Traffic Trace Info


DumpFile: 200904011845.dump
FileSize: 1274.46MB
Id: 200904011845
StartTime: Wed Apr 1 18:45:00 2009
EndTime: Wed Apr 1 19:00:00 2009
TotalTime: 900.01 seconds
TotalCapSize: 994.45MB CapLen: 96 bytes
# of packets: 18330988 (13354.90MB)
AvgRate: 124.47Mbps stddev:12.29M

IP flow (unique src/dst pair) Information

# of flows: 699558 (avg. 26.20 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.9% 5.0% 3.2% 1.9% 1.5% 1.5% 1.4% 1.2% 1.1% 1.1%

IP address Information

# of IPv4 addresses: 454687
Top 10 bandwidth usage (bytes/total in %):
13.3% 9.8% 9.1% 7.9% 7.8% 7.0% 5.0% 3.4% 3.3% 3.1%
# of IPv6 addresses: 2400
Top 10 bandwidth usage (bytes/total in %):
22.4% 15.0% 14.0% 14.0% 12.8% 12.7% 11.8% 7.4% 6.8% 5.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3669182
 [   64-  127]:    3932849
 [  128-  255]:     937559
 [  256-  511]:     442447
 [  512- 1023]:     416088
 [ 1024- 2047]:    8932863


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         18330988 (100.00%)      14003626156 (100.00%)    763.93
 ip            18276318 ( 99.70%)      13993631942 ( 99.93%)    765.67
  tcp          14549301 ( 79.37%)      12632749653 ( 90.21%)    868.27
   http(s)      7549972 ( 41.19%)      10368196445 ( 74.04%)   1373.28
   http(c)      3972225 ( 21.67%)        385415965 (  2.75%)     97.03
   squid         461076 (  2.52%)        333399782 (  2.38%)    723.09
   smtp          403588 (  2.20%)        151726025 (  1.08%)    375.94
   ftp            64022 (  0.35%)         49719059 (  0.36%)    776.59
   pop3            9404 (  0.05%)          6724305 (  0.05%)    715.05
   imap            6612 (  0.04%)          1287402 (  0.01%)    194.71
   telnet         13958 (  0.08%)          4601781 (  0.03%)    329.69
   ssh            17175 (  0.09%)          4005769 (  0.03%)    233.23
   dns            58172 (  0.32%)         52282482 (  0.37%)    898.76
   bgp              131 (  0.00%)            41336 (  0.00%)    315.54
   napster           11 (  0.00%)             1045 (  0.00%)     95.00
   realaud           54 (  0.00%)            11282 (  0.00%)    208.93
   rtsp           17540 (  0.10%)          1165031 (  0.01%)     66.42
   icecast         9893 (  0.05%)          7869819 (  0.06%)    795.49
   other        1965463 ( 10.72%)       1266301825 (  9.04%)    644.28
  udp           2919001 ( 15.92%)       1241190108 (  8.86%)    425.21
   dns          1166612 (  6.36%)        260845877 (  1.86%)    223.59
   realaud         1220 (  0.01%)            78490 (  0.00%)     64.34
   halflif           24 (  0.00%)             2172 (  0.00%)     90.50
   starcra           29 (  0.00%)             4678 (  0.00%)    161.31
   everque          122 (  0.00%)            28264 (  0.00%)    231.67
   unreal             9 (  0.00%)             1167 (  0.00%)    129.67
   quake            870 (  0.00%)            78535 (  0.00%)     90.27
   cuseeme            5 (  0.00%)              436 (  0.00%)     87.20
   other        1748713 (  9.54%)        979815839 (  7.00%)    560.31
  icmp           720428 (  3.93%)         70067874 (  0.50%)     97.26
  ipip              337 (  0.00%)            41314 (  0.00%)    122.59
  ip6             55222 (  0.30%)         44524089 (  0.32%)    806.27
  other           32029 (  0.17%)          5058904 (  0.04%)    157.95
  frag            49644 (  0.27%)         53292720 (  0.38%)   1073.50
 ip6              54670 (  0.30%)          9994214 (  0.07%)    182.81
  tcp6            31562 (  0.17%)          5947967 (  0.04%)    188.45
   http(s)         2287 (  0.01%)          1502209 (  0.01%)    656.85
   http(c)        22126 (  0.12%)          2287975 (  0.02%)    103.41
   smtp             852 (  0.00%)           342688 (  0.00%)    402.22
   ftp             2224 (  0.01%)           230527 (  0.00%)    103.65
   imap              19 (  0.00%)             4834 (  0.00%)    254.42
   ssh                4 (  0.00%)              344 (  0.00%)     86.00
   dns                4 (  0.00%)              458 (  0.00%)    114.50
   bgp              386 (  0.00%)            33801 (  0.00%)     87.57
   other           3660 (  0.02%)          1545131 (  0.01%)    422.17
  udp6            16713 (  0.09%)          3010250 (  0.02%)    180.11
   dns            13844 (  0.08%)          2146963 (  0.02%)    155.08
   realaud            1 (  0.00%)              103 (  0.00%)    103.00
   starcra            1 (  0.00%)              566 (  0.00%)    566.00
   everque            1 (  0.00%)              108 (  0.00%)    108.00
   other           2866 (  0.02%)           862510 (  0.01%)    300.95
  icmp6            6055 (  0.03%)           741571 (  0.01%)    122.47
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            310 (  0.00%)           290346 (  0.00%)    936.60


tcpdump file: 200904011845.dump.gz (449.44 MB)