Traffic Trace Info


DumpFile: 200904022130.dump
FileSize: 1406.84MB
Id: 200904022130
StartTime: Thu Apr 2 21:30:00 2009
EndTime: Thu Apr 2 21:45:01 2009
TotalTime: 900.50 seconds
TotalCapSize: 1091.28MB CapLen: 96 bytes
# of packets: 20671519 (13246.28MB)
AvgRate: 123.39Mbps stddev:12.64M

IP flow (unique src/dst pair) Information

# of flows: 950588 (avg. 21.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 1.9% 1.8% 1.3% 1.3% 1.2% 0.8% 0.8% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 595523
Top 10 bandwidth usage (bytes/total in %):
16.7% 16.2% 8.4% 6.8% 6.4% 2.9% 2.8% 2.7% 2.6% 2.4%
# of IPv6 addresses: 1799
Top 10 bandwidth usage (bytes/total in %):
32.4% 22.3% 15.9% 15.9% 10.5% 10.1% 7.6% 4.6% 3.8% 3.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4622142
 [   64-  127]:    4925656
 [  128-  255]:    1368944
 [  256-  511]:     359575
 [  512- 1023]:     417660
 [ 1024- 2047]:    8977542


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         20671519 (100.00%)      13889734882 (100.00%)    671.93
 ip            20636543 ( 99.83%)      13881788231 ( 99.94%)    672.68
  tcp          14625104 ( 70.75%)      11537533494 ( 83.07%)    788.89
   http(s)      6900982 ( 33.38%)       9191585587 ( 66.18%)   1331.92
   http(c)      4570964 ( 22.11%)        372325108 (  2.68%)     81.45
   squid         364395 (  1.76%)        291102934 (  2.10%)    798.87
   smtp          336607 (  1.63%)        107876525 (  0.78%)    320.48
   ftp            65938 (  0.32%)         54821930 (  0.39%)    831.42
   pop3           10749 (  0.05%)          7078313 (  0.05%)    658.51
   imap            4307 (  0.02%)          1604592 (  0.01%)    372.55
   telnet         14792 (  0.07%)          6291883 (  0.05%)    425.36
   ssh           122754 (  0.59%)         12294519 (  0.09%)    100.16
   dns            19994 (  0.10%)          4146535 (  0.03%)    207.39
   bgp              134 (  0.00%)            46920 (  0.00%)    350.15
   napster           60 (  0.00%)             4268 (  0.00%)     71.13
   realaud           51 (  0.00%)             7338 (  0.00%)    143.88
   rtsp           10675 (  0.05%)          3497086 (  0.03%)    327.60
   icecast         1849 (  0.01%)          1288369 (  0.01%)    696.79
   hotline           31 (  0.00%)             2998 (  0.00%)     96.71
   other        2200732 ( 10.65%)       1483553189 ( 10.68%)    674.12
  udp           4871264 ( 23.57%)       2198452534 ( 15.83%)    451.31
   dns          1758261 (  8.51%)        304083216 (  2.19%)    172.95
   realaud        20801 (  0.10%)          8461033 (  0.06%)    406.76
   halflif         2651 (  0.01%)           160808 (  0.00%)     60.66
   starcra           78 (  0.00%)            13567 (  0.00%)    173.94
   everque           91 (  0.00%)            16974 (  0.00%)    186.53
   unreal            25 (  0.00%)             4589 (  0.00%)    183.56
   quake             33 (  0.00%)             2989 (  0.00%)     90.58
   cuseeme            7 (  0.00%)              687 (  0.00%)     98.14
   other        3089154 ( 14.94%)       1885584785 ( 13.58%)    610.39
  icmp           992384 (  4.80%)        111802239 (  0.80%)    112.66
  ipip              330 (  0.00%)            40398 (  0.00%)    122.42
  ipsec             274 (  0.00%)            46796 (  0.00%)    170.79
  ip6             30337 (  0.15%)          9027303 (  0.06%)    297.57
  other          116850 (  0.57%)         24885467 (  0.18%)    212.97
  frag            87268 (  0.42%)         83441950 (  0.60%)    956.16
 ip6              34976 (  0.17%)          7946651 (  0.06%)    227.20
  tcp6            13499 (  0.07%)          4565307 (  0.03%)    338.20
   http(s)         2792 (  0.01%)          1821518 (  0.01%)    652.41
   http(c)         8107 (  0.04%)          1221009 (  0.01%)    150.61
   smtp             217 (  0.00%)            69358 (  0.00%)    319.62
   bgp              372 (  0.00%)            31841 (  0.00%)     85.59
   other           2011 (  0.01%)          1421581 (  0.01%)    706.90
  udp6            16139 (  0.08%)          2408045 (  0.02%)    149.21
   dns            14716 (  0.07%)          2169122 (  0.02%)    147.40
   halflif            1 (  0.00%)              107 (  0.00%)    107.00
   everque            1 (  0.00%)              105 (  0.00%)    105.00
   other           1421 (  0.01%)           238711 (  0.00%)    167.99
  icmp6            4915 (  0.02%)           597435 (  0.00%)    121.55
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            393 (  0.00%)           371784 (  0.00%)    946.02


tcpdump file: 200904022130.dump.gz (495.10 MB)