Traffic Trace Info


DumpFile: 200904241400.dump
FileSize: 3187.49MB
Id: 200904241400
StartTime: Fri Apr 24 14:00:01 2009
EndTime: Fri Apr 24 14:15:01 2009
TotalTime: 900.28 seconds
TotalCapSize: -1650.37MB CapLen: 96 bytes
# of packets: 48617922 (28904.34MB)
AvgRate: 269.36Mbps stddev:23.79M

IP flow (unique src/dst pair) Information

# of flows: 1426244 (avg. 34.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 0.8% 0.7% 0.6% 0.5% 0.5% 0.5% 0.5% 0.5% 0.4%

IP address Information

# of IPv4 addresses: 868237
Top 10 bandwidth usage (bytes/total in %):
34.2% 5.8% 5.2% 5.1% 4.9% 4.8% 3.7% 2.7% 2.5% 2.1%
# of IPv6 addresses: 1053
Top 10 bandwidth usage (bytes/total in %):
40.1% 40.1% 12.1% 8.8% 7.3% 7.3% 5.2% 4.2% 4.0% 3.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   11444093
 [   64-  127]:   13198987
 [  128-  255]:    2218432
 [  256-  511]:    1190401
 [  512- 1023]:    1315198
 [ 1024- 2047]:   19250811


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         48617922 (100.00%)      30308401821 (100.00%)    623.40
 ip            48546009 ( 99.85%)      30290446618 ( 99.94%)    623.95
  tcp          31658747 ( 65.12%)      23326037426 ( 76.96%)    736.80
   http(s)      9095195 ( 18.71%)      11734460037 ( 38.72%)   1290.18
   http(c)      6789702 ( 13.97%)        890725184 (  2.94%)    131.19
   squid         543259 (  1.12%)        249836558 (  0.82%)    459.88
   smtp          390837 (  0.80%)        104856625 (  0.35%)    268.29
   ftp           157100 (  0.32%)        155660294 (  0.51%)    990.84
   pop3           19752 (  0.04%)          6410000 (  0.02%)    324.52
   imap            6540 (  0.01%)          5458139 (  0.02%)    834.58
   telnet          6047 (  0.01%)           564268 (  0.00%)     93.31
   ssh           777462 (  1.60%)        145514787 (  0.48%)    187.17
   dns             3657 (  0.01%)          3854573 (  0.01%)   1054.03
   bgp              178 (  0.00%)            78642 (  0.00%)    441.81
   napster          182 (  0.00%)            16443 (  0.00%)     90.35
   realaud         1267 (  0.00%)           152824 (  0.00%)    120.62
   rtsp           87701 (  0.18%)         55174572 (  0.18%)    629.12
   icecast        19800 (  0.04%)         11448024 (  0.04%)    578.18
   hotline           20 (  0.00%)             1582 (  0.00%)     79.10
   other       13759712 ( 28.30%)       9961755916 ( 32.87%)    723.98
  udp          15877264 ( 32.66%)       6843052375 ( 22.58%)    431.00
   dns          1305894 (  2.69%)        276384742 (  0.91%)    211.64
   realaud         6659 (  0.01%)           454413 (  0.00%)     68.24
   halflif          436 (  0.00%)            32846 (  0.00%)     75.33
   starcra          561 (  0.00%)           103536 (  0.00%)    184.56
   everque        11620 (  0.02%)          2826239 (  0.01%)    243.22
   unreal           152 (  0.00%)            33514 (  0.00%)    220.49
   quake             68 (  0.00%)             9824 (  0.00%)    144.47
   cuseeme           20 (  0.00%)             2895 (  0.00%)    144.75
   other       14551004 ( 29.93%)       6562764319 ( 21.65%)    451.02
  icmp           939554 (  1.93%)         92430760 (  0.30%)     98.38
  ipip              299 (  0.00%)            36930 (  0.00%)    123.51
  ipsec              84 (  0.00%)            13272 (  0.00%)    158.00
  ip6             19754 (  0.04%)         22123055 (  0.07%)   1119.93
  other           50307 (  0.10%)          6752800 (  0.02%)    134.23
  frag            19461 (  0.04%)          6288233 (  0.02%)    323.12
 ip6              71913 (  0.15%)         17955203 (  0.06%)    249.68
  tcp6            46854 (  0.10%)         13923963 (  0.05%)    297.18
   http(s)         4001 (  0.01%)          3740848 (  0.01%)    934.98
   http(c)        11191 (  0.02%)          1399942 (  0.00%)    125.10
   smtp             314 (  0.00%)           111834 (  0.00%)    356.16
   ssh                5 (  0.00%)              782 (  0.00%)    156.40
   dns                5 (  0.00%)              544 (  0.00%)    108.80
   bgp              360 (  0.00%)            29856 (  0.00%)     82.93
   other          30978 (  0.06%)          8640157 (  0.03%)    278.91
  udp6            19407 (  0.04%)          3309206 (  0.01%)    170.52
   dns            19344 (  0.04%)          3302291 (  0.01%)    170.71
   starcra            2 (  0.00%)              205 (  0.00%)    102.50
   other             61 (  0.00%)             6710 (  0.00%)    110.00
  icmp6            5622 (  0.01%)           717954 (  0.00%)    127.70
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00


tcpdump file: 200904241400.dump.gz (1235.04 MB)