Traffic Trace Info


DumpFile: 200904020245.dump
FileSize: 993.20MB
Id: 200904020245
StartTime: Thu Apr 2 02:45:01 2009
EndTime: Thu Apr 2 03:00:01 2009
TotalTime: 900.13 seconds
TotalCapSize: 775.63MB CapLen: 96 bytes
# of packets: 14257735 (9813.80MB)
AvgRate: 91.46Mbps stddev:10.22M

IP flow (unique src/dst pair) Information

# of flows: 893435 (avg. 15.96 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 1.7% 1.3% 1.3% 1.2% 1.1% 1.1% 1.1% 1.1% 1.1%

IP address Information

# of IPv4 addresses: 527273
Top 10 bandwidth usage (bytes/total in %):
21.3% 19.5% 9.4% 6.7% 4.5% 3.5% 3.2% 3.2% 2.1% 1.9%
# of IPv6 addresses: 2155
Top 10 bandwidth usage (bytes/total in %):
24.2% 22.0% 22.0% 20.2% 12.4% 12.2% 10.1% 7.6% 7.2% 4.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3339340
 [   64-  127]:    3053374
 [  128-  255]:     761450
 [  256-  511]:     342103
 [  512- 1023]:     304297
 [ 1024- 2047]:    6457171


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         14257735 (100.00%)      10290517235 (100.00%)    721.75
 ip            14166391 ( 99.36%)      10278710655 ( 99.89%)    725.57
  tcp          11465591 ( 80.42%)       9631974020 ( 93.60%)    840.08
   http(s)      5758463 ( 40.39%)       7901861714 ( 76.79%)   1372.22
   http(c)      3046511 ( 21.37%)        232036174 (  2.25%)     76.16
   squid         507980 (  3.56%)        325973037 (  3.17%)    641.70
   smtp          381454 (  2.68%)         59637546 (  0.58%)    156.34
   nntp               1 (  0.00%)               60 (  0.00%)     60.00
   ftp            99210 (  0.70%)         90777852 (  0.88%)    915.01
   pop3            5323 (  0.04%)          3446342 (  0.03%)    647.44
   imap            3361 (  0.02%)           460070 (  0.00%)    136.88
   telnet          3978 (  0.03%)           282084 (  0.00%)     70.91
   ssh            27400 (  0.19%)          3962153 (  0.04%)    144.60
   dns            17680 (  0.12%)          1949931 (  0.02%)    110.29
   bgp              140 (  0.00%)            44598 (  0.00%)    318.56
   napster           56 (  0.00%)             7212 (  0.00%)    128.79
   realaud           33 (  0.00%)             3709 (  0.00%)    112.39
   rtsp             231 (  0.00%)            49442 (  0.00%)    214.03
   icecast          699 (  0.00%)            42900 (  0.00%)     61.37
   other        1613063 ( 11.31%)       1011438716 (  9.83%)    627.03
  udp           1858033 ( 13.03%)        533495849 (  5.18%)    287.13
   dns          1233778 (  8.65%)        246198434 (  2.39%)    199.55
   realaud         2715 (  0.02%)           164128 (  0.00%)     60.45
   halflif           46 (  0.00%)             4644 (  0.00%)    100.96
   starcra           25 (  0.00%)             4074 (  0.00%)    162.96
   everque           64 (  0.00%)            12867 (  0.00%)    201.05
   unreal             7 (  0.00%)             1108 (  0.00%)    158.29
   quake             29 (  0.00%)             3193 (  0.00%)    110.10
   cuseeme            4 (  0.00%)              335 (  0.00%)     83.75
   other         621158 (  4.36%)        286914027 (  2.79%)    461.90
  icmp           802675 (  5.63%)        105948189 (  1.03%)    131.99
  ipip              345 (  0.00%)            41728 (  0.00%)    120.95
  ip6             30437 (  0.21%)          6006540 (  0.06%)    197.34
  other            9310 (  0.07%)          1244329 (  0.01%)    133.66
  frag            50036 (  0.35%)         56124092 (  0.55%)   1121.67
 ip6              91344 (  0.64%)         11806580 (  0.11%)    129.25
  tcp6            72660 (  0.51%)          8571380 (  0.08%)    117.97
   http(s)         1333 (  0.01%)           845874 (  0.01%)    634.56
   http(c)        64603 (  0.45%)          5574997 (  0.05%)     86.30
   smtp             443 (  0.00%)           190661 (  0.00%)    430.39
   ftp             2393 (  0.02%)           246394 (  0.00%)    102.96
   ssh                2 (  0.00%)              172 (  0.00%)     86.00
   bgp              375 (  0.00%)            32119 (  0.00%)     85.65
   other           3511 (  0.02%)          1681163 (  0.02%)    478.83
  udp6            12632 (  0.09%)          2271388 (  0.02%)    179.81
   dns            10170 (  0.07%)          1621709 (  0.02%)    159.46
   starcra            1 (  0.00%)              566 (  0.00%)    566.00
   other           2461 (  0.02%)           649113 (  0.01%)    263.76
  icmp6            5786 (  0.04%)           739183 (  0.01%)    127.75
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            236 (  0.00%)           220549 (  0.00%)    934.53


tcpdump file: 200904020245.dump.gz (357.70 MB)