Traffic Trace Info


DumpFile: 201004150930.dump
FileSize: 1862.43MB
Id: 201004150930
StartTime: Thu Apr 15 09:30:01 2010
EndTime: Thu Apr 15 09:45:00 2010
TotalTime: 899.32 seconds
TotalCapSize: 1459.29MB CapLen: 96 bytes
# of packets: 26419151 (15155.96MB)
AvgRate: 141.38Mbps stddev:15.76M

IP flow (unique src/dst pair) Information

# of flows: 1032534 (avg. 25.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.1% 1.7% 1.3% 1.2% 1.0% 0.9% 0.8% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 599838
Top 10 bandwidth usage (bytes/total in %):
19.3% 11.6% 5.6% 4.2% 3.9% 3.8% 2.8% 2.5% 2.2% 2.2%
# of IPv6 addresses: 1000
Top 10 bandwidth usage (bytes/total in %):
23.2% 18.6% 8.5% 7.6% 5.6% 5.5% 4.9% 4.4% 4.3% 3.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5009868
 [   64-  127]:    7228053
 [  128-  255]:    2423934
 [  256-  511]:    1500289
 [  512- 1023]:     775279
 [ 1024- 2047]:    9481728


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         26419151 (100.00%)      15892178125 (100.00%)    601.54
 ip            26358235 ( 99.77%)      15881389313 ( 99.93%)    602.52
  tcp          15791985 ( 59.77%)      10413767837 ( 65.53%)    659.43
   http(s)      5960509 ( 22.56%)       7795866890 ( 49.05%)   1307.92
   http(c)      4786335 ( 18.12%)        672128234 (  4.23%)    140.43
   squid         250592 (  0.95%)        108399363 (  0.68%)    432.57
   smtp          362381 (  1.37%)        102746606 (  0.65%)    283.53
   ftp            15583 (  0.06%)          1457293 (  0.01%)     93.52
   pop3          577473 (  2.19%)         46903318 (  0.30%)     81.22
   imap            2647 (  0.01%)          1046240 (  0.01%)    395.26
   telnet           756 (  0.00%)            87641 (  0.00%)    115.93
   ssh           672909 (  2.55%)         99651582 (  0.63%)    148.09
   dns            55493 (  0.21%)          3854081 (  0.02%)     69.45
   bgp              151 (  0.00%)            57769 (  0.00%)    382.58
   napster           70 (  0.00%)             9951 (  0.00%)    142.16
   realaud            9 (  0.00%)              582 (  0.00%)     64.67
   rtsp            1204 (  0.00%)           133520 (  0.00%)    110.90
   icecast        14050 (  0.05%)           898377 (  0.01%)     63.94
   other        3091820 ( 11.70%)       1580526210 (  9.95%)    511.20
  udp           6947618 ( 26.30%)       3530230919 ( 22.21%)    508.12
   dns           754950 (  2.86%)        149643205 (  0.94%)    198.22
   realaud           87 (  0.00%)            13822 (  0.00%)    158.87
   halflif          172 (  0.00%)            24952 (  0.00%)    145.07
   starcra          224 (  0.00%)            24086 (  0.00%)    107.53
   everque          589 (  0.00%)           115803 (  0.00%)    196.61
   unreal           245 (  0.00%)            43138 (  0.00%)    176.07
   quake             30 (  0.00%)             2650 (  0.00%)     88.33
   cuseeme            7 (  0.00%)              825 (  0.00%)    117.86
   other        6189830 ( 23.43%)       3379817522 ( 21.27%)    546.03
  icmp           491948 (  1.86%)         65999432 (  0.42%)    134.16
  ipip              334 (  0.00%)            41382 (  0.00%)    123.90
  ipsec            2710 (  0.01%)           694804 (  0.00%)    256.39
  ip6           3109589 ( 11.77%)       1864708295 ( 11.73%)    599.66
  other           14051 (  0.05%)          5946644 (  0.04%)    423.22
  frag             6933 (  0.03%)          6609891 (  0.04%)    953.40
 ip6              60916 (  0.23%)         10788812 (  0.07%)    177.11
  tcp6            19829 (  0.08%)          2277147 (  0.01%)    114.84
   http(s)          259 (  0.00%)           341473 (  0.00%)   1318.43
   http(c)         3968 (  0.02%)           362673 (  0.00%)     91.40
   smtp             259 (  0.00%)            99249 (  0.00%)    383.20
   ftp             5397 (  0.02%)           537082 (  0.00%)     99.51
   imap             335 (  0.00%)            38990 (  0.00%)    116.39
   ssh             3228 (  0.01%)           267656 (  0.00%)     82.92
   dns              105 (  0.00%)            27208 (  0.00%)    259.12
   bgp              116 (  0.00%)            16163 (  0.00%)    139.34
   other           6162 (  0.02%)           586653 (  0.00%)     95.20
  udp6            33953 (  0.13%)          7377033 (  0.05%)    217.27
   dns            33673 (  0.13%)          7335214 (  0.05%)    217.84
   other            280 (  0.00%)            41819 (  0.00%)    149.35
  icmp6            6778 (  0.03%)           815155 (  0.01%)    120.26
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            326 (  0.00%)           315397 (  0.00%)    967.48


tcpdump file: 201004150930.dump.gz (665.87 MB)