Traffic Trace Info


DumpFile: 200810311400.dump
FileSize: 2467.04MB
Id: 200810311400
StartTime: Fri Oct 31 14:00:01 2008
EndTime: Fri Oct 31 14:15:00 2008
TotalTime: 899.16 seconds
TotalCapSize: 1916.39MB CapLen: 96 bytes
# of packets: 36086893 (26426.31MB)
AvgRate: 246.52Mbps stddev:24.12M

IP flow (unique src/dst pair) Information

# of flows: 568569 (avg. 63.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.3% 1.2% 0.8% 0.7% 0.7% 0.7% 0.6% 0.6% 0.6% 0.6%

IP address Information

# of IPv4 addresses: 293549
Top 10 bandwidth usage (bytes/total in %):
24.6% 18.1% 2.4% 2.3% 1.4% 1.4% 1.3% 1.3% 1.3% 1.3%
# of IPv6 addresses: 830
Top 10 bandwidth usage (bytes/total in %):
29.2% 27.4% 22.4% 10.7% 5.0% 5.0% 4.1% 3.6% 2.7% 2.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   11247154
 [   64-  127]:    4702092
 [  128-  255]:     879682
 [  256-  511]:     890189
 [  512- 1023]:    1097412
 [ 1024- 2047]:   17270364


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         36086893 (100.00%)      27709998325 (100.00%)    767.87
 ip            36042672 ( 99.88%)      27704087251 ( 99.98%)    768.65
  tcp          32347913 ( 89.64%)      26482165742 ( 95.57%)    818.67
   http(s)     15946165 ( 44.19%)      21571662426 ( 77.85%)   1352.78
   http(c)      9743368 ( 27.00%)       1199029973 (  4.33%)    123.06
   squid        1345963 (  3.73%)        332009618 (  1.20%)    246.67
   smtp          730812 (  2.03%)        217201330 (  0.78%)    297.21
   ftp            58261 (  0.16%)         19731424 (  0.07%)    338.67
   pop3           39453 (  0.11%)         19069709 (  0.07%)    483.35
   imap            7337 (  0.02%)          1053073 (  0.00%)    143.53
   telnet          1954 (  0.01%)           282013 (  0.00%)    144.33
   ssh           144360 (  0.40%)         54121491 (  0.20%)    374.91
   dns             6715 (  0.02%)           743706 (  0.00%)    110.75
   bgp              159 (  0.00%)            60237 (  0.00%)    378.85
   napster          132 (  0.00%)            14265 (  0.00%)    108.07
   realaud          958 (  0.00%)            61650 (  0.00%)     64.35
   rtsp          512115 (  1.42%)        571444635 (  2.06%)   1115.85
   icecast        35434 (  0.10%)         19491822 (  0.07%)    550.09
   hotline            5 (  0.00%)              713 (  0.00%)    142.60
   other        3774721 ( 10.46%)       2476187597 (  8.94%)    655.99
  udp           3068112 (  8.50%)       1167630025 (  4.21%)    380.57
   dns          1139269 (  3.16%)        212606183 (  0.77%)    186.62
   realaud        38384 (  0.11%)         13681302 (  0.05%)    356.43
   halflif           17 (  0.00%)             1360 (  0.00%)     80.00
   starcra           24 (  0.00%)             4100 (  0.00%)    170.83
   everque          154 (  0.00%)            14631 (  0.00%)     95.01
   unreal            49 (  0.00%)            10601 (  0.00%)    216.35
   quake             20 (  0.00%)             1723 (  0.00%)     86.15
   cuseeme            5 (  0.00%)              378 (  0.00%)     75.60
   other        1889643 (  5.24%)        940659839 (  3.39%)    497.80
  icmp           616334 (  1.71%)         52455752 (  0.19%)     85.11
  ipip              291 (  0.00%)            33776 (  0.00%)    116.07
  ipsec            7545 (  0.02%)          1471878 (  0.01%)    195.08
  ip6              1103 (  0.00%)           153738 (  0.00%)    139.38
  other            1374 (  0.00%)           176340 (  0.00%)    128.34
  frag            39583 (  0.11%)         35745048 (  0.13%)    903.04
 ip6              44221 (  0.12%)          5911074 (  0.02%)    133.67
  tcp6            22177 (  0.06%)          2743669 (  0.01%)    123.72
   http(s)          450 (  0.00%)           471968 (  0.00%)   1048.82
   http(c)        18765 (  0.05%)          1765352 (  0.01%)     94.08
   smtp             523 (  0.00%)           267865 (  0.00%)    512.17
   ftp               16 (  0.00%)             1491 (  0.00%)     93.19
   pop3              30 (  0.00%)             2604 (  0.00%)     86.80
   ssh             1019 (  0.00%)           105072 (  0.00%)    103.11
   dns                7 (  0.00%)              635 (  0.00%)     90.71
   bgp              430 (  0.00%)            42457 (  0.00%)     98.74
   other            937 (  0.00%)            86225 (  0.00%)     92.02
  udp6             8285 (  0.02%)          1475180 (  0.01%)    178.05
   dns             8252 (  0.02%)          1471854 (  0.01%)    178.36
   other             33 (  0.00%)             3326 (  0.00%)    100.79
  icmp6           13703 (  0.04%)          1663856 (  0.01%)    121.42
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             26 (  0.00%)            24289 (  0.00%)    934.19


tcpdump file: 200810311400.dump.gz (884.87 MB)