Traffic Trace Info


DumpFile: 200905031400.dump
FileSize: 1505.49MB
Id: 200905031400
StartTime: Sun May 3 14:00:00 2009
EndTime: Sun May 3 14:15:00 2009
TotalTime: 899.97 seconds
TotalCapSize: 1155.90MB CapLen: 96 bytes
# of packets: 22909730 (14115.18MB)
AvgRate: 131.57Mbps stddev:13.95M

IP flow (unique src/dst pair) Information

# of flows: 1240275 (avg. 18.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 1.8% 1.7% 1.0% 0.9% 0.8% 0.8% 0.7% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 764682
Top 10 bandwidth usage (bytes/total in %):
36.8% 6.7% 4.7% 4.5% 3.5% 3.3% 3.3% 2.6% 2.4% 1.8%
# of IPv6 addresses: 963
Top 10 bandwidth usage (bytes/total in %):
25.9% 18.3% 18.3% 18.0% 9.2% 8.3% 8.2% 7.9% 6.5% 5.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4917756
 [   64-  127]:    6034665
 [  128-  255]:    1336292
 [  256-  511]:     697561
 [  512- 1023]:     631761
 [ 1024- 2047]:    9291695


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         22909730 (100.00%)      14800843760 (100.00%)    646.05
 ip            22878361 ( 99.86%)      14793223500 ( 99.95%)    646.60
  tcp          14688487 ( 64.11%)      11446048536 ( 77.33%)    779.25
   http(s)      4356806 ( 19.02%)       5829432569 ( 39.39%)   1338.01
   http(c)      2269997 (  9.91%)        312015061 (  2.11%)    137.45
   squid         432073 (  1.89%)        271250832 (  1.83%)    627.79
   smtp          208750 (  0.91%)         35450904 (  0.24%)    169.82
   nntp              90 (  0.00%)             8146 (  0.00%)     90.51
   ftp            59536 (  0.26%)          5285827 (  0.04%)     88.78
   pop3            6920 (  0.03%)          3067461 (  0.02%)    443.27
   imap            2516 (  0.01%)          1900002 (  0.01%)    755.17
   telnet         25503 (  0.11%)          1889386 (  0.01%)     74.08
   ssh            34527 (  0.15%)          5943005 (  0.04%)    172.13
   dns             4175 (  0.02%)          3844758 (  0.03%)    920.90
   bgp              184 (  0.00%)            43499 (  0.00%)    236.41
   napster         6603 (  0.03%)          5064914 (  0.03%)    767.06
   realaud         1265 (  0.01%)           157130 (  0.00%)    124.21
   rtsp           58194 (  0.25%)         29495974 (  0.20%)    506.86
   icecast         4507 (  0.02%)          1141121 (  0.01%)    253.19
   hotline           38 (  0.00%)             6419 (  0.00%)    168.92
   other        7216717 ( 31.50%)       4939984982 ( 33.38%)    684.52
  udp           7611996 ( 33.23%)       3290066531 ( 22.23%)    432.22
   dns          1108116 (  4.84%)        236925946 (  1.60%)    213.81
   realaud         2898 (  0.01%)           185864 (  0.00%)     64.14
   halflif          823 (  0.00%)            58924 (  0.00%)     71.60
   starcra          334 (  0.00%)            66770 (  0.00%)    199.91
   everque          251 (  0.00%)            44197 (  0.00%)    176.08
   unreal           156 (  0.00%)            33757 (  0.00%)    216.39
   quake             46 (  0.00%)             9675 (  0.00%)    210.33
   cuseeme            4 (  0.00%)              620 (  0.00%)    155.00
   other        6497643 ( 28.36%)       3050665269 ( 20.61%)    469.50
  icmp           539208 (  2.35%)         48844621 (  0.33%)     90.59
  ipip              298 (  0.00%)            37546 (  0.00%)    125.99
  ipsec              78 (  0.00%)            12324 (  0.00%)    158.00
  ip6             34065 (  0.15%)          7698476 (  0.05%)    225.99
  other            4229 (  0.02%)           515466 (  0.00%)    121.89
  frag            32657 (  0.14%)         41428754 (  0.28%)   1268.60
 ip6              31369 (  0.14%)          7620260 (  0.05%)    242.92
  tcp6             9563 (  0.04%)          3989121 (  0.03%)    417.14
   http(s)         2122 (  0.01%)          1380064 (  0.01%)    650.36
   http(c)         4402 (  0.02%)           808257 (  0.01%)    183.61
   smtp             495 (  0.00%)           224183 (  0.00%)    452.89
   ssh                5 (  0.00%)              782 (  0.00%)    156.40
   bgp              366 (  0.00%)            30878 (  0.00%)     84.37
   other           2173 (  0.01%)          1544957 (  0.01%)    710.98
  udp6            16923 (  0.07%)          2980578 (  0.02%)    176.13
   dns            16910 (  0.07%)          2979149 (  0.02%)    176.18
   quake              1 (  0.00%)              109 (  0.00%)    109.00
   other             12 (  0.00%)             1320 (  0.00%)    110.00
  icmp6            4853 (  0.02%)           646481 (  0.00%)    133.21
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00


tcpdump file: 200905031400.dump.gz (563.15 MB)