Traffic Trace Info


DumpFile: 200904021130.dump
FileSize: 1385.48MB
Id: 200904021130
StartTime: Thu Apr 2 11:30:01 2009
EndTime: Thu Apr 2 11:45:00 2009
TotalTime: 899.62 seconds
TotalCapSize: 1077.36MB CapLen: 96 bytes
# of packets: 20192076 (14636.41MB)
AvgRate: 136.45Mbps stddev:15.14M

IP flow (unique src/dst pair) Information

# of flows: 706246 (avg. 28.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.2% 5.1% 4.3% 2.1% 2.1% 1.9% 1.7% 1.4% 1.4% 1.4%

IP address Information

# of IPv4 addresses: 415409
Top 10 bandwidth usage (bytes/total in %):
28.0% 13.6% 8.2% 6.4% 6.1% 5.7% 5.3% 3.5% 3.5% 2.1%
# of IPv6 addresses: 1971
Top 10 bandwidth usage (bytes/total in %):
24.7% 18.5% 18.2% 17.0% 10.3% 10.3% 7.7% 6.6% 4.3% 3.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3975155
 [   64-  127]:    4726394
 [  128-  255]:     690401
 [  256-  511]:     450214
 [  512- 1023]:     615570
 [ 1024- 2047]:    9734342


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         20192076 (100.00%)      15347390885 (100.00%)    760.07
 ip            20161975 ( 99.85%)      15340430388 ( 99.95%)    760.86
  tcp          15988276 ( 79.18%)      13289649141 ( 86.59%)    831.21
   http(s)      6738003 ( 33.37%)       8967076009 ( 58.43%)   1330.82
   http(c)      3913808 ( 19.38%)        582854990 (  3.80%)    148.92
   squid         378701 (  1.88%)        225554464 (  1.47%)    595.60
   smtp          327083 (  1.62%)        145510443 (  0.95%)    444.87
   ftp            97879 (  0.48%)         49264075 (  0.32%)    503.32
   pop3           13119 (  0.06%)          4931606 (  0.03%)    375.91
   imap            5031 (  0.02%)           607125 (  0.00%)    120.68
   telnet          5335 (  0.03%)           562980 (  0.00%)    105.53
   ssh           770828 (  3.82%)        113159398 (  0.74%)    146.80
   dns            15940 (  0.08%)          3655580 (  0.02%)    229.33
   bgp              154 (  0.00%)            52586 (  0.00%)    341.47
   napster           42 (  0.00%)             7114 (  0.00%)    169.38
   realaud           18 (  0.00%)             1296 (  0.00%)     72.00
   rtsp           81990 (  0.41%)          5167664 (  0.03%)     63.03
   icecast         1864 (  0.01%)           115759 (  0.00%)     62.10
   other        3638468 ( 18.02%)       3191127272 ( 20.79%)    877.05
  udp           3651243 ( 18.08%)       1998981890 ( 13.02%)    547.48
   dns           993801 (  4.92%)        235418098 (  1.53%)    236.89
   realaud         1820 (  0.01%)           109564 (  0.00%)     60.20
   halflif           41 (  0.00%)             4021 (  0.00%)     98.07
   starcra           27 (  0.00%)             4535 (  0.00%)    167.96
   everque          731 (  0.00%)           275952 (  0.00%)    377.50
   unreal             7 (  0.00%)             1068 (  0.00%)    152.57
   quake             17 (  0.00%)             2215 (  0.00%)    130.29
   cuseeme           11 (  0.00%)              847 (  0.00%)     77.00
   other        2654671 ( 13.15%)       1763064376 ( 11.49%)    664.14
  icmp           479382 (  2.37%)         42287175 (  0.28%)     88.21
  ipip              329 (  0.00%)            40358 (  0.00%)    122.67
  ip6             33107 (  0.16%)          8119272 (  0.05%)    245.24
  other            9638 (  0.05%)          1352552 (  0.01%)    140.34
  frag            37166 (  0.18%)         41763110 (  0.27%)   1123.69
 ip6              30101 (  0.15%)          6960497 (  0.05%)    231.24
  tcp6             9410 (  0.05%)          3643401 (  0.02%)    387.18
   http(s)         2114 (  0.01%)          1375784 (  0.01%)    650.80
   http(c)         4988 (  0.02%)           817377 (  0.01%)    163.87
   smtp              81 (  0.00%)            31214 (  0.00%)    385.36
   bgp              385 (  0.00%)            33914 (  0.00%)     88.09
   other           1842 (  0.01%)          1385112 (  0.01%)    751.96
  udp6            15611 (  0.08%)          2499060 (  0.02%)    160.08
   dns            13280 (  0.07%)          1975544 (  0.01%)    148.76
   everque            1 (  0.00%)              102 (  0.00%)    102.00
   other           2330 (  0.01%)           523414 (  0.00%)    224.64
  icmp6            4876 (  0.02%)           648740 (  0.00%)    133.05
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            174 (  0.00%)           165216 (  0.00%)    949.52


tcpdump file: 200904021130.dump.gz (476.79 MB)