Traffic Trace Info


DumpFile: 200905071400.dump
FileSize: 2648.94MB
Id: 200905071400
StartTime: Thu May 7 14:00:01 2009
EndTime: Thu May 7 14:15:00 2009
TotalTime: 899.18 seconds
TotalCapSize: 2033.77MB CapLen: 96 bytes
# of packets: 40314657 (24264.03MB)
AvgRate: 226.37Mbps stddev:15.77M

IP flow (unique src/dst pair) Information

# of flows: 1606556 (avg. 25.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 1.3% 1.2% 0.6% 0.5% 0.5% 0.5% 0.4% 0.4% 0.4%

IP address Information

# of IPv4 addresses: 966667
Top 10 bandwidth usage (bytes/total in %):
36.0% 6.2% 5.0% 3.8% 3.1% 2.4% 2.2% 2.0% 1.7% 1.7%
# of IPv6 addresses: 1632
Top 10 bandwidth usage (bytes/total in %):
16.6% 13.0% 13.0% 12.0% 8.2% 7.8% 7.8% 7.0% 7.0% 6.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    8571128
 [   64-  127]:   11260969
 [  128-  255]:    2196766
 [  256-  511]:    1124507
 [  512- 1023]:    1298673
 [ 1024- 2047]:   15862614


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         40314657 (100.00%)      25442679372 (100.00%)    631.10
 ip            40278255 ( 99.91%)      25431942839 ( 99.96%)    631.41
  tcp          25757475 ( 63.89%)      18770982293 ( 73.78%)    728.76
   http(s)      7517868 ( 18.65%)       9772049566 ( 38.41%)   1299.84
   http(c)      5360128 ( 13.30%)        844397166 (  3.32%)    157.53
   squid         560178 (  1.39%)        340282447 (  1.34%)    607.45
   smtp          348174 (  0.86%)        124597994 (  0.49%)    357.86
   ftp            59970 (  0.15%)         35470346 (  0.14%)    591.47
   pop3           18092 (  0.04%)          4278679 (  0.02%)    236.50
   imap            3505 (  0.01%)           415613 (  0.00%)    118.58
   telnet          8153 (  0.02%)           882814 (  0.00%)    108.28
   ssh          1027876 (  2.55%)        159383211 (  0.63%)    155.06
   dns             8920 (  0.02%)          4125044 (  0.02%)    462.45
   bgp              154 (  0.00%)            58431 (  0.00%)    379.42
   napster         9385 (  0.02%)         13093294 (  0.05%)   1395.13
   realaud         1163 (  0.00%)           136467 (  0.00%)    117.34
   rtsp          224767 (  0.56%)        194745105 (  0.77%)    866.43
   icecast       103208 (  0.26%)         95886854 (  0.38%)    929.06
   hotline           33 (  0.00%)             5750 (  0.00%)    174.24
   other       10505836 ( 26.06%)       7181109764 ( 28.22%)    683.54
  udp          13669152 ( 33.91%)       6505219204 ( 25.57%)    475.91
   dns          1539890 (  3.82%)        302261848 (  1.19%)    196.29
   realaud        19098 (  0.05%)          8333080 (  0.03%)    436.33
   halflif        10026 (  0.02%)           612976 (  0.00%)     61.14
   starcra          524 (  0.00%)            99366 (  0.00%)    189.63
   everque          431 (  0.00%)            69707 (  0.00%)    161.73
   unreal           230 (  0.00%)            51368 (  0.00%)    223.34
   quake           5304 (  0.01%)          1348482 (  0.01%)    254.24
   cuseeme           18 (  0.00%)             3087 (  0.00%)    171.50
   other       12086673 ( 29.98%)       6189972149 ( 24.33%)    512.13
  icmp           706936 (  1.75%)         64048577 (  0.25%)     90.60
  ipip              341 (  0.00%)            43186 (  0.00%)    126.65
  ipsec           37957 (  0.09%)         47313502 (  0.19%)   1246.50
  ip6             34551 (  0.09%)         27541832 (  0.11%)    797.14
  other           71843 (  0.18%)         16794245 (  0.07%)    233.76
  frag            41845 (  0.10%)         40606307 (  0.16%)    970.40
 ip6              36402 (  0.09%)         10736533 (  0.04%)    294.94
  tcp6            10328 (  0.03%)          6401581 (  0.03%)    619.83
   http(s)         3742 (  0.01%)          3742457 (  0.01%)   1000.12
   http(c)         3314 (  0.01%)           658015 (  0.00%)    198.56
   smtp             566 (  0.00%)           258653 (  0.00%)    456.98
   ftp              130 (  0.00%)            15707 (  0.00%)    120.82
   ssh                5 (  0.00%)              782 (  0.00%)    156.40
   bgp              360 (  0.00%)            30064 (  0.00%)     83.51
   other           2211 (  0.01%)          1695903 (  0.01%)    767.03
  udp6            20852 (  0.05%)          3400593 (  0.01%)    163.08
   dns            20029 (  0.05%)          3248296 (  0.01%)    162.18
   unreal             1 (  0.00%)              114 (  0.00%)    114.00
   cuseeme            1 (  0.00%)              119 (  0.00%)    119.00
   other            821 (  0.00%)           152064 (  0.00%)    185.22
  icmp6            4907 (  0.01%)           659807 (  0.00%)    134.46
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            285 (  0.00%)           270472 (  0.00%)    949.02


tcpdump file: 200905071400.dump.gz (1024.82 MB)