Traffic Trace Info


DumpFile: 200904022100.dump
FileSize: 1308.37MB
Id: 200904022100
StartTime: Thu Apr 2 21:00:01 2009
EndTime: Thu Apr 2 21:15:00 2009
TotalTime: 899.28 seconds
TotalCapSize: 1017.13MB CapLen: 96 bytes
# of packets: 19071740 (12168.91MB)
AvgRate: 113.52Mbps stddev:11.58M

IP flow (unique src/dst pair) Information

# of flows: 1010756 (avg. 18.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.9% 1.6% 1.5% 1.5% 1.4% 1.3% 1.0% 0.9% 0.9%

IP address Information

# of IPv4 addresses: 635854
Top 10 bandwidth usage (bytes/total in %):
21.4% 17.8% 6.7% 6.5% 4.2% 2.8% 2.2% 2.0% 2.0% 1.7%
# of IPv6 addresses: 1757
Top 10 bandwidth usage (bytes/total in %):
28.5% 28.2% 20.2% 14.2% 14.1% 8.9% 8.3% 5.9% 4.3% 3.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4687034
 [   64-  127]:    4366381
 [  128-  255]:    1083560
 [  256-  511]:     320484
 [  512- 1023]:     444055
 [ 1024- 2047]:    8170226


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         19071740 (100.00%)      12760027273 (100.00%)    669.05
 ip            19039601 ( 99.83%)      12751006226 ( 99.93%)    669.71
  tcp          14436225 ( 75.69%)      11036950737 ( 86.50%)    764.53
   http(s)      6888912 ( 36.12%)       9214919099 ( 72.22%)   1337.65
   http(c)      4887061 ( 25.62%)        382447820 (  3.00%)     78.26
   squid         277235 (  1.45%)        170964247 (  1.34%)    616.68
   smtp          280240 (  1.47%)         65568081 (  0.51%)    233.97
   nntp               2 (  0.00%)              122 (  0.00%)     61.00
   ftp           107663 (  0.56%)        112741519 (  0.88%)   1047.17
   pop3            8190 (  0.04%)          4548607 (  0.04%)    555.39
   imap            7216 (  0.04%)          2587984 (  0.02%)    358.65
   telnet         11587 (  0.06%)          4163651 (  0.03%)    359.34
   ssh            15019 (  0.08%)          3992003 (  0.03%)    265.80
   dns            18719 (  0.10%)          3252434 (  0.03%)    173.75
   bgp              135 (  0.00%)            48366 (  0.00%)    358.27
   napster          177 (  0.00%)           110590 (  0.00%)    624.80
   realaud           38 (  0.00%)             7888 (  0.00%)    207.58
   rtsp             463 (  0.00%)            61193 (  0.00%)    132.17
   icecast          391 (  0.00%)            42509 (  0.00%)    108.72
   hotline          161 (  0.00%)            10362 (  0.00%)     64.36
   other        1933011 ( 10.14%)       1071483962 (  8.40%)    554.31
  udp           3368134 ( 17.66%)       1566659350 ( 12.28%)    465.14
   dns          1214427 (  6.37%)        253625688 (  1.99%)    208.84
   realaud        20740 (  0.11%)          8446098 (  0.07%)    407.24
   halflif          433 (  0.00%)            30028 (  0.00%)     69.35
   starcra           78 (  0.00%)            14008 (  0.00%)    179.59
   everque          105 (  0.00%)            19342 (  0.00%)    184.21
   unreal            15 (  0.00%)             2606 (  0.00%)    173.73
   quake             17 (  0.00%)             1528 (  0.00%)     89.88
   cuseeme            1 (  0.00%)               85 (  0.00%)     85.00
   other        2132147 ( 11.18%)       1304370860 ( 10.22%)    611.76
  icmp          1101367 (  5.77%)        117970710 (  0.92%)    107.11
  ipip              335 (  0.00%)            41872 (  0.00%)    124.99
  ipsec             274 (  0.00%)            46796 (  0.00%)    170.79
  ip6             30978 (  0.16%)          8121811 (  0.06%)    262.18
  other          102288 (  0.54%)         21214950 (  0.17%)    207.40
  frag            54782 (  0.29%)         58780518 (  0.46%)   1072.99
 ip6              32139 (  0.17%)          9021047 (  0.07%)    280.69
  tcp6            10540 (  0.06%)          5653304 (  0.04%)    536.37
   http(s)         2857 (  0.01%)          1929691 (  0.02%)    675.43
   http(c)         4019 (  0.02%)           871212 (  0.01%)    216.77
   smtp             379 (  0.00%)           138580 (  0.00%)    365.65
   ssh                2 (  0.00%)              172 (  0.00%)     86.00
   bgp              386 (  0.00%)            40347 (  0.00%)    104.53
   other           2897 (  0.02%)          2673302 (  0.02%)    922.78
  udp6            16434 (  0.09%)          2513822 (  0.02%)    152.96
   dns            15078 (  0.08%)          2261303 (  0.02%)    149.97
   starcra            2 (  0.00%)              326 (  0.00%)    163.00
   other           1354 (  0.01%)           252193 (  0.00%)    186.26
  icmp6            4846 (  0.03%)           574017 (  0.00%)    118.45
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            289 (  0.00%)           275824 (  0.00%)    954.41


tcpdump file: 200904022100.dump.gz (458.05 MB)