Traffic Trace Info


DumpFile: 200904011145.dump
FileSize: 1124.12MB
Id: 200904011145
StartTime: Wed Apr 1 11:45:01 2009
EndTime: Wed Apr 1 12:00:00 2009
TotalTime: 899.28 seconds
TotalCapSize: 881.17MB CapLen: 96 bytes
# of packets: 15918600 (11260.49MB)
AvgRate: 105.06Mbps stddev:14.23M

IP flow (unique src/dst pair) Information

# of flows: 638160 (avg. 24.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 5.5% 3.2% 2.9% 2.4% 2.3% 1.8% 1.8% 1.7% 1.6%

IP address Information

# of IPv4 addresses: 405762
Top 10 bandwidth usage (bytes/total in %):
13.3% 9.6% 6.5% 6.0% 5.9% 5.5% 5.4% 5.4% 3.3% 3.3%
# of IPv6 addresses: 1935
Top 10 bandwidth usage (bytes/total in %):
22.8% 17.6% 17.6% 15.1% 9.4% 8.8% 7.8% 6.4% 6.1% 5.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3702702
 [   64-  127]:    3534774
 [  128-  255]:     570700
 [  256-  511]:     372506
 [  512- 1023]:     401975
 [ 1024- 2047]:    7335943


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         15918600 (100.00%)      11807480681 (100.00%)    741.74
 ip            15885811 ( 99.79%)      11800252326 ( 99.94%)    742.82
  tcp          13608391 ( 85.49%)      11295547524 ( 95.66%)    830.04
   http(s)      6620754 ( 41.59%)       9031379553 ( 76.49%)   1364.10
   http(c)      3928458 ( 24.68%)        412298090 (  3.49%)    104.95
   squid         395936 (  2.49%)        281394233 (  2.38%)    710.71
   smtp          261502 (  1.64%)         87930818 (  0.74%)    336.25
   nntp               1 (  0.00%)               60 (  0.00%)     60.00
   ftp            91028 (  0.57%)         84081624 (  0.71%)    923.69
   pop3           11735 (  0.07%)          3799372 (  0.03%)    323.76
   imap            9622 (  0.06%)          5208265 (  0.04%)    541.29
   telnet          5220 (  0.03%)           730437 (  0.01%)    139.93
   ssh            16556 (  0.10%)          4536252 (  0.04%)    273.99
   dns            13506 (  0.08%)          1541579 (  0.01%)    114.14
   bgp              135 (  0.00%)            41652 (  0.00%)    308.53
   napster            2 (  0.00%)              124 (  0.00%)     62.00
   realaud           11 (  0.00%)              814 (  0.00%)     74.00
   rtsp           65763 (  0.41%)         13465153 (  0.11%)    204.75
   icecast          216 (  0.00%)            16133 (  0.00%)     74.69
   other        2187918 ( 13.74%)       1369121685 ( 11.60%)    625.76
  udp           1635337 ( 10.27%)        443426435 (  3.76%)    271.15
   dns          1016825 (  6.39%)        249781764 (  2.12%)    245.65
   realaud           10 (  0.00%)             1098 (  0.00%)    109.80
   halflif           13 (  0.00%)             1395 (  0.00%)    107.31
   starcra           39 (  0.00%)             4786 (  0.00%)    122.72
   everque           85 (  0.00%)            23160 (  0.00%)    272.47
   unreal            14 (  0.00%)             2230 (  0.00%)    159.29
   quake             16 (  0.00%)             1268 (  0.00%)     79.25
   cuseeme            6 (  0.00%)              535 (  0.00%)     89.17
   other         618145 (  3.88%)        193452707 (  1.64%)    312.96
  icmp           602831 (  3.79%)         50538869 (  0.43%)     83.84
  ipip              344 (  0.00%)            43096 (  0.00%)    125.28
  ipsec             112 (  0.00%)            17728 (  0.00%)    158.29
  ip6             28705 (  0.18%)          9333847 (  0.08%)    325.16
  other           10091 (  0.06%)          1344827 (  0.01%)    133.27
  frag            37702 (  0.24%)         41919378 (  0.36%)   1111.86
 ip6              32789 (  0.21%)          7228355 (  0.06%)    220.45
  tcp6            12613 (  0.08%)          3997318 (  0.03%)    316.92
   http(s)         1936 (  0.01%)          1382802 (  0.01%)    714.26
   http(c)         3973 (  0.02%)           744067 (  0.01%)    187.28
   smtp             106 (  0.00%)            30547 (  0.00%)    288.18
   ftp             2378 (  0.01%)           245495 (  0.00%)    103.24
   dns                4 (  0.00%)              460 (  0.00%)    115.00
   bgp              364 (  0.00%)            30496 (  0.00%)     83.78
   other           3852 (  0.02%)          1563451 (  0.01%)    405.88
  udp6            14385 (  0.09%)          2407757 (  0.02%)    167.38
   dns            12716 (  0.08%)          1918680 (  0.02%)    150.89
   other           1669 (  0.01%)           489077 (  0.00%)    293.04
  icmp6            5598 (  0.04%)           670752 (  0.01%)    119.82
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            163 (  0.00%)           148448 (  0.00%)    910.72


tcpdump file: 200904011145.dump.gz (383.55 MB)