Traffic Trace Info


DumpFile: 200904020730.dump
FileSize: 765.76MB
Id: 200904020730
StartTime: Thu Apr 2 07:30:01 2009
EndTime: Thu Apr 2 07:45:00 2009
TotalTime: 899.59 seconds
TotalCapSize: 596.09MB CapLen: 96 bytes
# of packets: 11119430 (7704.81MB)
AvgRate: 71.85Mbps stddev:10.77M

IP flow (unique src/dst pair) Information

# of flows: 721349 (avg. 15.41 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 1.9% 1.7% 1.7% 1.6% 1.5% 1.5% 1.3% 1.2% 1.1%

IP address Information

# of IPv4 addresses: 404902
Top 10 bandwidth usage (bytes/total in %):
19.6% 18.0% 9.2% 7.2% 4.1% 3.3% 3.2% 3.2% 2.8% 2.0%
# of IPv6 addresses: 1963
Top 10 bandwidth usage (bytes/total in %):
18.9% 18.8% 17.0% 12.7% 11.5% 11.3% 8.0% 6.7% 6.5% 5.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    2565503
 [   64-  127]:    2366374
 [  128-  255]:     485975
 [  256-  511]:     289544
 [  512- 1023]:     331892
 [ 1024- 2047]:    5080142


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         11119430 (100.00%)       8079083505 (100.00%)    726.57
 ip            11086034 ( 99.70%)       8072344864 ( 99.92%)    728.15
  tcp           8734703 ( 78.55%)       7352873540 ( 91.01%)    841.80
   http(s)      4167154 ( 37.48%)       5599263161 ( 69.31%)   1343.67
   http(c)      1942696 ( 17.47%)        150050439 (  1.86%)     77.24
   squid         584635 (  5.26%)        389939131 (  4.83%)    666.98
   smtp          311508 (  2.80%)         43943741 (  0.54%)    141.07
   ftp            63936 (  0.57%)         31807057 (  0.39%)    497.48
   pop3            5687 (  0.05%)          4274817 (  0.05%)    751.68
   imap            3612 (  0.03%)           366671 (  0.00%)    101.51
   telnet          2403 (  0.02%)           173547 (  0.00%)     72.22
   ssh            56153 (  0.50%)          7057589 (  0.09%)    125.68
   dns            14389 (  0.13%)          3568951 (  0.04%)    248.03
   bgp              178 (  0.00%)            72327 (  0.00%)    406.33
   napster           32 (  0.00%)             5265 (  0.00%)    164.53
   realaud           38 (  0.00%)             3023 (  0.00%)     79.55
   rtsp             175 (  0.00%)            25410 (  0.00%)    145.20
   icecast          217 (  0.00%)            51377 (  0.00%)    236.76
   other        1581827 ( 14.23%)       1122267254 ( 13.89%)    709.48
  udp           1849257 ( 16.63%)        639554460 (  7.92%)    345.84
   dns           924982 (  8.32%)        190125654 (  2.35%)    205.55
   realaud         1819 (  0.02%)           109923 (  0.00%)     60.43
   halflif           26 (  0.00%)             2560 (  0.00%)     98.46
   starcra           28 (  0.00%)             4557 (  0.00%)    162.75
   everque           55 (  0.00%)            10891 (  0.00%)    198.02
   unreal            11 (  0.00%)             1221 (  0.00%)    111.00
   quake             16 (  0.00%)             1371 (  0.00%)     85.69
   other         916624 (  8.24%)        448796624 (  5.56%)    489.62
  icmp           463772 (  4.17%)         73972756 (  0.92%)    159.50
  ipip              339 (  0.00%)            42654 (  0.00%)    125.82
  ip6             28994 (  0.26%)          4675093 (  0.06%)    161.24
  other            8969 (  0.08%)          1226361 (  0.02%)    136.73
  frag            65117 (  0.59%)         63969033 (  0.79%)    982.37
 ip6              33396 (  0.30%)          6738641 (  0.08%)    201.78
  tcp6            15238 (  0.14%)          3748679 (  0.05%)    246.01
   http(s)         1166 (  0.01%)           778107 (  0.01%)    667.33
   http(c)         3740 (  0.03%)           595241 (  0.01%)    159.16
   smtp             458 (  0.00%)           209281 (  0.00%)    456.95
   ftp             4229 (  0.04%)           435145 (  0.01%)    102.90
   ssh                2 (  0.00%)              172 (  0.00%)     86.00
   dns                4 (  0.00%)              462 (  0.00%)    115.50
   bgp              378 (  0.00%)            32969 (  0.00%)     87.22
   other           5261 (  0.05%)          1697302 (  0.02%)    322.62
  udp6            11542 (  0.10%)          1923116 (  0.02%)    166.62
   dns             9536 (  0.09%)          1433431 (  0.02%)    150.32
   everque            1 (  0.00%)              119 (  0.00%)    119.00
   quake              1 (  0.00%)               99 (  0.00%)     99.00
   other           2004 (  0.02%)           489467 (  0.01%)    244.25
  icmp6            6198 (  0.06%)           696675 (  0.01%)    112.40
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            388 (  0.00%)           366091 (  0.00%)    943.53


tcpdump file: 200904020730.dump.gz (272.47 MB)