Traffic Trace Info


DumpFile: 200906081400.dump
FileSize: 2309.66MB
Id: 200906081400
StartTime: Mon Jun 8 14:00:00 2009
EndTime: Mon Jun 8 14:15:00 2009
TotalTime: 899.91 seconds
TotalCapSize: 1791.11MB CapLen: 96 bytes
# of packets: 33983182 (20518.03MB)
AvgRate: 191.27Mbps stddev:23.44M

IP flow (unique src/dst pair) Information

# of flows: 1649938 (avg. 20.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.8% 1.7% 1.6% 1.4% 1.4% 1.3% 1.3% 0.9% 0.9%

IP address Information

# of IPv4 addresses: 1030300
Top 10 bandwidth usage (bytes/total in %):
24.3% 6.7% 4.9% 3.3% 3.3% 3.2% 2.7% 2.4% 2.3% 1.9%
# of IPv6 addresses: 2147
Top 10 bandwidth usage (bytes/total in %):
43.0% 43.0% 12.9% 12.5% 7.0% 5.4% 4.8% 4.8% 4.7% 4.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    8352424
 [   64-  127]:    8310770
 [  128-  255]:    1832093
 [  256-  511]:    1266114
 [  512- 1023]:    1022979
 [ 1024- 2047]:   13198802


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         33983182 (100.00%)      21514714514 (100.00%)    633.10
 ip            33759723 ( 99.34%)      21487474186 ( 99.87%)    636.48
  tcp          25099458 ( 73.86%)      18077928734 ( 84.03%)    720.25
   http(s)      8273331 ( 24.35%)      10440181067 ( 48.53%)   1261.91
   http(c)      6177195 ( 18.18%)       1424773391 (  6.62%)    230.65
   squid         663232 (  1.95%)        317946600 (  1.48%)    479.39
   smtp          239413 (  0.70%)         52449418 (  0.24%)    219.08
   nntp             121 (  0.00%)            10321 (  0.00%)     85.30
   ftp            33778 (  0.10%)         23434872 (  0.11%)    693.79
   pop3           17455 (  0.05%)          5451759 (  0.03%)    312.33
   imap            3230 (  0.01%)           735604 (  0.00%)    227.74
   telnet         37427 (  0.11%)          2776654 (  0.01%)     74.19
   ssh            15122 (  0.04%)          3614830 (  0.02%)    239.04
   dns             3815 (  0.01%)          3978873 (  0.02%)   1042.95
   bgp              133 (  0.00%)            44723 (  0.00%)    336.26
   napster          138 (  0.00%)            19050 (  0.00%)    138.04
   realaud         2240 (  0.01%)           255033 (  0.00%)    113.85
   rtsp          159385 (  0.47%)         52974084 (  0.25%)    332.37
   icecast        17347 (  0.05%)          8771826 (  0.04%)    505.67
   hotline           11 (  0.00%)             1923 (  0.00%)    174.82
   other        9455310 ( 27.82%)       5740383271 ( 26.68%)    607.11
  udp           8085800 ( 23.79%)       3351252643 ( 15.58%)    414.46
   dns          1142822 (  3.36%)        250450112 (  1.16%)    219.15
   realaud         9786 (  0.03%)          2938155 (  0.01%)    300.24
   halflif          255 (  0.00%)            46108 (  0.00%)    180.82
   starcra          626 (  0.00%)           124942 (  0.00%)    199.59
   everque         4620 (  0.01%)          2157180 (  0.01%)    466.92
   unreal           208 (  0.00%)            43087 (  0.00%)    207.15
   quake             48 (  0.00%)             8588 (  0.00%)    178.92
   cuseeme           15 (  0.00%)             2797 (  0.00%)    186.47
   other        6924905 ( 20.38%)       3095025257 ( 14.39%)    446.94
  icmp           533663 (  1.57%)         47849210 (  0.22%)     89.66
  ipip             1170 (  0.00%)           190008 (  0.00%)    162.40
  ipsec              85 (  0.00%)            13430 (  0.00%)    158.00
  ip6             12647 (  0.04%)          2867240 (  0.01%)    226.71
  other           26900 (  0.08%)          7372921 (  0.03%)    274.09
  frag            72296 (  0.21%)         55013535 (  0.26%)    760.95
 ip6             223459 (  0.66%)         27240328 (  0.13%)    121.90
  tcp6           203855 (  0.60%)         22564451 (  0.10%)    110.69
   http(s)         4376 (  0.01%)          3274329 (  0.02%)    748.25
   http(c)        51458 (  0.15%)          4337940 (  0.02%)     84.30
   smtp            2513 (  0.01%)          1309000 (  0.01%)    520.89
   ssh              257 (  0.00%)            32846 (  0.00%)    127.81
   dns                8 (  0.00%)             2658 (  0.00%)    332.25
   bgp              407 (  0.00%)            37113 (  0.00%)     91.19
   other         144836 (  0.43%)         13570565 (  0.06%)     93.70
  udp6            11618 (  0.03%)          2555951 (  0.01%)    220.00
   dns             9468 (  0.03%)          2160679 (  0.01%)    228.21
   other           2150 (  0.01%)           395272 (  0.00%)    183.85
  icmp6            5992 (  0.02%)           726475 (  0.00%)    121.24
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           1964 (  0.01%)          1389371 (  0.01%)    707.42


tcpdump file: 200906081400.dump.gz (844.44 MB)