Traffic Trace Info


DumpFile: 200906111400.dump
FileSize: 2446.18MB
Id: 200906111400
StartTime: Thu Jun 11 14:00:01 2009
EndTime: Thu Jun 11 14:15:01 2009
TotalTime: 900.04 seconds
TotalCapSize: 1885.11MB CapLen: 96 bytes
# of packets: 36769573 (22232.66MB)
AvgRate: 207.21Mbps stddev:20.19M

IP flow (unique src/dst pair) Information

# of flows: 1432170 (avg. 25.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.4% 0.9% 0.7% 0.7% 0.7% 0.6% 0.5% 0.5% 0.5% 0.5%

IP address Information

# of IPv4 addresses: 846609
Top 10 bandwidth usage (bytes/total in %):
36.6% 5.5% 4.3% 3.4% 3.1% 2.3% 2.0% 1.7% 1.5% 1.5%
# of IPv6 addresses: 844
Top 10 bandwidth usage (bytes/total in %):
29.3% 29.3% 11.7% 9.8% 9.6% 8.7% 8.6% 8.4% 7.2% 6.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    9041223
 [   64-  127]:    8692998
 [  128-  255]:    2096278
 [  256-  511]:    1173498
 [  512- 1023]:    1100007
 [ 1024- 2047]:   14665569


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         36769573 (100.00%)      23312631624 (100.00%)    634.02
 ip            36731052 ( 99.90%)      23294324504 ( 99.92%)    634.19
  tcp          25352844 ( 68.95%)      18353353129 ( 78.73%)    723.92
   http(s)      7719205 ( 20.99%)      10080293327 ( 43.24%)   1305.87
   http(c)      5683750 ( 15.46%)        885345451 (  3.80%)    155.77
   squid         939135 (  2.55%)        287430907 (  1.23%)    306.06
   smtp          249330 (  0.68%)         91350649 (  0.39%)    366.38
   nntp             390 (  0.00%)            62033 (  0.00%)    159.06
   ftp           198284 (  0.54%)         13109862 (  0.06%)     66.12
   pop3           26415 (  0.07%)          5300361 (  0.02%)    200.66
   imap            5029 (  0.01%)           838724 (  0.00%)    166.78
   telnet         27413 (  0.07%)          2034019 (  0.01%)     74.20
   ssh            23949 (  0.07%)          4693684 (  0.02%)    195.99
   dns             6186 (  0.02%)          6521355 (  0.03%)   1054.21
   bgp              164 (  0.00%)            61941 (  0.00%)    377.69
   napster         5384 (  0.01%)           357686 (  0.00%)     66.43
   realaud         2937 (  0.01%)           351456 (  0.00%)    119.66
   rtsp          231841 (  0.63%)         39796718 (  0.17%)    171.66
   icecast       141243 (  0.38%)        121714381 (  0.52%)    861.74
   hotline           36 (  0.00%)             6612 (  0.00%)    183.67
   other       10092118 ( 27.45%)       6814037729 ( 29.23%)    675.18
  udp          10742497 ( 29.22%)       4876884022 ( 20.92%)    453.98
   dns          1174833 (  3.20%)        250754655 (  1.08%)    213.44
   realaud         2078 (  0.01%)           162490 (  0.00%)     78.20
   halflif         7084 (  0.02%)           433502 (  0.00%)     61.19
   starcra          503 (  0.00%)            95031 (  0.00%)    188.93
   everque         1122 (  0.00%)           118820 (  0.00%)    105.90
   unreal           157 (  0.00%)            33828 (  0.00%)    215.46
   quake             40 (  0.00%)             5049 (  0.00%)    126.22
   cuseeme           16 (  0.00%)             2104 (  0.00%)    131.50
   other        9553503 ( 25.98%)       4624909027 ( 19.84%)    484.11
  icmp           581403 (  1.58%)         51493693 (  0.22%)     88.57
  ipip             1118 (  0.00%)           184740 (  0.00%)    165.24
  ipsec              84 (  0.00%)            13272 (  0.00%)    158.00
  ip6              9437 (  0.03%)          1326853 (  0.01%)    140.60
  other           43669 (  0.12%)         11068795 (  0.05%)    253.47
  frag            26220 (  0.07%)         17417255 (  0.07%)    664.27
 ip6              38521 (  0.10%)         18307120 (  0.08%)    475.25
  tcp6            24696 (  0.07%)         14914714 (  0.06%)    603.93
   http(s)         9520 (  0.03%)         10617814 (  0.05%)   1115.32
   http(c)         4062 (  0.01%)           805212 (  0.00%)    198.23
   squid              6 (  0.00%)              444 (  0.00%)     74.00
   smtp            3168 (  0.01%)          1620442 (  0.01%)    511.50
   ssh               43 (  0.00%)             8802 (  0.00%)    204.70
   dns                6 (  0.00%)             2249 (  0.00%)    374.83
   bgp              400 (  0.00%)            36006 (  0.00%)     90.02
   icecast            3 (  0.00%)              222 (  0.00%)     74.00
   other           7488 (  0.02%)          1823523 (  0.01%)    243.53
  udp6             7458 (  0.02%)          1598666 (  0.01%)    214.36
   dns             7450 (  0.02%)          1597786 (  0.01%)    214.47
   other              8 (  0.00%)              880 (  0.00%)    110.00
  icmp6            4549 (  0.01%)           567131 (  0.00%)    124.67
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           1788 (  0.00%)          1222529 (  0.01%)    683.74


tcpdump file: 200906111400.dump.gz (917.77 MB)