Traffic Trace Info


DumpFile: 200906131400.dump
FileSize: 2106.49MB
Id: 200906131400
StartTime: Sat Jun 13 14:00:01 2009
EndTime: Sat Jun 13 14:15:01 2009
TotalTime: 900.18 seconds
TotalCapSize: 1624.51MB CapLen: 96 bytes
# of packets: 31586254 (21014.59MB)
AvgRate: 195.85Mbps stddev:32.24M

IP flow (unique src/dst pair) Information

# of flows: 1330286 (avg. 23.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 2.0% 1.7% 1.1% 0.9% 0.8% 0.8% 0.7% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 807296
Top 10 bandwidth usage (bytes/total in %):
30.0% 6.3% 4.6% 4.4% 4.1% 3.4% 2.4% 2.2% 2.2% 2.1%
# of IPv6 addresses: 777
Top 10 bandwidth usage (bytes/total in %):
19.9% 16.3% 13.9% 13.8% 13.0% 12.9% 11.3% 9.5% 9.5% 6.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    7542350
 [   64-  127]:    7057061
 [  128-  255]:    1352293
 [  256-  511]:     692252
 [  512- 1023]:     908499
 [ 1024- 2047]:   14033799


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         31586254 (100.00%)      22035395861 (100.00%)    697.63
 ip            31550507 ( 99.89%)      22025920351 ( 99.96%)    698.12
  tcp          22496575 ( 71.22%)      18381834375 ( 83.42%)    817.09
   http(s)      7882227 ( 24.95%)      10687318148 ( 48.50%)   1355.88
   http(c)      4380436 ( 13.87%)        455211298 (  2.07%)    103.92
   squid         391855 (  1.24%)        219841176 (  1.00%)    561.03
   smtp          259310 (  0.82%)         57504454 (  0.26%)    221.76
   nntp               2 (  0.00%)              124 (  0.00%)     62.00
   ftp            43102 (  0.14%)          9692845 (  0.04%)    224.88
   pop3           14421 (  0.05%)         11103499 (  0.05%)    769.95
   imap            1517 (  0.00%)           570098 (  0.00%)    375.81
   telnet         11347 (  0.04%)          1068034 (  0.00%)     94.12
   ssh            38927 (  0.12%)          5607223 (  0.03%)    144.04
   dns             5584 (  0.02%)          6578504 (  0.03%)   1178.10
   bgp              152 (  0.00%)            53001 (  0.00%)    348.69
   napster        11016 (  0.03%)          2217889 (  0.01%)    201.33
   realaud          735 (  0.00%)            86214 (  0.00%)    117.30
   rtsp          211338 (  0.67%)         94857953 (  0.43%)    448.84
   icecast         8344 (  0.03%)           848944 (  0.00%)    101.74
   hotline           14 (  0.00%)             1647 (  0.00%)    117.64
   other        9236000 ( 29.24%)       6829211928 ( 30.99%)    739.41
  udp           8215212 ( 26.01%)       3571023085 ( 16.21%)    434.68
   dns          1188044 (  3.76%)        215538156 (  0.98%)    181.42
   realaud         8954 (  0.03%)          1822905 (  0.01%)    203.59
   halflif           77 (  0.00%)            12658 (  0.00%)    164.39
   starcra          354 (  0.00%)            71170 (  0.00%)    201.05
   everque         1312 (  0.00%)           344761 (  0.00%)    262.78
   unreal           125 (  0.00%)            26690 (  0.00%)    213.52
   quake             51 (  0.00%)             8128 (  0.00%)    159.37
   cuseeme           30 (  0.00%)             4983 (  0.00%)    166.10
   other        7016063 ( 22.21%)       3353062879 ( 15.22%)    477.91
  icmp           814922 (  2.58%)         69022374 (  0.31%)     84.70
  ipip             1122 (  0.00%)           181792 (  0.00%)    162.02
  ipsec              82 (  0.00%)            12956 (  0.00%)    158.00
  ip6             12484 (  0.04%)          2476912 (  0.01%)    198.41
  other           10110 (  0.03%)          1368857 (  0.01%)    135.40
  frag             2292 (  0.01%)          2281145 (  0.01%)    995.26
 ip6              35747 (  0.11%)          9475510 (  0.04%)    265.07
  tcp6            22931 (  0.07%)          6385959 (  0.03%)    278.49
   http(s)         2287 (  0.01%)          1696975 (  0.01%)    742.01
   http(c)         4219 (  0.01%)           778470 (  0.00%)    184.52
   smtp            1982 (  0.01%)          1066521 (  0.00%)    538.10
   ssh             6047 (  0.02%)           899054 (  0.00%)    148.68
   dns                9 (  0.00%)             3470 (  0.00%)    385.56
   bgp              420 (  0.00%)            42824 (  0.00%)    101.96
   other           7967 (  0.03%)          1898645 (  0.01%)    238.31
  udp6             6599 (  0.02%)          1335356 (  0.01%)    202.36
   dns             6586 (  0.02%)          1333926 (  0.01%)    202.54
   other             13 (  0.00%)             1430 (  0.00%)    110.00
  icmp6            4405 (  0.01%)           534167 (  0.00%)    121.26
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6           1781 (  0.01%)          1215812 (  0.01%)    682.66


tcpdump file: 200906131400.dump.gz (764.08 MB)