Traffic Trace Info


DumpFile: 200906041400.dump
FileSize: 2497.59MB
Id: 200906041400
StartTime: Thu Jun 4 14:00:01 2009
EndTime: Thu Jun 4 14:15:01 2009
TotalTime: 900.20 seconds
TotalCapSize: 1923.20MB CapLen: 96 bytes
# of packets: 37642489 (22562.05MB)
AvgRate: 210.26Mbps stddev:16.88M

IP flow (unique src/dst pair) Information

# of flows: 1711757 (avg. 21.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.7% 1.2% 1.0% 0.7% 0.7% 0.7% 0.6% 0.6% 0.6%

IP address Information

# of IPv4 addresses: 1027315
Top 10 bandwidth usage (bytes/total in %):
29.7% 5.2% 4.6% 2.8% 2.6% 2.3% 2.3% 2.3% 1.9% 1.7%
# of IPv6 addresses: 2679
Top 10 bandwidth usage (bytes/total in %):
12.6% 12.6% 12.0% 12.0% 10.8% 10.0% 9.9% 7.9% 7.3% 6.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    7861628
 [   64-  127]:    8025164
 [  128-  255]:    4565072
 [  256-  511]:    1648022
 [  512- 1023]:    1255754
 [ 1024- 2047]:   14286849


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         37642489 (100.00%)      23658019184 (100.00%)    628.49
 ip            37584980 ( 99.85%)      23640128735 ( 99.92%)    628.98
  tcp          24896305 ( 66.14%)      19336576259 ( 81.73%)    776.68
   http(s)      8527703 ( 22.65%)      11221664097 ( 47.43%)   1315.91
   http(c)      5299009 ( 14.08%)       1251793507 (  5.29%)    236.23
   squid         726132 (  1.93%)        426748362 (  1.80%)    587.70
   smtp          399095 (  1.06%)        120642059 (  0.51%)    302.29
   nntp             118 (  0.00%)             9748 (  0.00%)     82.61
   ftp            25317 (  0.07%)          2843176 (  0.01%)    112.30
   pop3           33267 (  0.09%)          7742899 (  0.03%)    232.75
   imap            3370 (  0.01%)          1634948 (  0.01%)    485.15
   telnet          7264 (  0.02%)          1011763 (  0.00%)    139.28
   ssh            54431 (  0.14%)          9717615 (  0.04%)    178.53
   dns            19502 (  0.05%)          5566109 (  0.02%)    285.41
   bgp              168 (  0.00%)            58779 (  0.00%)    349.88
   napster          152 (  0.00%)            22318 (  0.00%)    146.83
   realaud          728 (  0.00%)            84084 (  0.00%)    115.50
   rtsp          271134 (  0.72%)        178142754 (  0.75%)    657.03
   icecast        66017 (  0.18%)         20730468 (  0.09%)    314.02
   hotline           20 (  0.00%)             2279 (  0.00%)    113.95
   other        9462638 ( 25.14%)       6087992242 ( 25.73%)    643.37
  udp          12004633 ( 31.89%)       4220096786 ( 17.84%)    351.54
   dns          1423660 (  3.78%)        308139697 (  1.30%)    216.44
   realaud        25634 (  0.07%)         12766071 (  0.05%)    498.01
   halflif         1200 (  0.00%)            87340 (  0.00%)     72.78
   starcra          846 (  0.00%)           169867 (  0.00%)    200.79
   everque          740 (  0.00%)           176248 (  0.00%)    238.17
   unreal           227 (  0.00%)            43983 (  0.00%)    193.76
   quake             86 (  0.00%)            12239 (  0.00%)    142.31
   cuseeme           62 (  0.00%)             7690 (  0.00%)    124.03
   other       10547277 ( 28.02%)       3897267390 ( 16.47%)    369.50
  icmp           580868 (  1.54%)         53079822 (  0.22%)     91.38
  ipip             1361 (  0.00%)           214942 (  0.00%)    157.93
  ipsec              85 (  0.00%)            13430 (  0.00%)    158.00
  ip6             19872 (  0.05%)          7908112 (  0.03%)    397.95
  other           81856 (  0.22%)         22239384 (  0.09%)    271.69
  frag            71541 (  0.19%)         70286130 (  0.30%)    982.46
 ip6              57509 (  0.15%)         17890449 (  0.08%)    311.09
  tcp6            29462 (  0.08%)         11832070 (  0.05%)    401.60
   http(s)         7673 (  0.02%)          6672892 (  0.03%)    869.66
   http(c)         7458 (  0.02%)          1100134 (  0.00%)    147.51
   smtp            3499 (  0.01%)          1784883 (  0.01%)    510.11
   ssh             1292 (  0.00%)           273644 (  0.00%)    211.80
   dns               17 (  0.00%)             6280 (  0.00%)    369.41
   bgp              409 (  0.00%)            37503 (  0.00%)     91.69
   other           9114 (  0.02%)          1956734 (  0.01%)    214.70
  udp6            20628 (  0.05%)          3987093 (  0.02%)    193.29
   dns            17147 (  0.05%)          3022927 (  0.01%)    176.29
   realaud            1 (  0.00%)              107 (  0.00%)    107.00
   starcra            2 (  0.00%)              246 (  0.00%)    123.00
   everque            2 (  0.00%)              204 (  0.00%)    102.00
   other           3476 (  0.01%)           963609 (  0.00%)    277.22
  icmp6            5497 (  0.01%)           726173 (  0.00%)    132.10
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           1892 (  0.01%)          1341033 (  0.01%)    708.79


tcpdump file: 200906041400.dump.gz (926.42 MB)