Traffic Trace Info


DumpFile: 201004141645.dump
FileSize: 2816.68MB
Id: 201004141645
StartTime: Wed Apr 14 16:45:00 2010
EndTime: Wed Apr 14 17:00:01 2010
TotalTime: 901.14 seconds
TotalCapSize: -1889.61MB CapLen: 96 bytes
# of packets: 39994911 (26003.12MB)
AvgRate: 242.08Mbps stddev:21.91M

IP flow (unique src/dst pair) Information

# of flows: 1291439 (avg. 30.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 1.3% 1.3% 1.1% 1.0% 0.9% 0.8% 0.7% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 730688
Top 10 bandwidth usage (bytes/total in %):
13.6% 8.1% 5.0% 4.6% 4.5% 4.3% 3.9% 3.9% 3.9% 3.8%
# of IPv6 addresses: 1163
Top 10 bandwidth usage (bytes/total in %):
16.9% 13.8% 10.3% 10.3% 8.6% 6.0% 5.7% 5.7% 5.6% 4.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6543685
 [   64-  127]:   10460403
 [  128-  255]:    2894093
 [  256-  511]:    2051335
 [  512- 1023]:    1401781
 [ 1024- 2047]:   16643614


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         39994911 (100.00%)      27266251980 (100.00%)    681.74
 ip            39929774 ( 99.84%)      27253293365 ( 99.95%)    682.53
  tcp          25523124 ( 63.82%)      19836092885 ( 72.75%)    777.18
   http(s)     11782313 ( 29.46%)      16046021468 ( 58.85%)   1361.87
   http(c)      8484833 ( 21.21%)       1154359798 (  4.23%)    136.05
   squid         321645 (  0.80%)        122698652 (  0.45%)    381.47
   smtp          471824 (  1.18%)        175041487 (  0.64%)    370.99
   ftp            11490 (  0.03%)          2035245 (  0.01%)    177.13
   pop3           41670 (  0.10%)         15156334 (  0.06%)    363.72
   imap            3969 (  0.01%)           832720 (  0.00%)    209.81
   telnet           494 (  0.00%)            62697 (  0.00%)    126.92
   ssh            46761 (  0.12%)         12349946 (  0.05%)    264.11
   dns            57636 (  0.14%)          3947334 (  0.01%)     68.49
   bgp              181 (  0.00%)            73344 (  0.00%)    405.22
   napster           41 (  0.00%)             8013 (  0.00%)    195.44
   realaud           24 (  0.00%)             3616 (  0.00%)    150.67
   rtsp          104216 (  0.26%)         27844143 (  0.10%)    267.18
   icecast         5418 (  0.01%)           379401 (  0.00%)     70.03
   hotline            1 (  0.00%)               78 (  0.00%)     78.00
   other        4190601 ( 10.48%)       2275278189 (  8.34%)    542.95
  udp          10061474 ( 25.16%)       5117984974 ( 18.77%)    508.67
   dns           993468 (  2.48%)        196752546 (  0.72%)    198.05
   realaud           25 (  0.00%)             2732 (  0.00%)    109.28
   halflif           77 (  0.00%)             9652 (  0.00%)    125.35
   starcra        39944 (  0.10%)         37137490 (  0.14%)    929.74
   everque          584 (  0.00%)           122305 (  0.00%)    209.43
   unreal           112 (  0.00%)            15450 (  0.00%)    137.95
   quake             54 (  0.00%)             6141 (  0.00%)    113.72
   cuseeme            8 (  0.00%)              778 (  0.00%)     97.25
   other        9026629 ( 22.57%)       4883676896 ( 17.91%)    541.03
  icmp           552210 (  1.38%)         59713068 (  0.22%)    108.13
  ipip              354 (  0.00%)            42632 (  0.00%)    120.43
  ipsec            1424 (  0.00%)           469296 (  0.00%)    329.56
  ip6           3565883 (  8.92%)       2210642094 (  8.11%)    619.94
  other          225305 (  0.56%)         28348416 (  0.10%)    125.82
  frag             2923 (  0.01%)          2873330 (  0.01%)    983.01
 ip6              65137 (  0.16%)         12958615 (  0.05%)    198.94
  tcp6            18001 (  0.05%)          3674505 (  0.01%)    204.13
   http(s)         1357 (  0.00%)          1426989 (  0.01%)   1051.58
   http(c)         3990 (  0.01%)           359174 (  0.00%)     90.02
   smtp             296 (  0.00%)            98458 (  0.00%)    332.63
   ftp             2700 (  0.01%)           279959 (  0.00%)    103.69
   imap             400 (  0.00%)            46364 (  0.00%)    115.91
   ssh             4950 (  0.01%)          1018436 (  0.00%)    205.74
   dns               73 (  0.00%)            16390 (  0.00%)    224.52
   bgp              117 (  0.00%)            16912 (  0.00%)    144.55
   other           4118 (  0.01%)           411823 (  0.00%)    100.01
  udp6            40635 (  0.10%)          8457429 (  0.03%)    208.13
   dns            40014 (  0.10%)          8365855 (  0.03%)    209.07
   other            621 (  0.00%)            91574 (  0.00%)    147.46
  icmp6            6418 (  0.02%)           775125 (  0.00%)    120.77
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             53 (  0.00%)            47476 (  0.00%)    895.77


tcpdump file: 201004141645.dump.gz (999.94 MB)