Traffic Trace Info


DumpFile: 200906031400.dump
FileSize: 2308.95MB
Id: 200906031400
StartTime: Wed Jun 3 14:00:01 2009
EndTime: Wed Jun 3 14:15:00 2009
TotalTime: 899.35 seconds
TotalCapSize: 1782.04MB CapLen: 96 bytes
# of packets: 34530846 (20951.95MB)
AvgRate: 195.44Mbps stddev:18.63M

IP flow (unique src/dst pair) Information

# of flows: 1629832 (avg. 21.19 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.1% 0.9% 0.8% 0.8% 0.7% 0.7% 0.7% 0.6% 0.5% 0.5%

IP address Information

# of IPv4 addresses: 979307
Top 10 bandwidth usage (bytes/total in %):
34.3% 4.9% 4.0% 3.0% 2.6% 2.3% 2.1% 2.1% 1.9% 1.7%
# of IPv6 addresses: 2354
Top 10 bandwidth usage (bytes/total in %):
15.8% 13.6% 9.6% 8.5% 8.4% 8.3% 6.9% 6.3% 5.7% 5.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    7809794
 [   64-  127]:    8426787
 [  128-  255]:    2304942
 [  256-  511]:    1191092
 [  512- 1023]:    1098512
 [ 1024- 2047]:   13699719


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         34530846 (100.00%)      21969709696 (100.00%)    636.23
 ip            34473176 ( 99.83%)      21956123310 ( 99.94%)    636.90
  tcp          23762257 ( 68.81%)      17678337930 ( 80.47%)    743.97
   http(s)      7456110 ( 21.59%)       9598915028 ( 43.69%)   1287.39
   http(c)      5210336 ( 15.09%)        658765605 (  3.00%)    126.43
   squid         671112 (  1.94%)        354570254 (  1.61%)    528.33
   smtp          286179 (  0.83%)         75416561 (  0.34%)    263.53
   nntp             156 (  0.00%)            10811 (  0.00%)     69.30
   ftp            25589 (  0.07%)          4550621 (  0.02%)    177.84
   pop3           13264 (  0.04%)          3475433 (  0.02%)    262.02
   imap            3781 (  0.01%)          1865852 (  0.01%)    493.48
   telnet          3763 (  0.01%)           335752 (  0.00%)     89.22
   ssh            32509 (  0.09%)         12433340 (  0.06%)    382.46
   dns            37918 (  0.11%)         22348091 (  0.10%)    589.38
   bgp              131 (  0.00%)            41252 (  0.00%)    314.90
   napster          407 (  0.00%)            58053 (  0.00%)    142.64
   realaud         1417 (  0.00%)           169420 (  0.00%)    119.56
   rtsp           47405 (  0.14%)         15583186 (  0.07%)    328.72
   icecast        13070 (  0.04%)          5156919 (  0.02%)    394.56
   hotline            9 (  0.00%)             1546 (  0.00%)    171.78
   other        9958938 ( 28.84%)       6924533520 ( 31.52%)    695.31
  udp          10050595 ( 29.11%)       4200150770 ( 19.12%)    417.90
   dns          1364493 (  3.95%)        292078840 (  1.33%)    214.06
   realaud        25602 (  0.07%)          8764831 (  0.04%)    342.35
   halflif          144 (  0.00%)            22186 (  0.00%)    154.07
   starcra          749 (  0.00%)           150740 (  0.00%)    201.26
   everque         4041 (  0.01%)           640766 (  0.00%)    158.57
   unreal           223 (  0.00%)            45880 (  0.00%)    205.74
   quake             54 (  0.00%)             8494 (  0.00%)    157.30
   cuseeme           40 (  0.00%)             7548 (  0.00%)    188.70
   other        8654540 ( 25.06%)       3898175124 ( 17.74%)    450.42
  icmp           583265 (  1.69%)         52520537 (  0.24%)     90.05
  ipip             1324 (  0.00%)           210054 (  0.00%)    158.65
  ipsec              92 (  0.00%)            14536 (  0.00%)    158.00
  ip6             20918 (  0.06%)         13912619 (  0.06%)    665.10
  other           54725 (  0.16%)         10976864 (  0.05%)    200.58
  frag            82709 (  0.24%)         75600576 (  0.34%)    914.06
 ip6              57670 (  0.17%)         13586386 (  0.06%)    235.59
  tcp6            32136 (  0.09%)          7992076 (  0.04%)    248.70
   http(s)         1376 (  0.00%)          1043847 (  0.00%)    758.61
   http(c)        10878 (  0.03%)          1337048 (  0.01%)    122.91
   smtp            5309 (  0.02%)          3067347 (  0.01%)    577.76
   ssh             3249 (  0.01%)           349862 (  0.00%)    107.68
   dns               30 (  0.00%)             7708 (  0.00%)    256.93
   bgp              408 (  0.00%)            37309 (  0.00%)     91.44
   other          10886 (  0.03%)          2148955 (  0.01%)    197.41
  udp6            18069 (  0.05%)          3430567 (  0.02%)    189.86
   dns            15349 (  0.04%)          2782011 (  0.01%)    181.25
   everque            1 (  0.00%)              105 (  0.00%)    105.00
   other           2719 (  0.01%)           648451 (  0.00%)    238.49
  icmp6            5398 (  0.02%)           687144 (  0.00%)    127.30
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6           2036 (  0.01%)          1472383 (  0.01%)    723.17


tcpdump file: 200906031400.dump.gz (864.99 MB)