (  0.04%)    307.01
   imap            4273 (  0.05%)          2865312 (  0.04%)    670.56
   telnet           638 (  0.01%)            51363 (  0.00%)     80.51
   ssh            40606 (  0.43%)         15495298 (  0.22%)    381.60
   dns            16103 (  0.17%)          5015758 (  0.07%)    311.48
   bgp              136 (  0.00%)            35231 (  0.00%)    259.05
   realaud            8 (  0.00%)              592 (  0.00%)     74.00
   rtsp              15 (  0.00%)             2865 (  0.00%)    191.00
   icecast          141 (  0.00%)            16155 (  0.00%)    114.57
   other        1538276 ( 16.29%)       1065686587 ( 15.32%)    692.78
  udp           1819353 ( 19.26%)        806709793 ( 11.60%)    443.40
   dns           815916 (  8.64%)        187471378 (  2.70%)    229.77
   realaud            9 (  0.00%)             1063 (  0.00%)    118.11
   halflif           23 (  0.00%)             2612 (  0.00%)    113.57
   starcra           13 (  0.00%)             2544 (  0.00%)    195.69
   everque           46 (  0.00%)             9427 (  0.00%)    204.93
   unreal            12 (  0.00%)             2636 (  0.00%)    219.67
   quake             11 (  0.00%)             1446 (  0.00%)    131.45
   cuseeme            2 (  0.00%)              144 (  0.00%)     72.00
   other        1003154 ( 10.62%)        619082380 (  8.90%)    617.14
  icmp           507401 (  5.37%)         87645622 (  1.26%)    172.73
  ipip              307 (  0.00%)            37098 (  0.00%)    120.84
  ipsec             110 (  0.00%)            17380 (  0.00%)    158.00
  ip6             21246 (  0.22%)          2914501 (  0.04%)    137.18
  other           18948 (  0.20%)          2396065 (  0.03%)    126.45
  frag            41480 (  0.44%)         45559625 (  0.66%)   1098.35
 ip6              32613 (  0.35%)          5312890 (  0.08%)    162.91
  tcp6            17609 (  0.19%)          3266632 (  0.05%)    185.51
   http(s)           22 (  0.00%)             7140 (  0.00%)    324.55
   http(c)         2043 (  0.02%)           190666 (  0.00%)     93.33
   smtp             131 (  0.00%)            47583 (  0.00%)    363.23
   dns                6 (  0.00%)              552 (  0.00%)     92.00
   bgp              363 (  0.00%)            30642 (  0.00%)     84.41
   other          15044 (  0.16%)          2990049 (  0.04%)    198.75
  udp6             9630 (  0.10%)          1402988 (  0.02%)    145.69
   dns             9582 (  0.10%)          1397677 (  0.02%)    145.86
   starcra            1 (  0.00%)              123 (  0.00%)    123.00
   quake              1 (  0.00%)              116 (  0.00%)    116.00
   other             46 (  0.00%)             5072 (  0.00%)    110.26
  icmp6            5344 (  0.06%)           639190 (  0.01%)    119.61
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00


tcpdump file: 200904010830.dump.gz (227.76 MB)