Traffic Trace Info


DumpFile: 200904011730.dump
FileSize: 1433.82MB
Id: 200904011730
StartTime: Wed Apr 1 17:30:00 2009
EndTime: Wed Apr 1 17:45:00 2009
TotalTime: 899.66 seconds
TotalCapSize: 1119.95MB CapLen: 96 bytes
# of packets: 20559220 (14635.08MB)
AvgRate: 136.46Mbps stddev:10.17M

IP flow (unique src/dst pair) Information

# of flows: 865932 (avg. 23.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 5.3% 2.7% 2.5% 2.4% 1.7% 1.6% 1.5% 1.4% 1.3%

IP address Information

# of IPv4 addresses: 581831
Top 10 bandwidth usage (bytes/total in %):
10.3% 9.8% 9.2% 7.7% 5.9% 5.8% 5.5% 5.4% 4.0% 3.3%
# of IPv6 addresses: 1786
Top 10 bandwidth usage (bytes/total in %):
75.1% 75.1% 6.0% 4.2% 3.9% 3.9% 2.5% 2.2% 1.8% 1.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4437016
 [   64-  127]:    4413480
 [  128-  255]:     926251
 [  256-  511]:     434799
 [  512- 1023]:     513987
 [ 1024- 2047]:    9833687


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         20559220 (100.00%)      15345997131 (100.00%)    746.43
 ip            20190153 ( 98.20%)      15313264678 ( 99.79%)    758.45
  tcp          16229669 ( 78.94%)      13669615787 ( 89.08%)    842.26
   http(s)      7691622 ( 37.41%)      10162171746 ( 66.22%)   1321.20
   http(c)      4726414 ( 22.99%)       1199384608 (  7.82%)    253.76
   squid         430963 (  2.10%)        326885653 (  2.13%)    758.50
   smtp          300724 (  1.46%)        109134439 (  0.71%)    362.91
   nntp               1 (  0.00%)               60 (  0.00%)     60.00
   ftp           106928 (  0.52%)        100229363 (  0.65%)    937.35
   pop3           10855 (  0.05%)          3978316 (  0.03%)    366.50
   imap            4259 (  0.02%)           407951 (  0.00%)     95.79
   telnet          6440 (  0.03%)           731774 (  0.00%)    113.63
   ssh            22920 (  0.11%)          4478517 (  0.03%)    195.40
   dns            53465 (  0.26%)         41319286 (  0.27%)    772.83
   bgp              152 (  0.00%)            65297 (  0.00%)    429.59
   napster            8 (  0.00%)             3816 (  0.00%)    477.00
   realaud           17 (  0.00%)             1385 (  0.00%)     81.47
   rtsp           19775 (  0.10%)         20166781 (  0.13%)   1019.81
   icecast        10047 (  0.05%)          7856280 (  0.05%)    781.95
   other        2845074 ( 13.84%)       1692800215 ( 11.03%)    594.99
  udp           3139783 ( 15.27%)       1555976136 ( 10.14%)    495.57
   dns          1187698 (  5.78%)        284965093 (  1.86%)    239.93
   realaud          933 (  0.00%)            56500 (  0.00%)     60.56
   halflif           32 (  0.00%)             2386 (  0.00%)     74.56
   starcra           16 (  0.00%)             3105 (  0.00%)    194.06
   everque         3299 (  0.02%)          2883092 (  0.02%)    873.93
   unreal            19 (  0.00%)             2673 (  0.00%)    140.68
   quake             20 (  0.00%)             1972 (  0.00%)     98.60
   cuseeme            1 (  0.00%)               94 (  0.00%)     94.00
   other        1947464 (  9.47%)       1267844123 (  8.26%)    651.02
  icmp           762815 (  3.71%)         73507267 (  0.48%)     96.36
  ipip              324 (  0.00%)            40502 (  0.00%)    125.01
  ip6             24368 (  0.12%)          3914223 (  0.03%)    160.63
  other           33194 (  0.16%)         10210763 (  0.07%)    307.61
  frag            59269 (  0.29%)         61640563 (  0.40%)   1040.01
 ip6             369067 (  1.80%)         32732453 (  0.21%)     88.69
  tcp6           345450 (  1.68%)         28891808 (  0.19%)     83.64
   http(s)         2050 (  0.01%)          1430488 (  0.01%)    697.80
   http(c)         4211 (  0.02%)           780697 (  0.01%)    185.39
   smtp             582 (  0.00%)           228478 (  0.00%)    392.57
   ftp             2270 (  0.01%)           237102 (  0.00%)    104.45
   imap             149 (  0.00%)            40480 (  0.00%)    271.68
   ssh                2 (  0.00%)              172 (  0.00%)     86.00
   bgp              387 (  0.00%)            35808 (  0.00%)     92.53
   other         335799 (  1.63%)         26138583 (  0.17%)     77.84
  udp6            16736 (  0.08%)          2648721 (  0.02%)    158.26
   dns            15462 (  0.08%)          2350532 (  0.02%)    152.02
   other           1274 (  0.01%)           298189 (  0.00%)    234.06
  icmp6            6406 (  0.03%)           764282 (  0.00%)    119.31
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            445 (  0.00%)           423562 (  0.00%)    951.82


tcpdump file: 200904011730.dump.gz (492.10 MB)