Traffic Trace Info


DumpFile: 200904191400.dump
FileSize: 1140.35MB
Id: 200904191400
StartTime: Sun Apr 19 14:00:00 2009
EndTime: Sun Apr 19 14:15:01 2009
TotalTime: 900.54 seconds
TotalCapSize: 884.67MB CapLen: 96 bytes
# of packets: 16747174 (11670.01MB)
AvgRate: 108.71Mbps stddev:13.21M

IP flow (unique src/dst pair) Information

# of flows: 544836 (avg. 30.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 2.8% 1.7% 1.4% 1.4% 1.3% 1.1% 1.0% 0.9% 0.9%

IP address Information

# of IPv4 addresses: 352205
Top 10 bandwidth usage (bytes/total in %):
12.1% 12.1% 5.4% 4.8% 4.8% 3.3% 3.1% 3.0% 2.8% 2.3%
# of IPv6 addresses: 1795
Top 10 bandwidth usage (bytes/total in %):
98.3% 66.0% 32.3% 0.6% 0.4% 0.2% 0.2% 0.2% 0.2% 0.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3279574
 [   64-  127]:    4083141
 [  128-  255]:     729171
 [  256-  511]:     430307
 [  512- 1023]:     441649
 [ 1024- 2047]:    7783332


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         16747174 (100.00%)      12236889207 (100.00%)    730.68
 ip            16362378 ( 97.70%)      11723604878 ( 95.81%)    716.50
  tcp          11119785 ( 66.40%)       9121190648 ( 74.54%)    820.27
   http(s)      4818708 ( 28.77%)       6485205024 ( 53.00%)   1345.84
   http(c)      2562724 ( 15.30%)        250275311 (  2.05%)     97.66
   squid         417357 (  2.49%)        229885667 (  1.88%)    550.81
   smtp          259490 (  1.55%)         98566604 (  0.81%)    379.85
   nntp              18 (  0.00%)             1633 (  0.00%)     90.72
   ftp           214925 (  1.28%)        243557978 (  1.99%)   1133.22
   pop3            5137 (  0.03%)          2367179 (  0.02%)    460.81
   imap            3210 (  0.02%)           382384 (  0.00%)    119.12
   telnet         14570 (  0.09%)          2650921 (  0.02%)    181.94
   ssh           193746 (  1.16%)        127174883 (  1.04%)    656.40
   dns             3637 (  0.02%)          3854224 (  0.03%)   1059.73
   bgp              135 (  0.00%)            47251 (  0.00%)    350.01
   napster           14 (  0.00%)              894 (  0.00%)     63.86
   realaud            3 (  0.00%)              186 (  0.00%)     62.00
   rtsp           54135 (  0.32%)          3496072 (  0.03%)     64.58
   icecast        23825 (  0.14%)         22955393 (  0.19%)    963.50
   other        2548146 ( 15.22%)       1650768744 ( 13.49%)    647.83
  udp           4439556 ( 26.51%)       2534604883 ( 20.71%)    570.91
   dns           860769 (  5.14%)        168329541 (  1.38%)    195.56
   rip                4 (  0.00%)              264 (  0.00%)     66.00
   realaud         1799 (  0.01%)           109523 (  0.00%)     60.88
   halflif           31 (  0.00%)             3485 (  0.00%)    112.42
   starcra           50 (  0.00%)             9250 (  0.00%)    185.00
   everque           64 (  0.00%)            13595 (  0.00%)    212.42
   unreal          1102 (  0.01%)           655254 (  0.01%)    594.60
   quake             12 (  0.00%)             1482 (  0.00%)    123.50
   cuseeme            7 (  0.00%)             1315 (  0.00%)    187.86
   other        3575607 ( 21.35%)       2365433584 ( 19.33%)    661.55
  icmp           777681 (  4.64%)         62961311 (  0.51%)     80.96
  ipip              338 (  0.00%)            42754 (  0.00%)    126.49
  ip6              8746 (  0.05%)          2338252 (  0.02%)    267.35
  other           16272 (  0.10%)          2467030 (  0.02%)    151.61
  frag             3491 (  0.02%)          2958734 (  0.02%)    847.53
 ip6             384796 (  2.30%)        513284329 (  4.19%)   1333.91
  tcp6           364692 (  2.18%)        509697092 (  4.17%)   1397.61
   http(s)         3921 (  0.02%)          3123892 (  0.03%)    796.71
   http(c)         4699 (  0.03%)           987073 (  0.01%)    210.06
   smtp             387 (  0.00%)           182131 (  0.00%)    470.62
   ftp             2170 (  0.01%)           214250 (  0.00%)     98.73
   ssh                5 (  0.00%)              782 (  0.00%)    156.40
   bgp              374 (  0.00%)            32499 (  0.00%)     86.90
   other         353136 (  2.11%)        505156465 (  4.13%)   1430.49
  udp6            14830 (  0.09%)          2330708 (  0.02%)    157.16
   dns            13161 (  0.08%)          2063053 (  0.02%)    156.76
   other           1669 (  0.01%)           267655 (  0.00%)    160.37
  icmp6            4515 (  0.03%)           547617 (  0.00%)    121.29
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            729 (  0.00%)           704832 (  0.01%)    966.85


tcpdump file: 200904191400.dump.gz (396.94 MB)