Traffic Trace Info


DumpFile: 200904011615.dump
FileSize: 1276.31MB
Id: 200904011615
StartTime: Wed Apr 1 16:15:00 2009
EndTime: Wed Apr 1 16:30:01 2009
TotalTime: 900.81 seconds
TotalCapSize: 997.93MB CapLen: 96 bytes
# of packets: 18233221 (12039.24MB)
AvgRate: 112.12Mbps stddev:14.44M

IP flow (unique src/dst pair) Information

# of flows: 811816 (avg. 22.46 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 3.9% 3.5% 1.6% 1.5% 1.2% 1.1% 0.8% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 515218
Top 10 bandwidth usage (bytes/total in %):
12.2% 8.7% 8.2% 7.6% 6.0% 6.0% 4.2% 4.0% 3.6% 3.5%
# of IPv6 addresses: 1745
Top 10 bandwidth usage (bytes/total in %):
23.4% 23.4% 12.2% 11.0% 11.0% 8.1% 6.8% 6.8% 6.1% 6.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4238869
 [   64-  127]:    4423588
 [  128-  255]:     681093
 [  256-  511]:     506883
 [  512- 1023]:     581771
 [ 1024- 2047]:    7801017


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         18233221 (100.00%)      12624063050 (100.00%)    692.37
 ip            18162843 ( 99.61%)      12612550683 ( 99.91%)    694.42
  tcp          15087739 ( 82.75%)      11735745970 ( 92.96%)    777.83
   http(s)      6764845 ( 37.10%)       8768954281 ( 69.46%)   1296.25
   http(c)      4880657 ( 26.77%)       1155122666 (  9.15%)    236.67
   squid         378014 (  2.07%)        246887586 (  1.96%)    653.12
   smtp          308331 (  1.69%)        142288990 (  1.13%)    461.48
   ftp            56172 (  0.31%)         26046518 (  0.21%)    463.69
   pop3            9457 (  0.05%)          4025048 (  0.03%)    425.62
   imap            7675 (  0.04%)          4605252 (  0.04%)    600.03
   telnet         54318 (  0.30%)          4261346 (  0.03%)     78.45
   ssh            65976 (  0.36%)         10143346 (  0.08%)    153.74
   dns            31596 (  0.17%)         19635874 (  0.16%)    621.47
   bgp              152 (  0.00%)            62756 (  0.00%)    412.87
   napster           17 (  0.00%)             3339 (  0.00%)    196.41
   realaud           26 (  0.00%)             5272 (  0.00%)    202.77
   rtsp          133876 (  0.73%)         18541981 (  0.15%)    138.50
   icecast        10858 (  0.06%)          7925558 (  0.06%)    729.93
   hotline           67 (  0.00%)            37722 (  0.00%)    563.01
   other        2385701 ( 13.08%)       1327198375 ( 10.51%)    556.31
  udp           2557276 ( 14.03%)        827295567 (  6.55%)    323.51
   dns          1188268 (  6.52%)        281039625 (  2.23%)    236.51
   realaud         6493 (  0.04%)           443548 (  0.00%)     68.31
   halflif           23 (  0.00%)             2971 (  0.00%)    129.17
   starcra           54 (  0.00%)             9610 (  0.00%)    177.96
   everque          146 (  0.00%)            24238 (  0.00%)    166.01
   unreal            23 (  0.00%)             3166 (  0.00%)    137.65
   quake             22 (  0.00%)             2946 (  0.00%)    133.91
   cuseeme            5 (  0.00%)              440 (  0.00%)     88.00
   other        1362033 (  7.47%)        545581724 (  4.32%)    400.56
  icmp           471401 (  2.59%)         42077450 (  0.33%)     89.26
  ipip              325 (  0.00%)            41236 (  0.00%)    126.88
  ip6             26415 (  0.14%)          3945991 (  0.03%)    149.38
  other           19687 (  0.11%)          3444469 (  0.03%)    174.96
  frag            80786 (  0.44%)         79000458 (  0.63%)    977.90
 ip6              70378 (  0.39%)         11512367 (  0.09%)    163.58
  tcp6            48159 (  0.26%)          7761426 (  0.06%)    161.16
   http(s)         2496 (  0.01%)          2442132 (  0.02%)    978.42
   http(c)        38597 (  0.21%)          3318048 (  0.03%)     85.97
   smtp             273 (  0.00%)           135856 (  0.00%)    497.64
   ftp             2329 (  0.01%)           240288 (  0.00%)    103.17
   bgp              382 (  0.00%)            33352 (  0.00%)     87.31
   other           4082 (  0.02%)          1591750 (  0.01%)    389.94
  udp6            15777 (  0.09%)          2524527 (  0.02%)    160.01
   dns            14588 (  0.08%)          2254315 (  0.02%)    154.53
   halflif            1 (  0.00%)              106 (  0.00%)    106.00
   starcra            1 (  0.00%)              134 (  0.00%)    134.00
   quake              2 (  0.00%)              221 (  0.00%)    110.50
   other           1185 (  0.01%)           269751 (  0.00%)    227.64
  icmp6            5876 (  0.03%)           710659 (  0.01%)    120.94
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            536 (  0.00%)           511675 (  0.00%)    954.62


tcpdump file: 200904011615.dump.gz (454.28 MB)