Traffic Trace Info


DumpFile: 200903291400.dump
FileSize: 1259.56MB
Id: 200903291400
StartTime: Sun Mar 29 14:00:01 2009
EndTime: Sun Mar 29 14:15:01 2009
TotalTime: 900.09 seconds
TotalCapSize: 982.02MB CapLen: 96 bytes
# of packets: 18188144 (13873.80MB)
AvgRate: 129.33Mbps stddev:19.07M

IP flow (unique src/dst pair) Information

# of flows: 598950 (avg. 30.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.5% 1.5% 1.5% 1.4% 1.3% 1.3% 1.2% 1.2% 0.9%

IP address Information

# of IPv4 addresses: 379465
Top 10 bandwidth usage (bytes/total in %):
23.1% 16.8% 6.7% 4.6% 4.5% 3.8% 3.4% 3.0% 2.1% 1.9%
# of IPv6 addresses: 1813
Top 10 bandwidth usage (bytes/total in %):
26.1% 21.6% 14.7% 13.3% 13.3% 13.2% 13.1% 6.9% 6.5% 6.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4263930
 [   64-  127]:    3314720
 [  128-  255]:     516389
 [  256-  511]:     366801
 [  512- 1023]:     319495
 [ 1024- 2047]:    9406809


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         18188144 (100.00%)      14547728852 (100.00%)    799.85
 ip            18156369 ( 99.83%)      14537801648 ( 99.93%)    800.70
  tcp          15060188 ( 82.80%)      13319363738 ( 91.56%)    884.41
   http(s)      8102783 ( 44.55%)      11260754697 ( 77.41%)   1389.74
   http(c)      4028941 ( 22.15%)        301337263 (  2.07%)     74.79
   squid         295870 (  1.63%)        145718607 (  1.00%)    492.51
   smtp          214408 (  1.18%)         42737270 (  0.29%)    199.33
   ftp           264354 (  1.45%)        309351188 (  2.13%)   1170.22
   pop3            3739 (  0.02%)          1510321 (  0.01%)    403.94
   imap            1893 (  0.01%)           696450 (  0.00%)    367.91
   telnet         12070 (  0.07%)          2707971 (  0.02%)    224.36
   ssh           128296 (  0.71%)         25067268 (  0.17%)    195.39
   dns            11818 (  0.06%)          1211779 (  0.01%)    102.54
   bgp              135 (  0.00%)            38750 (  0.00%)    287.04
   napster          137 (  0.00%)            15150 (  0.00%)    110.58
   realaud           58 (  0.00%)             7464 (  0.00%)    128.69
   rtsp             146 (  0.00%)            47315 (  0.00%)    324.08
   icecast          380 (  0.00%)            49119 (  0.00%)    129.26
   hotline          993 (  0.01%)            62092 (  0.00%)     62.53
   other        1994149 ( 10.96%)       1228049954 (  8.44%)    615.83
  udp           2372285 ( 13.04%)       1154699390 (  7.94%)    486.75
   dns           972292 (  5.35%)        210193600 (  1.44%)    216.18
   realaud          929 (  0.01%)            55860 (  0.00%)     60.13
   halflif          179 (  0.00%)            28758 (  0.00%)    160.66
   starcra           22 (  0.00%)             2477 (  0.00%)    112.59
   everque           62 (  0.00%)            12979 (  0.00%)    209.34
   unreal          2347 (  0.01%)          1511333 (  0.01%)    643.94
   quake              6 (  0.00%)              517 (  0.00%)     86.17
   cuseeme            5 (  0.00%)              519 (  0.00%)    103.80
   other        1396243 (  7.68%)        942731488 (  6.48%)    675.19
  icmp           690337 (  3.80%)         56018364 (  0.39%)     81.15
  ipip              314 (  0.00%)            37472 (  0.00%)    119.34
  ipsec              53 (  0.00%)             8374 (  0.00%)    158.00
  ip6             24974 (  0.14%)          6506628 (  0.04%)    260.54
  other            8218 (  0.05%)          1167682 (  0.01%)    142.09
  frag            36309 (  0.20%)         39646996 (  0.27%)   1091.93
 ip6              31775 (  0.17%)          9927204 (  0.07%)    312.42
  tcp6            11385 (  0.06%)          6757465 (  0.05%)    593.54
   http(s)         2369 (  0.01%)          1779630 (  0.01%)    751.22
   http(c)         4434 (  0.02%)           869108 (  0.01%)    196.01
   smtp              60 (  0.00%)            24712 (  0.00%)    411.87
   ftp              198 (  0.00%)            37864 (  0.00%)    191.23
   bgp              373 (  0.00%)            32056 (  0.00%)     85.94
   other           3951 (  0.02%)          4014095 (  0.03%)   1015.97
  udp6            12679 (  0.07%)          1891874 (  0.01%)    149.21
   dns            11029 (  0.06%)          1639440 (  0.01%)    148.65
   other           1650 (  0.01%)           252434 (  0.00%)    152.99
  icmp6            7309 (  0.04%)           935353 (  0.01%)    127.97
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            372 (  0.00%)           338432 (  0.00%)    909.76


tcpdump file: 200903291400.dump.gz (422.68 MB)