Traffic Trace Info


DumpFile: 200904021415.dump
FileSize: 1357.41MB
Id: 200904021415
StartTime: Thu Apr 2 14:15:00 2009
EndTime: Thu Apr 2 14:30:01 2009
TotalTime: 900.23 seconds
TotalCapSize: 1056.15MB CapLen: 96 bytes
# of packets: 19742538 (13261.64MB)
AvgRate: 123.58Mbps stddev:14.38M

IP flow (unique src/dst pair) Information

# of flows: 742858 (avg. 26.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 1.6% 1.6% 1.5% 1.4% 1.4% 1.4% 1.3% 1.3% 1.2%

IP address Information

# of IPv4 addresses: 436702
Top 10 bandwidth usage (bytes/total in %):
17.3% 17.2% 5.6% 4.9% 4.6% 3.6% 3.1% 2.4% 2.0% 1.7%
# of IPv6 addresses: 1811
Top 10 bandwidth usage (bytes/total in %):
25.4% 18.1% 14.8% 14.8% 14.6% 14.6% 8.2% 7.2% 6.2% 5.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5106665
 [   64-  127]:    4017380
 [  128-  255]:     754653
 [  256-  511]:     514594
 [  512- 1023]:     553107
 [ 1024- 2047]:    8796139


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         19742538 (100.00%)      13905840887 (100.00%)    704.36
 ip            19711849 ( 99.84%)      13897298817 ( 99.94%)    705.02
  tcp          15940728 ( 80.74%)      12644814962 ( 90.93%)    793.24
   http(s)      7502443 ( 38.00%)       9758774749 ( 70.18%)   1300.75
   http(c)      4910167 ( 24.87%)       1060786851 (  7.63%)    216.04
   squid         251584 (  1.27%)        153303385 (  1.10%)    609.35
   smtp          333140 (  1.69%)        111921210 (  0.80%)    335.96
   ftp            90732 (  0.46%)         51936704 (  0.37%)    572.42
   pop3           14421 (  0.07%)         11050761 (  0.08%)    766.30
   imap            3872 (  0.02%)           445613 (  0.00%)    115.09
   telnet         17004 (  0.09%)          3242897 (  0.02%)    190.71
   ssh            10999 (  0.06%)          1569704 (  0.01%)    142.71
   dns            24472 (  0.12%)          8791327 (  0.06%)    359.24
   bgp              144 (  0.00%)            40460 (  0.00%)    280.97
   napster           92 (  0.00%)             7208 (  0.00%)     78.35
   realaud           60 (  0.00%)             4406 (  0.00%)     73.43
   rtsp          156443 (  0.79%)         10021770 (  0.07%)     64.06
   icecast        11029 (  0.06%)          7965163 (  0.06%)    722.20
   hotline            7 (  0.00%)              420 (  0.00%)     60.00
   other        2614118 ( 13.24%)       1464952274 ( 10.53%)    560.40
  udp           3104838 ( 15.73%)       1168668063 (  8.40%)    376.40
   dns          1064778 (  5.39%)        237526782 (  1.71%)    223.08
   realaud         1847 (  0.01%)           112868 (  0.00%)     61.11
   halflif           27 (  0.00%)             2359 (  0.00%)     87.37
   starcra           38 (  0.00%)             7979 (  0.00%)    209.97
   everque           64 (  0.00%)            11281 (  0.00%)    176.27
   unreal            20 (  0.00%)             3540 (  0.00%)    177.00
   quake             21 (  0.00%)             1726 (  0.00%)     82.19
   cuseeme           10 (  0.00%)             1197 (  0.00%)    119.70
   other        2037838 ( 10.32%)        930827768 (  6.69%)    456.77
  icmp           533900 (  2.70%)         46535896 (  0.33%)     87.16
  ipip              341 (  0.00%)            42922 (  0.00%)    125.87
  ip6             27093 (  0.14%)          5340949 (  0.04%)    197.13
  other          104949 (  0.53%)         31896025 (  0.23%)    303.92
  frag            38251 (  0.19%)         43013450 (  0.31%)   1124.51
 ip6              30689 (  0.16%)          8542070 (  0.06%)    278.34
  tcp6            10211 (  0.05%)          5380412 (  0.04%)    526.92
   http(s)         2519 (  0.01%)          1811826 (  0.01%)    719.26
   http(c)         4369 (  0.02%)           803605 (  0.01%)    183.93
   smtp             229 (  0.00%)            97041 (  0.00%)    423.76
   ftp               27 (  0.00%)             6440 (  0.00%)    238.52
   bgp              389 (  0.00%)            34534 (  0.00%)     88.78
   other           2678 (  0.01%)          2626966 (  0.02%)    980.94
  udp6            15496 (  0.08%)          2497548 (  0.02%)    161.17
   dns            13752 (  0.07%)          2142906 (  0.02%)    155.83
   halflif            1 (  0.00%)              117 (  0.00%)    117.00
   other           1743 (  0.01%)           354525 (  0.00%)    203.40
  icmp6            4870 (  0.02%)           586573 (  0.00%)    120.45
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             82 (  0.00%)            73457 (  0.00%)    895.82


tcpdump file: 200904021415.dump.gz (478.12 MB)