Traffic Trace Info


DumpFile: 200904020545.dump
FileSize: 871.21MB
Id: 200904020545
StartTime: Thu Apr 2 05:45:00 2009
EndTime: Thu Apr 2 06:00:00 2009
TotalTime: 899.99 seconds
TotalCapSize: 679.67MB CapLen: 96 bytes
# of packets: 12550473 (8567.95MB)
AvgRate: 79.87Mbps stddev:10.75M

IP flow (unique src/dst pair) Information

# of flows: 629552 (avg. 19.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 2.9% 2.4% 1.8% 1.3% 1.3% 1.3% 1.2% 1.2% 1.2%

IP address Information

# of IPv4 addresses: 406973
Top 10 bandwidth usage (bytes/total in %):
19.3% 14.1% 9.0% 5.4% 5.2% 4.7% 4.5% 4.0% 3.3% 2.9%
# of IPv6 addresses: 2101
Top 10 bandwidth usage (bytes/total in %):
20.1% 19.5% 16.8% 14.2% 13.5% 11.9% 7.2% 7.1% 5.7% 5.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2603468
 [   64-  127]:    2926920
 [  128-  255]:     661858
 [  256-  511]:     302274
 [  512- 1023]:     394266
 [ 1024- 2047]:    5661687


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         12550473 (100.00%)       8984144497 (100.00%)    715.84
 ip            12518977 ( 99.75%)       8977655604 ( 99.93%)    717.12
  tcp           9837377 ( 78.38%)       7920578780 ( 88.16%)    805.15
   http(s)      4478944 ( 35.69%)       6103691528 ( 67.94%)   1362.75
   http(c)      2137122 ( 17.03%)        156812912 (  1.75%)     73.38
   squid         442861 (  3.53%)        288740548 (  3.21%)    651.99
   smtp          331124 (  2.64%)         40808655 (  0.45%)    123.24
   nntp               2 (  0.00%)              120 (  0.00%)     60.00
   ftp            91937 (  0.73%)         77682215 (  0.86%)    844.95
   pop3            5253 (  0.04%)          3601246 (  0.04%)    685.56
   imap            3235 (  0.03%)           391662 (  0.00%)    121.07
   telnet          4144 (  0.03%)           302929 (  0.00%)     73.10
   ssh           812723 (  6.48%)        133027954 (  1.48%)    163.68
   dns            15378 (  0.12%)          1647184 (  0.02%)    107.11
   bgp              138 (  0.00%)            44112 (  0.00%)    319.65
   napster           41 (  0.00%)             6384 (  0.00%)    155.71
   realaud           95 (  0.00%)             6119 (  0.00%)     64.41
   rtsp             568 (  0.00%)           112728 (  0.00%)    198.46
   icecast          147 (  0.00%)             9518 (  0.00%)     64.75
   hotline            1 (  0.00%)               60 (  0.00%)     60.00
   other        1513603 ( 12.06%)       1113689246 ( 12.40%)    735.79
  udp           2181144 ( 17.38%)        974895321 ( 10.85%)    446.97
   dns          1109058 (  8.84%)        214202548 (  2.38%)    193.14
   realaud         3638 (  0.03%)           219375 (  0.00%)     60.30
   halflif           18 (  0.00%)             1783 (  0.00%)     99.06
   starcra           32 (  0.00%)             5958 (  0.00%)    186.19
   everque           57 (  0.00%)            11853 (  0.00%)    207.95
   unreal            13 (  0.00%)             2226 (  0.00%)    171.23
   quake             13 (  0.00%)             1481 (  0.00%)    113.92
   cuseeme            7 (  0.00%)              997 (  0.00%)    142.43
   other        1068110 (  8.51%)        760290810 (  8.46%)    711.81
  icmp           464004 (  3.70%)         75849860 (  0.84%)    163.47
  ipip              329 (  0.00%)            41640 (  0.00%)    126.57
  ip6             27201 (  0.22%)          5071054 (  0.06%)    186.43
  other            8922 (  0.07%)          1218949 (  0.01%)    136.62
  frag            42181 (  0.34%)         47088020 (  0.52%)   1116.33
 ip6              31496 (  0.25%)          6488893 (  0.07%)    206.02
  tcp6            15068 (  0.12%)          3632674 (  0.04%)    241.09
   http(s)         1030 (  0.01%)           880199 (  0.01%)    854.56
   http(c)         3993 (  0.03%)           507742 (  0.01%)    127.16
   smtp             305 (  0.00%)            85306 (  0.00%)    279.69
   ftp             4291 (  0.03%)           450252 (  0.01%)    104.93
   bgp              366 (  0.00%)            31132 (  0.00%)     85.06
   hotline            4 (  0.00%)              356 (  0.00%)     89.00
   other           5079 (  0.04%)          1677687 (  0.02%)    330.32
  udp6            10412 (  0.08%)          1849966 (  0.02%)    177.68
   dns             8285 (  0.07%)          1267536 (  0.01%)    152.99
   starcra            1 (  0.00%)              566 (  0.00%)    566.00
   everque            1 (  0.00%)              566 (  0.00%)    566.00
   unreal             1 (  0.00%)              107 (  0.00%)    107.00
   other           2124 (  0.02%)           581191 (  0.01%)    273.63
  icmp6            5622 (  0.04%)           661169 (  0.01%)    117.60
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6            363 (  0.00%)           340868 (  0.00%)    939.03


tcpdump file: 200904020545.dump.gz (316.97 MB)