Traffic Trace Info


DumpFile: 200904012345.dump
FileSize: 1648.68MB
Id: 200904012345
StartTime: Wed Apr 1 23:45:00 2009
EndTime: Thu Apr 2 00:00:01 2009
TotalTime: 900.46 seconds
TotalCapSize: 1282.17MB CapLen: 96 bytes
# of packets: 24004269 (18824.37MB)
AvgRate: 175.38Mbps stddev:20.58M

IP flow (unique src/dst pair) Information

# of flows: 1066104 (avg. 22.52 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 4.6% 4.0% 4.0% 3.7% 2.8% 2.4% 1.9% 1.7% 1.7%

IP address Information

# of IPv4 addresses: 589769
Top 10 bandwidth usage (bytes/total in %):
24.8% 11.6% 5.6% 5.2% 5.2% 5.0% 4.8% 4.7% 4.2% 4.1%
# of IPv6 addresses: 2098
Top 10 bandwidth usage (bytes/total in %):
22.6% 20.2% 20.1% 14.5% 9.3% 9.3% 6.9% 5.9% 5.9% 5.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4593202
 [   64-  127]:    4577768
 [  128-  255]:    1153671
 [  256-  511]:     436362
 [  512- 1023]:     400734
 [ 1024- 2047]:   12842532


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         24004269 (100.00%)      19738787766 (100.00%)    822.30
 ip            23918076 ( 99.64%)      19725020741 ( 99.93%)    824.69
  tcp          18640468 ( 77.65%)      17081098494 ( 86.54%)    916.34
   http(s)     10269337 ( 42.78%)      14234866701 ( 72.12%)   1386.15
   http(c)      4559255 ( 18.99%)        343700483 (  1.74%)     75.39
   squid         539663 (  2.25%)        324785978 (  1.65%)    601.83
   smtp          420628 (  1.75%)        101267329 (  0.51%)    240.75
   ftp           101827 (  0.42%)         95077956 (  0.48%)    933.72
   pop3           12348 (  0.05%)          5595956 (  0.03%)    453.19
   imap           35801 (  0.15%)          2610995 (  0.01%)     72.93
   telnet         11877 (  0.05%)          3589361 (  0.02%)    302.21
   ssh            56119 (  0.23%)         13486743 (  0.07%)    240.32
   dns            18379 (  0.08%)          1992958 (  0.01%)    108.44
   bgp              144 (  0.00%)            50829 (  0.00%)    352.98
   napster           34 (  0.00%)             5393 (  0.00%)    158.62
   realaud           81 (  0.00%)            45926 (  0.00%)    566.99
   rtsp            1825 (  0.01%)           150322 (  0.00%)     82.37
   icecast          286 (  0.00%)            33238 (  0.00%)    116.22
   hotline           13 (  0.00%)             1502 (  0.00%)    115.54
   other        2611757 ( 10.88%)       1953771146 (  9.90%)    748.07
  udp           4352230 ( 18.13%)       2514926574 ( 12.74%)    577.85
   dns          1203208 (  5.01%)        249745302 (  1.27%)    207.57
   realaud         1824 (  0.01%)           110342 (  0.00%)     60.49
   halflif        39020 (  0.16%)         12081777 (  0.06%)    309.63
   starcra           22 (  0.00%)             3291 (  0.00%)    149.59
   everque        38073 (  0.16%)         29691411 (  0.15%)    779.85
   unreal             6 (  0.00%)              798 (  0.00%)    133.00
   quake             12 (  0.00%)             1018 (  0.00%)     84.83
   cuseeme            5 (  0.00%)              464 (  0.00%)     92.80
   other        3069864 ( 12.79%)       2223124899 ( 11.26%)    724.18
  icmp           846252 (  3.53%)        112221155 (  0.57%)    132.61
  ipip              342 (  0.00%)            41410 (  0.00%)    121.08
  ip6             11434 (  0.05%)          4300209 (  0.02%)    376.09
  other           67350 (  0.28%)         12432899 (  0.06%)    184.60
  frag            53581 (  0.22%)         59237944 (  0.30%)   1105.58
 ip6              86193 (  0.36%)         13767025 (  0.07%)    159.72
  tcp6            63998 (  0.27%)         10214975 (  0.05%)    159.61
   http(s)         3361 (  0.01%)          2628732 (  0.01%)    782.13
   http(c)        52121 (  0.22%)          4607151 (  0.02%)     88.39
   smtp             585 (  0.00%)           230875 (  0.00%)    394.66
   ftp             2337 (  0.01%)           243567 (  0.00%)    104.22
   imap             803 (  0.00%)           807407 (  0.00%)   1005.49
   bgp              391 (  0.00%)            34891 (  0.00%)     89.24
   other           4400 (  0.02%)          1662352 (  0.01%)    377.81
  udp6            15842 (  0.07%)          2522627 (  0.01%)    159.24
   dns            13711 (  0.06%)          2034678 (  0.01%)    148.40
   halflif            1 (  0.00%)              110 (  0.00%)    110.00
   starcra            1 (  0.00%)              566 (  0.00%)    566.00
   other           2129 (  0.01%)           487273 (  0.00%)    228.87
  icmp6            6045 (  0.03%)           759161 (  0.00%)    125.58
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            278 (  0.00%)           266182 (  0.00%)    957.49


tcpdump file: 200904012345.dump.gz (558.72 MB)