Traffic Trace Info


DumpFile: 200905181400.dump
FileSize: 2048.32MB
Id: 200905181400
StartTime: Mon May 18 14:00:01 2009
EndTime: Mon May 18 14:15:01 2009
TotalTime: 900.01 seconds
TotalCapSize: 1583.73MB CapLen: 96 bytes
# of packets: 30444367 (18327.01MB)
AvgRate: 170.82Mbps stddev:19.16M

IP flow (unique src/dst pair) Information

# of flows: 1337257 (avg. 22.77 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.0% 1.6% 1.5% 1.3% 0.9% 0.9% 0.7% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 808897
Top 10 bandwidth usage (bytes/total in %):
28.5% 7.1% 4.2% 4.0% 3.7% 3.1% 2.6% 2.6% 2.2% 2.0%
# of IPv6 addresses: 1690
Top 10 bandwidth usage (bytes/total in %):
34.3% 15.4% 12.5% 10.9% 7.9% 5.6% 5.6% 5.4% 4.6% 4.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    7364948
 [   64-  127]:    7461536
 [  128-  255]:    2030965
 [  256-  511]:     840544
 [  512- 1023]:     901552
 [ 1024- 2047]:   11844822


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         30444367 (100.00%)      19217267703 (100.00%)    631.23
 ip            30382163 ( 99.80%)      19196524767 ( 99.89%)    631.84
  tcp          21942734 ( 72.07%)      16046372921 ( 83.50%)    731.28
   http(s)      6884672 ( 22.61%)       8694276548 ( 45.24%)   1262.85
   http(c)      5097853 ( 16.74%)       1117387531 (  5.81%)    219.19
   squid         624288 (  2.05%)        449455572 (  2.34%)    719.95
   smtp          480262 (  1.58%)        274327640 (  1.43%)    571.20
   nntp              29 (  0.00%)             7327 (  0.00%)    252.66
   ftp            76992 (  0.25%)         61393751 (  0.32%)    797.40
   pop3           19358 (  0.06%)          8695781 (  0.05%)    449.21
   imap            3189 (  0.01%)           691182 (  0.00%)    216.74
   telnet          6092 (  0.02%)           975924 (  0.01%)    160.20
   ssh            25249 (  0.08%)          7525901 (  0.04%)    298.07
   dns             8076 (  0.03%)          6213263 (  0.03%)    769.35
   bgp              140 (  0.00%)            41557 (  0.00%)    296.84
   napster         7554 (  0.02%)          4020045 (  0.02%)    532.17
   realaud          476 (  0.00%)            52836 (  0.00%)    111.00
   rtsp          274904 (  0.90%)        164781968 (  0.86%)    599.42
   icecast        10156 (  0.03%)          1134700 (  0.01%)    111.73
   hotline           10 (  0.00%)              678 (  0.00%)     67.80
   other        8423425 ( 27.67%)       5255390177 ( 27.35%)    623.90
  udp           7612815 ( 25.01%)       3060010449 ( 15.92%)    401.96
   dns          1174397 (  3.86%)        229866899 (  1.20%)    195.73
   realaud         8289 (  0.03%)           581008 (  0.00%)     70.09
   halflif          109 (  0.00%)            16624 (  0.00%)    152.51
   starcra          957 (  0.00%)           159069 (  0.00%)    166.22
   everque         1044 (  0.00%)            98719 (  0.00%)     94.56
   unreal           145 (  0.00%)            30982 (  0.00%)    213.67
   quake             70 (  0.00%)             9711 (  0.00%)    138.73
   cuseeme           11 (  0.00%)             1304 (  0.00%)    118.55
   other        6424895 ( 21.10%)       2828654918 ( 14.72%)    440.26
  icmp           766388 (  2.52%)         71178406 (  0.37%)     92.88
  ipip             1349 (  0.00%)           198638 (  0.00%)    147.25
  ipsec           13870 (  0.05%)         11161548 (  0.06%)    804.73
  ip6             34051 (  0.11%)          5544153 (  0.03%)    162.82
  other           10956 (  0.04%)          2058652 (  0.01%)    187.90
  frag            34506 (  0.11%)         27686220 (  0.14%)    802.36
 ip6              62204 (  0.20%)         20742936 (  0.11%)    333.47
  tcp6            32109 (  0.11%)         13780189 (  0.07%)    429.17
   http(s)         3880 (  0.01%)          2562122 (  0.01%)    660.34
   http(c)         3412 (  0.01%)           668125 (  0.00%)    195.82
   smtp            1384 (  0.00%)           630979 (  0.00%)    455.91
   ftp             2035 (  0.01%)           197089 (  0.00%)     96.85
   ssh               40 (  0.00%)             3680 (  0.00%)     92.00
   bgp              419 (  0.00%)            38904 (  0.00%)     92.85
   other          20939 (  0.07%)          9679290 (  0.05%)    462.26
  udp6            23099 (  0.08%)          3749304 (  0.02%)    162.31
   dns            21945 (  0.07%)          3572446 (  0.02%)    162.79
   starcra            1 (  0.00%)              145 (  0.00%)    145.00
   unreal             1 (  0.00%)              107 (  0.00%)    107.00
   other           1152 (  0.00%)           176606 (  0.00%)    153.30
  icmp6            6625 (  0.02%)          2900972 (  0.02%)    437.88
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            341 (  0.00%)           308391 (  0.00%)    904.37


tcpdump file: 200905181400.dump.gz (764.84 MB)