Traffic Trace Info


DumpFile: 200902091400.dump
FileSize: 1420.37MB
Id: 200902091400
StartTime: Mon Feb 9 14:00:00 2009
EndTime: Mon Feb 9 14:15:01 2009
TotalTime: 900.42 seconds
TotalCapSize: 1108.09MB CapLen: 96 bytes
# of packets: 20465121 (13618.79MB)
AvgRate: 126.88Mbps stddev:18.46M

IP flow (unique src/dst pair) Information

# of flows: 670741 (avg. 30.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 2.2% 1.8% 1.5% 1.4% 1.4% 1.3% 1.1% 0.9% 0.9%

IP address Information

# of IPv4 addresses: 368995
Top 10 bandwidth usage (bytes/total in %):
8.5% 7.0% 6.9% 6.3% 6.3% 5.0% 3.4% 3.3% 2.9% 2.8%
# of IPv6 addresses: 1888
Top 10 bandwidth usage (bytes/total in %):
12.0% 9.6% 8.5% 7.5% 5.7% 5.7% 5.1% 4.8% 4.2% 3.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5236960
 [   64-  127]:    4409812
 [  128-  255]:     829504
 [  256-  511]:     610106
 [  512- 1023]:     611615
 [ 1024- 2047]:    8767124


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         20465121 (100.00%)      14280337939 (100.00%)    697.79
 ip            20434958 ( 99.85%)      14274721976 ( 99.96%)    698.54
  tcp          17021249 ( 83.17%)      13014010390 ( 91.13%)    764.57
   http(s)      6924667 ( 33.84%)       9220944208 ( 64.57%)   1331.61
   http(c)      4299651 ( 21.01%)        483974122 (  3.39%)    112.56
   squid         472137 (  2.31%)        199742816 (  1.40%)    423.06
   smtp          387359 (  1.89%)        138211569 (  0.97%)    356.80
   nntp              34 (  0.00%)             2915 (  0.00%)     85.74
   ftp           119663 (  0.58%)         99496205 (  0.70%)    831.47
   pop3           19342 (  0.09%)          9206465 (  0.06%)    475.98
   imap            4166 (  0.02%)           954329 (  0.01%)    229.08
   telnet          4713 (  0.02%)           792219 (  0.01%)    168.09
   ssh           270697 (  1.32%)         82275787 (  0.58%)    303.94
   dns             3176 (  0.02%)           612116 (  0.00%)    192.73
   bgp              204 (  0.00%)           102320 (  0.00%)    501.57
   napster           38 (  0.00%)             5098 (  0.00%)    134.16
   realaud           38 (  0.00%)             3082 (  0.00%)     81.11
   rtsp          207901 (  1.02%)         69981148 (  0.49%)    336.61
   icecast        18887 (  0.09%)         14559318 (  0.10%)    770.86
   other        4288569 ( 20.96%)       2693146253 ( 18.86%)    627.98
  udp           2907487 ( 14.21%)       1179413050 (  8.26%)    405.65
   dns          1109693 (  5.42%)        238906383 (  1.67%)    215.29
   rip                2 (  0.00%)              454 (  0.00%)    227.00
   realaud         2748 (  0.01%)           167843 (  0.00%)     61.08
   halflif           35 (  0.00%)             3573 (  0.00%)    102.09
   starcra           46 (  0.00%)             7793 (  0.00%)    169.41
   everque           91 (  0.00%)            20982 (  0.00%)    230.57
   unreal            60 (  0.00%)            17941 (  0.00%)    299.02
   quake             18 (  0.00%)             2328 (  0.00%)    129.33
   cuseeme           14 (  0.00%)             1600 (  0.00%)    114.29
   other        1794648 (  8.77%)        940206438 (  6.58%)    523.89
  icmp           419174 (  2.05%)         38449975 (  0.27%)     91.73
  ipip              328 (  0.00%)            41408 (  0.00%)    126.24
  ipsec             100 (  0.00%)            15800 (  0.00%)    158.00
  ip6             29058 (  0.14%)         27374153 (  0.19%)    942.05
  other           57562 (  0.28%)         15417200 (  0.11%)    267.84
  frag            17560 (  0.09%)         14008401 (  0.10%)    797.74
 ip6              30163 (  0.15%)          5615963 (  0.04%)    186.19
  tcp6             5622 (  0.03%)          1494287 (  0.01%)    265.79
   http(s)          741 (  0.00%)           819462 (  0.01%)   1105.89
   http(c)         2450 (  0.01%)           292956 (  0.00%)    119.57
   smtp             271 (  0.00%)            97688 (  0.00%)    360.47
   ftp               54 (  0.00%)             4947 (  0.00%)     91.61
   imap              92 (  0.00%)            36609 (  0.00%)    397.92
   ssh              157 (  0.00%)            33166 (  0.00%)    211.25
   dns                7 (  0.00%)              635 (  0.00%)     90.71
   bgp              398 (  0.00%)            36446 (  0.00%)     91.57
   other           1452 (  0.01%)           172378 (  0.00%)    118.72
  udp6            19065 (  0.09%)          3143083 (  0.02%)    164.86
   dns            17654 (  0.09%)          2894814 (  0.02%)    163.97
   other           1411 (  0.01%)           248269 (  0.00%)    175.95
  icmp6            5083 (  0.02%)           647686 (  0.00%)    127.42
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            363 (  0.00%)           326827 (  0.00%)    900.35


tcpdump file: 200902091400.dump.gz (504.57 MB)