Traffic Trace Info


DumpFile: 200901071400.dump
FileSize: 1258.48MB
Id: 200901071400
StartTime: Wed Jan 7 14:00:00 2009
EndTime: Wed Jan 7 14:15:01 2009
TotalTime: 900.30 seconds
TotalCapSize: 986.08MB CapLen: 96 bytes
# of packets: 17851284 (12174.40MB)
AvgRate: 113.43Mbps stddev:12.82M

IP flow (unique src/dst pair) Information

# of flows: 587791 (avg. 30.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 4.2% 3.1% 2.6% 1.9% 1.7% 1.7% 1.6% 1.5% 1.4%

IP address Information

# of IPv4 addresses: 329233
Top 10 bandwidth usage (bytes/total in %):
11.5% 6.7% 4.8% 4.6% 4.4% 4.1% 3.4% 2.9% 2.9% 2.8%
# of IPv6 addresses: 1159
Top 10 bandwidth usage (bytes/total in %):
99.3% 79.0% 20.3% 0.1% 0.1% 0.1% 0.1% 0.0% 0.0% 0.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3762589
 [   64-  127]:    4167305
 [  128-  255]:     730621
 [  256-  511]:     656656
 [  512- 1023]:     716018
 [ 1024- 2047]:    7818095


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         17851284 (100.00%)      12765785450 (100.00%)    715.12
 ip            17194884 ( 96.32%)      11830945222 ( 92.68%)    688.05
  tcp          13617924 ( 76.29%)      10435528252 ( 81.75%)    766.31
   http(s)      5927320 ( 33.20%)       7774978846 ( 60.90%)   1311.72
   http(c)      4059698 ( 22.74%)        732857435 (  5.74%)    180.52
   squid         647614 (  3.63%)        322887612 (  2.53%)    498.58
   smtp          282392 (  1.58%)         83993938 (  0.66%)    297.44
   ftp            45196 (  0.25%)          6439244 (  0.05%)    142.47
   pop3           22669 (  0.13%)          5473292 (  0.04%)    241.44
   imap            5469 (  0.03%)          1626813 (  0.01%)    297.46
   telnet         12093 (  0.07%)           910073 (  0.01%)     75.26
   ssh             6765 (  0.04%)           962768 (  0.01%)    142.32
   dns             2069 (  0.01%)           159425 (  0.00%)     77.05
   bgp              177 (  0.00%)            70687 (  0.00%)    399.36
   napster            7 (  0.00%)              775 (  0.00%)    110.71
   realaud            9 (  0.00%)              707 (  0.00%)     78.56
   rtsp           90548 (  0.51%)         63365715 (  0.50%)    699.80
   icecast         1443 (  0.01%)           653397 (  0.01%)    452.80
   hotline            8 (  0.00%)             1325 (  0.00%)    165.62
   other        2514447 ( 14.09%)       1441146200 ( 11.29%)    573.15
  udp           3127526 ( 17.52%)       1350521569 ( 10.58%)    431.82
   dns           981713 (  5.50%)        200324175 (  1.57%)    204.06
   realaud        16376 (  0.09%)          8261044 (  0.06%)    504.46
   halflif           10 (  0.00%)              997 (  0.00%)     99.70
   starcra           27 (  0.00%)             3963 (  0.00%)    146.78
   everque           71 (  0.00%)            12996 (  0.00%)    183.04
   unreal            17 (  0.00%)             2545 (  0.00%)    149.71
   quake             23 (  0.00%)             2801 (  0.00%)    121.78
   cuseeme           15 (  0.00%)             1702 (  0.00%)    113.47
   other        2129230 ( 11.93%)       1141870537 (  8.94%)    536.28
  icmp           412847 (  2.31%)         37640444 (  0.29%)     91.17
  ipip              328 (  0.00%)            40424 (  0.00%)    123.24
  ipsec            5037 (  0.03%)          2263742 (  0.02%)    449.42
  ip6             22778 (  0.13%)          3514847 (  0.03%)    154.31
  other            8444 (  0.05%)          1435944 (  0.01%)    170.05
  frag             1673 (  0.01%)          1429842 (  0.01%)    854.66
 ip6             656400 (  3.68%)        934840228 (  7.32%)   1424.19
  tcp6           633773 (  3.55%)        931466487 (  7.30%)   1469.72
   http(s)         1726 (  0.01%)          1926800 (  0.02%)   1116.34
   http(c)         2697 (  0.02%)           348193 (  0.00%)    129.10
   smtp             263 (  0.00%)            67142 (  0.00%)    255.29
   ftp               51 (  0.00%)             4625 (  0.00%)     90.69
   ssh              435 (  0.00%)           456394 (  0.00%)   1049.18
   dns                6 (  0.00%)             1101 (  0.00%)    183.50
   bgp              409 (  0.00%)            39945 (  0.00%)     97.67
   other         628186 (  3.52%)        928622287 (  7.27%)   1478.26
  udp6            14377 (  0.08%)          2292699 (  0.02%)    159.47
   dns            14343 (  0.08%)          2288967 (  0.02%)    159.59
   realaud            1 (  0.00%)              102 (  0.00%)    102.00
   other             33 (  0.00%)             3630 (  0.00%)    110.00
  icmp6            8206 (  0.05%)          1063207 (  0.01%)    129.56
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             14 (  0.00%)            13755 (  0.00%)    982.50


tcpdump file: 200901071400.dump.gz (431.24 MB)