Traffic Trace Info


DumpFile: 201004141445.dump
FileSize: 2505.54MB
Id: 201004141445
StartTime: Wed Apr 14 14:45:01 2010
EndTime: Wed Apr 14 15:00:01 2010
TotalTime: 900.21 seconds
TotalCapSize: 1958.01MB CapLen: 96 bytes
# of packets: 35882471 (21392.60MB)
AvgRate: 199.29Mbps stddev:20.34M

IP flow (unique src/dst pair) Information

# of flows: 1360863 (avg. 26.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.7% 1.4% 1.2% 1.1% 1.0% 0.9% 0.9% 0.9% 0.8%

IP address Information

# of IPv4 addresses: 817453
Top 10 bandwidth usage (bytes/total in %):
16.7% 9.5% 4.3% 4.1% 3.4% 3.4% 3.2% 2.5% 2.1% 2.0%
# of IPv6 addresses: 1058
Top 10 bandwidth usage (bytes/total in %):
15.5% 11.0% 11.0% 8.1% 5.5% 5.4% 5.3% 4.4% 4.4% 4.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6412327
 [   64-  127]:    9730959
 [  128-  255]:    2898151
 [  256-  511]:    2265805
 [  512- 1023]:    1236890
 [ 1024- 2047]:   13338339


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         35882471 (100.00%)      22431765698 (100.00%)    625.15
 ip            35828893 ( 99.85%)      22421014378 ( 99.95%)    625.78
  tcp          21453155 ( 59.79%)      14807527777 ( 66.01%)    690.23
   http(s)      8001510 ( 22.30%)      10648429408 ( 47.47%)   1330.80
   http(c)      6826095 ( 19.02%)        903388613 (  4.03%)    132.34
   squid         260605 (  0.73%)         83506565 (  0.37%)    320.43
   smtp          368814 (  1.03%)        119255141 (  0.53%)    323.35
   ftp            23393 (  0.07%)          6732341 (  0.03%)    287.79
   pop3           27796 (  0.08%)          9041180 (  0.04%)    325.27
   imap            3034 (  0.01%)           700342 (  0.00%)    230.83
   telnet           338 (  0.00%)            27305 (  0.00%)     80.78
   ssh          1037440 (  2.89%)        146824274 (  0.65%)    141.53
   dns            56973 (  0.16%)          3999486 (  0.02%)     70.20
   bgp              143 (  0.00%)            48024 (  0.00%)    335.83
   napster          160 (  0.00%)            14931 (  0.00%)     93.32
   realaud           26 (  0.00%)             3849 (  0.00%)    148.04
   rtsp          171637 (  0.48%)        121066270 (  0.54%)    705.36
   icecast         5472 (  0.02%)           646397 (  0.00%)    118.13
   hotline            1 (  0.00%)               60 (  0.00%)     60.00
   other        4669709 ( 13.01%)       2763843051 ( 12.32%)    591.87
  udp          10331946 ( 28.79%)       5412414887 ( 24.13%)    523.85
   dns          1056100 (  2.94%)        185978381 (  0.83%)    176.10
   realaud           26 (  0.00%)             2802 (  0.00%)    107.77
   halflif          106 (  0.00%)            11714 (  0.00%)    110.51
   starcra          504 (  0.00%)            55668 (  0.00%)    110.45
   everque          707 (  0.00%)           151630 (  0.00%)    214.47
   unreal            81 (  0.00%)            11098 (  0.00%)    137.01
   quake             46 (  0.00%)             5312 (  0.00%)    115.48
   cuseeme            6 (  0.00%)              569 (  0.00%)     94.83
   other        9273046 ( 25.84%)       5225877748 ( 23.30%)    563.56
  icmp           499482 (  1.39%)         57204224 (  0.26%)    114.53
  ipip              303 (  0.00%)            35240 (  0.00%)    116.30
  ipsec            1651 (  0.00%)           499826 (  0.00%)    302.74
  ip6           3490320 (  9.73%)       2134608164 (  9.52%)    611.58
  other           52036 (  0.15%)          8724260 (  0.04%)    167.66
  frag             4517 (  0.01%)          3818211 (  0.02%)    845.30
 ip6              53578 (  0.15%)         10751320 (  0.05%)    200.67
  tcp6            19979 (  0.06%)          4173752 (  0.02%)    208.91
   http(s)         1015 (  0.00%)          1090977 (  0.00%)   1074.85
   http(c)         4021 (  0.01%)           380536 (  0.00%)     94.64
   smtp             377 (  0.00%)           160200 (  0.00%)    424.93
   ftp             2695 (  0.01%)           279736 (  0.00%)    103.80
   imap             459 (  0.00%)            51781 (  0.00%)    112.81
   ssh             7350 (  0.02%)          1523388 (  0.01%)    207.26
   dns              158 (  0.00%)            49948 (  0.00%)    316.13
   bgp              108 (  0.00%)            15974 (  0.00%)    147.91
   other           3796 (  0.01%)           621212 (  0.00%)    163.65
  udp6            27245 (  0.08%)          5766270 (  0.03%)    211.65
   dns            27055 (  0.08%)          5741435 (  0.03%)    212.21
   other            190 (  0.00%)            24835 (  0.00%)    130.71
  icmp6            6264 (  0.02%)           754310 (  0.00%)    120.42
  pim6               29 (  0.00%)             3944 (  0.00%)    136.00
  other6             61 (  0.00%)            53044 (  0.00%)    869.57


tcpdump file: 201004141445.dump.gz (914.76 MB)