Traffic Trace Info


DumpFile: 201004141330.dump
FileSize: 3077.36MB
Id: 201004141330
StartTime: Wed Apr 14 13:30:01 2010
EndTime: Wed Apr 14 13:45:01 2010
TotalTime: 900.70 seconds
TotalCapSize: -1669.51MB CapLen: 96 bytes
# of packets: 42654844 (29203.29MB)
AvgRate: 271.98Mbps stddev:33.32M

IP flow (unique src/dst pair) Information

# of flows: 947604 (avg. 45.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
25.5% 1.3% 1.2% 0.8% 0.8% 0.7% 0.7% 0.7% 0.7% 0.6%

IP address Information

# of IPv4 addresses: 526790
Top 10 bandwidth usage (bytes/total in %):
26.6% 26.1% 12.1% 6.8% 3.3% 2.8% 2.3% 2.3% 2.3% 2.2%
# of IPv6 addresses: 1040
Top 10 bandwidth usage (bytes/total in %):
52.4% 52.4% 10.8% 5.1% 3.8% 3.2% 2.9% 2.6% 2.4% 2.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5808349
 [   64-  127]:   12467253
 [  128-  255]:    2390093
 [  256-  511]:    1980772
 [  512- 1023]:    1187141
 [ 1024- 2047]:   18821236


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         42654844 (100.00%)      30621869138 (100.00%)    717.90
 ip            42590796 ( 99.85%)      30602798149 ( 99.94%)    718.53
  tcp          29729409 ( 69.70%)      23453994630 ( 76.59%)    788.92
   http(s)      8720128 ( 20.44%)      11727307981 ( 38.30%)   1344.86
   http(c)      7354121 ( 17.24%)        955335309 (  3.12%)    129.90
   squid         206954 (  0.49%)         55724502 (  0.18%)    269.26
   smtp          335545 (  0.79%)        143432537 (  0.47%)    427.46
   ftp            28245 (  0.07%)          8586137 (  0.03%)    303.99
   pop3           21298 (  0.05%)         10773002 (  0.04%)    505.82
   imap            2542 (  0.01%)           697071 (  0.00%)    274.22
   telnet          3243 (  0.01%)          2124870 (  0.01%)    655.22
   ssh           717774 (  1.68%)        106219657 (  0.35%)    147.98
   dns            49755 (  0.12%)          3422204 (  0.01%)     68.78
   bgp              177 (  0.00%)            79285 (  0.00%)    447.94
   napster           10 (  0.00%)              626 (  0.00%)     62.60
   realaud           46 (  0.00%)             3977 (  0.00%)     86.46
   rtsp          120825 (  0.28%)         90704382 (  0.30%)    750.71
   icecast         9790 (  0.02%)          3259753 (  0.01%)    332.97
   hotline           17 (  0.00%)             4171 (  0.00%)    245.35
   other       12158936 ( 28.51%)      10346318986 ( 33.79%)    850.92
  udp           8922571 ( 20.92%)       4975396630 ( 16.25%)    557.62
   dns           724330 (  1.70%)        136463322 (  0.45%)    188.40
   realaud          183 (  0.00%)            35221 (  0.00%)    192.46
   halflif          262 (  0.00%)            22475 (  0.00%)     85.78
   starcra          219 (  0.00%)            23938 (  0.00%)    109.31
   everque          841 (  0.00%)           156009 (  0.00%)    185.50
   unreal            47 (  0.00%)             6314 (  0.00%)    134.34
   quake             29 (  0.00%)             4026 (  0.00%)    138.83
   cuseeme            4 (  0.00%)              550 (  0.00%)    137.50
   other        8195891 ( 19.21%)       4838417386 ( 15.80%)    590.35
  icmp           497243 (  1.17%)         64144496 (  0.21%)    129.00
  ipip              337 (  0.00%)            39938 (  0.00%)    118.51
  ipsec            1810 (  0.00%)           537212 (  0.00%)    296.80
  ip6           3425091 (  8.03%)       2106346226 (  6.88%)    614.98
  other           14335 (  0.03%)          2339017 (  0.01%)    163.17
  frag             3037 (  0.01%)          2900046 (  0.01%)    954.90
 ip6              64048 (  0.15%)         19070989 (  0.06%)    297.76
  tcp6            30423 (  0.07%)         12372131 (  0.04%)    406.67
   http(s)          299 (  0.00%)           221632 (  0.00%)    741.24
   http(c)         4099 (  0.01%)           387680 (  0.00%)     94.58
   smtp              10 (  0.00%)             1122 (  0.00%)    112.20
   ftp             3127 (  0.01%)           333790 (  0.00%)    106.74
   imap             274 (  0.00%)            31990 (  0.00%)    116.75
   ssh             3175 (  0.01%)           283546 (  0.00%)     89.31
   dns              153 (  0.00%)            37363 (  0.00%)    244.20
   bgp              122 (  0.00%)            21612 (  0.00%)    177.15
   other          19164 (  0.04%)         11053396 (  0.04%)    576.78
  udp6            27280 (  0.06%)          5825765 (  0.02%)    213.55
   dns            27036 (  0.06%)          5796223 (  0.02%)    214.39
   other            244 (  0.00%)            29542 (  0.00%)    121.07
  icmp6            6239 (  0.01%)           803302 (  0.00%)    128.75
  pim6               28 (  0.00%)             3808 (  0.00%)    136.00
  other6             78 (  0.00%)            65983 (  0.00%)    845.94


tcpdump file: 201004141330.dump.gz (1062.12 MB)