Traffic Trace Info


DumpFile: 200904011030.dump
FileSize: 980.49MB
Id: 200904011030
StartTime: Wed Apr 1 10:30:00 2009
EndTime: Wed Apr 1 10:45:00 2009
TotalTime: 900.30 seconds
TotalCapSize: 767.01MB CapLen: 96 bytes
# of packets: 13988864 (9912.65MB)
AvgRate: 92.38Mbps stddev:13.96M

IP flow (unique src/dst pair) Information

# of flows: 752612 (avg. 18.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.2% 3.6% 3.3% 2.2% 2.1% 1.4% 1.2% 1.1% 1.0% 0.9%

IP address Information

# of IPv4 addresses: 449233
Top 10 bandwidth usage (bytes/total in %):
14.7% 13.2% 9.6% 7.6% 7.2% 3.7% 3.7% 3.3% 3.3% 2.8%
# of IPv6 addresses: 1872
Top 10 bandwidth usage (bytes/total in %):
17.4% 16.6% 16.6% 12.2% 11.7% 9.5% 6.6% 6.3% 6.3% 5.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3124808
 [   64-  127]:    3082569
 [  128-  255]:     590685
 [  256-  511]:     365097
 [  512- 1023]:     344731
 [ 1024- 2047]:    6480974


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         13988864 (100.00%)      10394170426 (100.00%)    743.03
 ip            13953867 ( 99.75%)      10386532689 ( 99.93%)    744.35
  tcp          11618000 ( 83.05%)       9927022177 ( 95.51%)    854.45
   http(s)      4602267 ( 32.90%)       5967057270 ( 57.41%)   1296.55
   http(c)      2729125 ( 19.51%)        473874146 (  4.56%)    173.64
   squid         620918 (  4.44%)        504931479 (  4.86%)    813.20
   smtp          277658 (  1.98%)         85363742 (  0.82%)    307.44
   ftp           100133 (  0.72%)         86226287 (  0.83%)    861.12
   pop3           10672 (  0.08%)          3748964 (  0.04%)    351.29
   imap            6971 (  0.05%)          2798713 (  0.03%)    401.48
   telnet          3414 (  0.02%)           488281 (  0.00%)    143.02
   ssh            28356 (  0.20%)         12838309 (  0.12%)    452.75
   dns            15280 (  0.11%)          3594729 (  0.03%)    235.26
   bgp              150 (  0.00%)            46977 (  0.00%)    313.18
   realaud            9 (  0.00%)              652 (  0.00%)     72.44
   rtsp           49858 (  0.36%)         10420431 (  0.10%)    209.00
   icecast         1047 (  0.01%)            65038 (  0.00%)     62.12
   hotline           17 (  0.00%)             1316 (  0.00%)     77.41
   other        3172116 ( 22.68%)       2775565303 ( 26.70%)    874.99
  udp           1469358 ( 10.50%)        386574794 (  3.72%)    263.09
   dns           909731 (  6.50%)        208214929 (  2.00%)    228.88
   realaud           12 (  0.00%)              983 (  0.00%)     81.92
   halflif           28 (  0.00%)             2698 (  0.00%)     96.36
   starcra           18 (  0.00%)             3170 (  0.00%)    176.11
   everque           63 (  0.00%)            11788 (  0.00%)    187.11
   unreal             9 (  0.00%)             1748 (  0.00%)    194.22
   quake              9 (  0.00%)             1334 (  0.00%)    148.22
   cuseeme            1 (  0.00%)              114 (  0.00%)    114.00
   other         559326 (  4.00%)        178200523 (  1.71%)    318.60
  icmp           831277 (  5.94%)         66597962 (  0.64%)     80.12
  ipip              296 (  0.00%)            37228 (  0.00%)    125.77
  ipsec             110 (  0.00%)            17380 (  0.00%)    158.00
  ip6             25586 (  0.18%)          5066395 (  0.05%)    198.01
  other            9240 (  0.07%)          1216753 (  0.01%)    131.68
  frag            37110 (  0.27%)         40706858 (  0.39%)   1096.92
 ip6              34997 (  0.25%)          7637737 (  0.07%)    218.24
  tcp6            13848 (  0.10%)          4080272 (  0.04%)    294.65
   http(s)         1864 (  0.01%)          1441863 (  0.01%)    773.53
   http(c)         3863 (  0.03%)           628047 (  0.01%)    162.58
   smtp             445 (  0.00%)           107399 (  0.00%)    241.35
   bgp              381 (  0.00%)            33282 (  0.00%)     87.35
   other           7295 (  0.05%)          1869681 (  0.02%)    256.30
  udp6            13933 (  0.10%)          2292354 (  0.02%)    164.53
   dns            12340 (  0.09%)          1842707 (  0.02%)    149.33
   other           1593 (  0.01%)           449647 (  0.00%)    282.26
  icmp6            6738 (  0.05%)           834810 (  0.01%)    123.90
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            448 (  0.00%)           426221 (  0.00%)    951.39


tcpdump file: 200904011030.dump.gz (331.19 MB)