Traffic Trace Info


DumpFile: 200904011045.dump
FileSize: 1129.80MB
Id: 200904011045
StartTime: Wed Apr 1 10:45:00 2009
EndTime: Wed Apr 1 11:00:00 2009
TotalTime: 899.77 seconds
TotalCapSize: 883.76MB CapLen: 96 bytes
# of packets: 16124018 (12005.57MB)
AvgRate: 111.92Mbps stddev:15.20M

IP flow (unique src/dst pair) Information

# of flows: 807136 (avg. 19.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.0% 3.0% 3.0% 2.5% 2.5% 1.8% 1.8% 1.6% 1.5% 1.5%

IP address Information

# of IPv4 addresses: 427824
Top 10 bandwidth usage (bytes/total in %):
18.4% 16.0% 11.8% 6.0% 5.1% 3.1% 3.1% 3.0% 3.0% 2.8%
# of IPv6 addresses: 1838
Top 10 bandwidth usage (bytes/total in %):
19.7% 17.0% 17.0% 13.6% 8.7% 8.5% 8.5% 7.3% 6.3% 6.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3269688
 [   64-  127]:    3499209
 [  128-  255]:     596327
 [  256-  511]:     412954
 [  512- 1023]:     448644
 [ 1024- 2047]:    7897196


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         16124018 (100.00%)      12588754172 (100.00%)    780.75
 ip            16093390 ( 99.81%)      12581216397 ( 99.94%)    781.76
  tcp          13224240 ( 82.02%)      12032618969 ( 95.58%)    909.89
   http(s)      5478689 ( 33.98%)       7089978019 ( 56.32%)   1294.10
   http(c)      2713729 ( 16.83%)        581455590 (  4.62%)    214.26
   squid         451629 (  2.80%)        339170298 (  2.69%)    750.99
   smtp          336437 (  2.09%)        138737783 (  1.10%)    412.37
   ftp           121812 (  0.76%)         96394495 (  0.77%)    791.34
   pop3           19830 (  0.12%)         14748555 (  0.12%)    743.75
   imap            3601 (  0.02%)           563366 (  0.00%)    156.45
   telnet          4093 (  0.03%)           631556 (  0.01%)    154.30
   ssh            75275 (  0.47%)         13872913 (  0.11%)    184.30
   dns            14401 (  0.09%)          1566397 (  0.01%)    108.77
   bgp              149 (  0.00%)            53631 (  0.00%)    359.94
   napster          122 (  0.00%)            42294 (  0.00%)    346.67
   realaud           22 (  0.00%)             1484 (  0.00%)     67.45
   rtsp          108019 (  0.67%)         13960895 (  0.11%)    129.24
   icecast          171 (  0.00%)            12425 (  0.00%)     72.66
   hotline            1 (  0.00%)               60 (  0.00%)     60.00
   other        3896223 ( 24.16%)       3741426988 ( 29.72%)    960.27
  udp           1573766 (  9.76%)        446623263 (  3.55%)    283.79
   dns           954003 (  5.92%)        237139424 (  1.88%)    248.57
   realaud           17 (  0.00%)             2005 (  0.00%)    117.94
   halflif           24 (  0.00%)             2147 (  0.00%)     89.46
   starcra           31 (  0.00%)             5762 (  0.00%)    185.87
   everque           54 (  0.00%)            11539 (  0.00%)    213.69
   unreal             9 (  0.00%)             1473 (  0.00%)    163.67
   quake             10 (  0.00%)             1397 (  0.00%)    139.70
   cuseeme            7 (  0.00%)              511 (  0.00%)     73.00
   other         619460 (  3.84%)        209331191 (  1.66%)    337.93
  icmp          1261091 (  7.82%)         96550705 (  0.77%)     76.56
  ipip              360 (  0.00%)            44296 (  0.00%)    123.04
  ipsec             110 (  0.00%)            17412 (  0.00%)    158.29
  ip6             23102 (  0.14%)          3839795 (  0.03%)    166.21
  other           10721 (  0.07%)          1521957 (  0.01%)    141.96
  frag            39413 (  0.24%)         42882192 (  0.34%)   1088.02
 ip6              30628 (  0.19%)          7537775 (  0.06%)    246.11
  tcp6            10784 (  0.07%)          4430638 (  0.04%)    410.85
   http(s)         2410 (  0.01%)          2076007 (  0.02%)    861.41
   http(c)         3520 (  0.02%)           638075 (  0.01%)    181.27
   smtp             305 (  0.00%)            81649 (  0.00%)    267.70
   ssh                4 (  0.00%)              408 (  0.00%)    102.00
   dns                5 (  0.00%)              543 (  0.00%)    108.60
   bgp              374 (  0.00%)            32308 (  0.00%)     86.39
   other           4166 (  0.03%)          1601648 (  0.01%)    384.46
  udp6            13245 (  0.08%)          2159284 (  0.02%)    163.03
   dns            11853 (  0.07%)          1774940 (  0.01%)    149.75
   other           1392 (  0.01%)           384344 (  0.00%)    276.11
  icmp6            6380 (  0.04%)           765353 (  0.01%)    119.96
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            189 (  0.00%)           178420 (  0.00%)    944.02


tcpdump file: 200904011045.dump.gz (376.27 MB)