Traffic Trace Info


DumpFile: 200809211400.dump
FileSize: 1204.16MB
Id: 200809211400
StartTime: Sun Sep 21 14:00:00 2008
EndTime: Sun Sep 21 14:15:00 2008
TotalTime: 899.76 seconds
TotalCapSize: 936.02MB CapLen: 96 bytes
# of packets: 17572228 (11088.97MB)
AvgRate: 103.38Mbps stddev:17.38M

IP flow (unique src/dst pair) Information

# of flows: 423833 (avg. 41.46 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 1.9% 1.5% 1.2% 1.2% 0.9% 0.8% 0.8% 0.8% 0.7%

IP address Information

# of IPv4 addresses: 226000
Top 10 bandwidth usage (bytes/total in %):
14.6% 7.8% 6.6% 3.5% 3.1% 2.7% 2.7% 2.6% 2.6% 2.4%
# of IPv6 addresses: 673
Top 10 bandwidth usage (bytes/total in %):
43.2% 40.1% 9.3% 6.4% 4.4% 4.4% 4.1% 4.1% 3.7% 2.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3182185
 [   64-  127]:    5281559
 [  128-  255]:    1010590
 [  256-  511]:     319485
 [  512- 1023]:     670285
 [ 1024- 2047]:    7108124


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         17572228 (100.00%)      11627632319 (100.00%)    661.71
 ip            17538397 ( 99.81%)      11623630116 ( 99.97%)    662.75
  tcp          12732564 ( 72.46%)       9661619162 ( 83.09%)    758.81
   http(s)      5169558 ( 29.42%)       6886002650 ( 59.22%)   1332.03
   http(c)      3270580 ( 18.61%)        440174561 (  3.79%)    134.59
   squid         172180 (  0.98%)        117159653 (  1.01%)    680.45
   smtp          468653 (  2.67%)         74690274 (  0.64%)    159.37
   ftp           154506 (  0.88%)         72611454 (  0.62%)    469.96
   pop3           19392 (  0.11%)         11491670 (  0.10%)    592.60
   imap            6208 (  0.04%)          1743128 (  0.01%)    280.79
   telnet           938 (  0.01%)            91349 (  0.00%)     97.39
   ssh           729059 (  4.15%)        169472868 (  1.46%)    232.45
   dns             4724 (  0.03%)           377961 (  0.00%)     80.01
   bgp              201 (  0.00%)            66628 (  0.00%)    331.48
   napster            3 (  0.00%)              186 (  0.00%)     62.00
   realaud           30 (  0.00%)             3763 (  0.00%)    125.43
   rtsp          110306 (  0.63%)        132927369 (  1.14%)   1205.08
   icecast          477 (  0.00%)            41961 (  0.00%)     87.97
   hotline           47 (  0.00%)             4938 (  0.00%)    105.06
   other        2625693 ( 14.94%)       1754758209 ( 15.09%)    668.30
  udp           4402540 ( 25.05%)       1923157650 ( 16.54%)    436.83
   dns          1348174 (  7.67%)        202128207 (  1.74%)    149.93
   realaud         1592 (  0.01%)            99774 (  0.00%)     62.67
   halflif           24 (  0.00%)             2431 (  0.00%)    101.29
   starcra           30 (  0.00%)             4463 (  0.00%)    148.77
   everque           74 (  0.00%)            11561 (  0.00%)    156.23
   unreal            10 (  0.00%)              940 (  0.00%)     94.00
   quake             17 (  0.00%)             1404 (  0.00%)     82.59
   cuseeme           16 (  0.00%)             1547 (  0.00%)     96.69
   other        3052514 ( 17.37%)       1720789583 ( 14.80%)    563.73
  icmp           389414 (  2.22%)         37104875 (  0.32%)     95.28
  ipip              321 (  0.00%)            39198 (  0.00%)    122.11
  ipsec            3235 (  0.02%)           433506 (  0.00%)    134.00
  ip6              1019 (  0.01%)           127502 (  0.00%)    125.12
  other            9304 (  0.05%)          1148223 (  0.01%)    123.41
  frag             2762 (  0.02%)          2746390 (  0.02%)    994.35
 ip6              33831 (  0.19%)          4002203 (  0.03%)    118.30
  tcp6            20639 (  0.12%)          1956025 (  0.02%)     94.77
   http(c)        18550 (  0.11%)          1742991 (  0.01%)     93.96
   smtp             106 (  0.00%)            28502 (  0.00%)    268.89
   ftp               11 (  0.00%)              950 (  0.00%)     86.36
   pop3              75 (  0.00%)             7830 (  0.00%)    104.40
   bgp              405 (  0.00%)            37386 (  0.00%)     92.31
   other           1492 (  0.01%)           138366 (  0.00%)     92.74
  udp6             8134 (  0.05%)          1400999 (  0.01%)    172.24
   dns             8113 (  0.05%)          1398689 (  0.01%)    172.40
   other             21 (  0.00%)             2310 (  0.00%)    110.00
  icmp6            5027 (  0.03%)           640963 (  0.01%)    127.50
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00


tcpdump file: 200809211400.dump.gz (432.01 MB)