Traffic Trace Info


DumpFile: 200905131400.dump
FileSize: 2485.06MB
Id: 200905131400
StartTime: Wed May 13 14:00:01 2009
EndTime: Wed May 13 14:15:00 2009
TotalTime: 899.69 seconds
TotalCapSize: 1914.61MB CapLen: 96 bytes
# of packets: 37384860 (23402.21MB)
AvgRate: 218.21Mbps stddev:19.26M

IP flow (unique src/dst pair) Information

# of flows: 1429259 (avg. 26.16 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 1.7% 1.0% 1.0% 0.8% 0.6% 0.6% 0.5% 0.5% 0.4%

IP address Information

# of IPv4 addresses: 894911
Top 10 bandwidth usage (bytes/total in %):
37.2% 5.7% 4.8% 4.1% 4.1% 2.7% 2.0% 1.9% 1.8% 1.7%
# of IPv6 addresses: 1691
Top 10 bandwidth usage (bytes/total in %):
26.1% 18.4% 17.8% 17.8% 9.7% 7.7% 7.1% 6.1% 4.9% 4.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    8256547
 [   64-  127]:    9527325
 [  128-  255]:    1833186
 [  256-  511]:    1008253
 [  512- 1023]:     920749
 [ 1024- 2047]:   15838800


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         37384860 (100.00%)      24538995768 (100.00%)    656.39
 ip            37353550 ( 99.92%)      24531153918 ( 99.97%)    656.73
  tcp          25049013 ( 67.00%)      18965228326 ( 77.29%)    757.12
   http(s)      8390597 ( 22.44%)      10986290581 ( 44.77%)   1309.36
   http(c)      5507657 ( 14.73%)        728267395 (  2.97%)    132.23
   squid         590976 (  1.58%)        321014311 (  1.31%)    543.19
   smtp          387980 (  1.04%)        182284968 (  0.74%)    469.83
   nntp              94 (  0.00%)             8804 (  0.00%)     93.66
   ftp           118567 (  0.32%)         69689177 (  0.28%)    587.76
   pop3           29895 (  0.08%)          4946854 (  0.02%)    165.47
   imap            2668 (  0.01%)           782539 (  0.00%)    293.31
   telnet          9845 (  0.03%)          2126236 (  0.01%)    215.97
   ssh            43479 (  0.12%)         14367827 (  0.06%)    330.45
   dns             4865 (  0.01%)          3959643 (  0.02%)    813.90
   bgp              167 (  0.00%)            61595 (  0.00%)    368.83
   napster         1107 (  0.00%)           618952 (  0.00%)    559.13
   realaud          609 (  0.00%)            73143 (  0.00%)    120.10
   rtsp          124754 (  0.33%)         20366772 (  0.08%)    163.26
   icecast         8557 (  0.02%)          2053756 (  0.01%)    240.01
   hotline            9 (  0.00%)             1850 (  0.00%)    205.56
   other        9826758 ( 26.29%)       6628288105 ( 27.01%)    674.51
  udp          11653134 ( 31.17%)       5503750272 ( 22.43%)    472.30
   dns          1236851 (  3.31%)        253517092 (  1.03%)    204.97
   realaud         5727 (  0.02%)           394736 (  0.00%)     68.93
   halflif         1634 (  0.00%)           113235 (  0.00%)     69.30
   starcra          492 (  0.00%)            88755 (  0.00%)    180.40
   everque         6218 (  0.02%)          5477138 (  0.02%)    880.85
   unreal           137 (  0.00%)            26150 (  0.00%)    190.88
   quake             69 (  0.00%)            15092 (  0.00%)    218.72
   cuseeme           18 (  0.00%)             1871 (  0.00%)    103.94
   other       10394950 ( 27.81%)       5243289980 ( 21.37%)    504.41
  icmp           633387 (  1.69%)         57316434 (  0.23%)     90.49
  ipip             1789 (  0.00%)           263754 (  0.00%)    147.43
  ip6             12415 (  0.03%)          3008373 (  0.01%)    242.32
  other            3812 (  0.01%)          1586759 (  0.01%)    416.25
  frag            24250 (  0.06%)         17339389 (  0.07%)    715.03
 ip6              31310 (  0.08%)          7841850 (  0.03%)    250.46
  tcp6             9024 (  0.02%)          4483948 (  0.02%)    496.89
   http(s)         3585 (  0.01%)          2027327 (  0.01%)    565.50
   http(c)         2914 (  0.01%)           681613 (  0.00%)    233.91
   smtp             309 (  0.00%)           147307 (  0.00%)    476.72
   ftp               36 (  0.00%)             4141 (  0.00%)    115.03
   bgp              413 (  0.00%)            38643 (  0.00%)     93.57
   other           1767 (  0.00%)          1584917 (  0.01%)    896.95
  udp6            16379 (  0.04%)          2583326 (  0.01%)    157.72
   dns            15455 (  0.04%)          2427094 (  0.01%)    157.04
   other            924 (  0.00%)           156232 (  0.00%)    169.08
  icmp6            5816 (  0.02%)           712752 (  0.00%)    122.55
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             61 (  0.00%)            57744 (  0.00%)    946.62


tcpdump file: 200905131400.dump.gz (921.95 MB)