Traffic Trace Info


DumpFile: 200905191400.dump
FileSize: 2448.80MB
Id: 200905191400
StartTime: Tue May 19 14:00:00 2009
EndTime: Tue May 19 14:15:01 2009
TotalTime: 900.11 seconds
TotalCapSize: 1886.34MB CapLen: 96 bytes
# of packets: 36860624 (23014.61MB)
AvgRate: 214.49Mbps stddev:18.52M

IP flow (unique src/dst pair) Information

# of flows: 1550084 (avg. 23.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.1% 2.0% 1.7% 0.7% 0.7% 0.7% 0.7% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 943653
Top 10 bandwidth usage (bytes/total in %):
35.6% 5.4% 4.2% 4.1% 3.8% 2.8% 2.7% 2.6% 2.5% 2.5%
# of IPv6 addresses: 1171
Top 10 bandwidth usage (bytes/total in %):
22.8% 19.3% 15.3% 10.7% 9.9% 9.9% 7.6% 7.3% 7.0% 4.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    7982594
 [   64-  127]:    9406085
 [  128-  255]:    2002002
 [  256-  511]:    1056974
 [  512- 1023]:    1296209
 [ 1024- 2047]:   15116760


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         36860624 (100.00%)      24132562880 (100.00%)    654.70
 ip            36818481 ( 99.89%)      24120811331 ( 99.95%)    655.13
  tcp          24941945 ( 67.67%)      18915726280 ( 78.38%)    758.39
   http(s)      9082848 ( 24.64%)      11860835488 ( 49.15%)   1305.85
   http(c)      5842259 ( 15.85%)        657835874 (  2.73%)    112.60
   squid         405351 (  1.10%)        282692804 (  1.17%)    697.40
   smtp          416804 (  1.13%)        210108942 (  0.87%)    504.10
   nntp             421 (  0.00%)            56717 (  0.00%)    134.72
   ftp            58690 (  0.16%)         21605087 (  0.09%)    368.12
   pop3           17201 (  0.05%)          5269949 (  0.02%)    306.37
   imap            3911 (  0.01%)          1517938 (  0.01%)    388.12
   telnet          5708 (  0.02%)           824558 (  0.00%)    144.46
   ssh            23472 (  0.06%)          5592696 (  0.02%)    238.27
   dns             4666 (  0.01%)          4008521 (  0.02%)    859.09
   bgp              163 (  0.00%)            60312 (  0.00%)    370.01
   napster          867 (  0.00%)           337208 (  0.00%)    388.94
   realaud         1790 (  0.00%)           227868 (  0.00%)    127.30
   rtsp          172850 (  0.47%)         51252535 (  0.21%)    296.51
   icecast        16277 (  0.04%)          8616035 (  0.04%)    529.34
   hotline            8 (  0.00%)              496 (  0.00%)     62.00
   other        8888639 ( 24.11%)       5804882052 ( 24.05%)    653.07
  udp          11111782 ( 30.15%)       5115731053 ( 21.20%)    460.39
   dns          1310158 (  3.55%)        266239574 (  1.10%)    203.21
   rip                1 (  0.00%)              104 (  0.00%)    104.00
   realaud        20575 (  0.06%)          7619272 (  0.03%)    370.32
   halflif         4080 (  0.01%)           266403 (  0.00%)     65.29
   starcra          541 (  0.00%)           101911 (  0.00%)    188.38
   everque        19197 (  0.05%)         17427822 (  0.07%)    907.84
   unreal           299 (  0.00%)            71203 (  0.00%)    238.14
   quake             51 (  0.00%)             7983 (  0.00%)    156.53
   cuseeme           20 (  0.00%)             3170 (  0.00%)    158.50
   other        9755388 ( 26.47%)       4823697385 ( 19.99%)    494.46
  icmp           650751 (  1.77%)         59779832 (  0.25%)     91.86
  ipip             1374 (  0.00%)           207568 (  0.00%)    151.07
  ipsec            5140 (  0.01%)          1804208 (  0.01%)    351.01
  ip6             19641 (  0.05%)         12760873 (  0.05%)    649.71
  other           87848 (  0.24%)         14801517 (  0.06%)    168.49
  frag            25915 (  0.07%)         20581129 (  0.09%)    794.18
 ip6              42143 (  0.11%)         11751549 (  0.05%)    278.85
  tcp6            13054 (  0.04%)          5297261 (  0.02%)    405.80
   http(s)         3557 (  0.01%)          2108305 (  0.01%)    592.72
   http(c)         3841 (  0.01%)           782200 (  0.00%)    203.64
   smtp            1776 (  0.00%)           884566 (  0.00%)    498.07
   ssh               30 (  0.00%)             2628 (  0.00%)     87.60
   bgp              410 (  0.00%)            38526 (  0.00%)     93.97
   other           3440 (  0.01%)          1481036 (  0.01%)    430.53
  udp6            21069 (  0.06%)          3419507 (  0.01%)    162.30
   dns            21047 (  0.06%)          3417041 (  0.01%)    162.35
   halflif            1 (  0.00%)              112 (  0.00%)    112.00
   everque            1 (  0.00%)              118 (  0.00%)    118.00
   cuseeme            1 (  0.00%)               99 (  0.00%)     99.00
   other             19 (  0.00%)             2137 (  0.00%)    112.47
  icmp6            7983 (  0.02%)          3025240 (  0.01%)    378.96
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6              6 (  0.00%)             5325 (  0.00%)    887.50


tcpdump file: 200905191400.dump.gz (916.68 MB)