Traffic Trace Info


DumpFile: 201004140630.dump
FileSize: 1682.78MB
Id: 201004140630
StartTime: Wed Apr 14 06:30:01 2010
EndTime: Wed Apr 14 06:45:01 2010
TotalTime: 899.89 seconds
TotalCapSize: 1315.00MB CapLen: 96 bytes
# of packets: 24102315 (14756.65MB)
AvgRate: 137.57Mbps stddev:12.15M

IP flow (unique src/dst pair) Information

# of flows: 962884 (avg. 25.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 1.8% 1.7% 1.4% 1.2% 1.1% 0.9% 0.8% 0.8% 0.7%

IP address Information

# of IPv4 addresses: 560295
Top 10 bandwidth usage (bytes/total in %):
24.1% 13.0% 6.8% 5.3% 5.2% 5.1% 4.8% 4.4% 3.5% 2.1%
# of IPv6 addresses: 905
Top 10 bandwidth usage (bytes/total in %):
28.3% 11.5% 9.2% 6.6% 6.1% 5.5% 5.3% 4.7% 4.1% 3.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3395421
 [   64-  127]:    6378347
 [  128-  255]:    2522101
 [  256-  511]:    1872074
 [  512- 1023]:     626863
 [ 1024- 2047]:    9307509


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         24102315 (100.00%)      15473471393 (100.00%)    641.99
 ip            24052111 ( 99.79%)      15465739025 ( 99.95%)    643.01
  tcp          11611455 ( 48.18%)       8938161808 ( 57.76%)    769.77
   http(s)      4906404 ( 20.36%)       6786952627 ( 43.86%)   1383.28
   http(c)      2631093 ( 10.92%)        267729914 (  1.73%)    101.76
   squid         327510 (  1.36%)        106294318 (  0.69%)    324.55
   smtp          313074 (  1.30%)         56083014 (  0.36%)    179.14
   ftp            10983 (  0.05%)          1087362 (  0.01%)     99.00
   pop3            8068 (  0.03%)          6757146 (  0.04%)    837.52
   imap             794 (  0.00%)           153489 (  0.00%)    193.31
   telnet          6000 (  0.02%)          3167599 (  0.02%)    527.93
   ssh            17856 (  0.07%)          2475414 (  0.02%)    138.63
   dns            55076 (  0.23%)          3765626 (  0.02%)     68.37
   bgp              158 (  0.00%)            62658 (  0.00%)    396.57
   napster           25 (  0.00%)             2351 (  0.00%)     94.04
   realaud           10 (  0.00%)             1031 (  0.00%)    103.10
   rtsp              72 (  0.00%)             5040 (  0.00%)     70.00
   icecast          190 (  0.00%)            12172 (  0.00%)     64.06
   other        3334141 ( 13.83%)       1703611987 ( 11.01%)    510.96
  udp           8189862 ( 33.98%)       4335871922 ( 28.02%)    529.42
   dns           631173 (  2.62%)        110439068 (  0.71%)    174.97
   rip                1 (  0.00%)              109 (  0.00%)    109.00
   realaud           50 (  0.00%)             4965 (  0.00%)     99.30
   halflif          108 (  0.00%)            18676 (  0.00%)    172.93
   starcra          285 (  0.00%)            26594 (  0.00%)     93.31
   everque          348 (  0.00%)            69363 (  0.00%)    199.32
   unreal            96 (  0.00%)            16206 (  0.00%)    168.81
   quake             28 (  0.00%)             2468 (  0.00%)     88.14
   cuseeme            2 (  0.00%)              398 (  0.00%)    199.00
   other        7557183 ( 31.35%)       4225020893 ( 27.30%)    559.07
  icmp           864315 (  3.59%)        160144648 (  1.03%)    185.29
  ipip              366 (  0.00%)            46056 (  0.00%)    125.84
  ipsec            5804 (  0.02%)          2805638 (  0.02%)    483.40
  ip6           3364248 ( 13.96%)       2024490380 ( 13.08%)    601.77
  other           16061 (  0.07%)          4218573 (  0.03%)    262.66
  frag             2953 (  0.01%)          2959188 (  0.02%)   1002.10
 ip6              50204 (  0.21%)          7732368 (  0.05%)    154.02
  tcp6            17056 (  0.07%)          1798755 (  0.01%)    105.46
   http(s)           42 (  0.00%)            25695 (  0.00%)    611.79
   http(c)         3591 (  0.01%)           327568 (  0.00%)     91.22
   smtp             240 (  0.00%)            89587 (  0.00%)    373.28
   ftp             5087 (  0.02%)           524108 (  0.00%)    103.03
   imap             351 (  0.00%)            41296 (  0.00%)    117.65
   ssh             1587 (  0.01%)           131798 (  0.00%)     83.05
   dns              108 (  0.00%)            30478 (  0.00%)    282.20
   bgp               99 (  0.00%)            13125 (  0.00%)    132.58
   other           5951 (  0.02%)           615100 (  0.00%)    103.36
  udp6            27007 (  0.11%)          5151389 (  0.03%)    190.74
   dns            26756 (  0.11%)          5109121 (  0.03%)    190.95
   other            251 (  0.00%)            42268 (  0.00%)    168.40
  icmp6            6051 (  0.03%)           723687 (  0.00%)    119.60
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             60 (  0.00%)            54457 (  0.00%)    907.62


tcpdump file: 201004140630.dump.gz (608.17 MB)