Traffic Trace Info


DumpFile: 200906151400.dump
FileSize: 2670.26MB
Id: 200906151400
StartTime: Mon Jun 15 14:00:01 2009
EndTime: Mon Jun 15 14:15:00 2009
TotalTime: 899.19 seconds
TotalCapSize: -2045.35MB CapLen: 96 bytes
# of packets: 40606172 (25402.41MB)
AvgRate: 236.99Mbps stddev:18.17M

IP flow (unique src/dst pair) Information

# of flows: 1717160 (avg. 23.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.9% 0.9% 0.8% 0.6% 0.6% 0.6% 0.6% 0.5% 0.5%

IP address Information

# of IPv4 addresses: 1030337
Top 10 bandwidth usage (bytes/total in %):
33.8% 6.0% 3.1% 3.0% 2.7% 2.4% 2.1% 2.0% 1.9% 1.9%
# of IPv6 addresses: 822
Top 10 bandwidth usage (bytes/total in %):
19.2% 19.2% 10.9% 9.6% 9.6% 8.6% 7.8% 7.4% 7.3% 6.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    9664831
 [   64-  127]:    9417934
 [  128-  255]:    2188998
 [  256-  511]:    1167554
 [  512- 1023]:    1214216
 [ 1024- 2047]:   16952639


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         40606172 (100.00%)      26636352782 (100.00%)    655.97
 ip            40561833 ( 99.89%)      26618404250 ( 99.93%)    656.24
  tcp          26598309 ( 65.50%)      20338484362 ( 76.36%)    764.65
   http(s)      8543482 ( 21.04%)      11234184115 ( 42.18%)   1314.94
   http(c)      5090272 ( 12.54%)        755498435 (  2.84%)    148.42
   squid         536045 (  1.32%)        225301950 (  0.85%)    420.30
   smtp          235940 (  0.58%)         69265232 (  0.26%)    293.57
   ftp            50694 (  0.12%)         14197392 (  0.05%)    280.06
   pop3           24360 (  0.06%)         12780118 (  0.05%)    524.64
   imap            3369 (  0.01%)           647435 (  0.00%)    192.17
   telnet         15218 (  0.04%)          1145050 (  0.00%)     75.24
   ssh            97666 (  0.24%)         36525515 (  0.14%)    373.98
   dns             5659 (  0.01%)          6494235 (  0.02%)   1147.59
   bgp              150 (  0.00%)            51671 (  0.00%)    344.47
   napster         2747 (  0.01%)          1371051 (  0.01%)    499.11
   realaud          643 (  0.00%)            74581 (  0.00%)    115.99
   rtsp          339058 (  0.83%)        217241217 (  0.82%)    640.72
   icecast         6431 (  0.02%)          2991230 (  0.01%)    465.13
   hotline           29 (  0.00%)             2608 (  0.00%)     89.93
   other       11646473 ( 28.68%)       7760664308 ( 29.14%)    666.35
  udp          13144728 ( 32.37%)       6183840924 ( 23.22%)    470.44
   dns          1418571 (  3.49%)        282638850 (  1.06%)    199.24
   realaud          853 (  0.00%)            65833 (  0.00%)     77.18
   halflif         1425 (  0.00%)            96226 (  0.00%)     67.53
   starcra          740 (  0.00%)           142610 (  0.00%)    192.72
   everque         1697 (  0.00%)           837508 (  0.00%)    493.52
   unreal           206 (  0.00%)            40246 (  0.00%)    195.37
   quake             98 (  0.00%)            14691 (  0.00%)    149.91
   cuseeme           64 (  0.00%)             6836 (  0.00%)    106.81
   other       11712956 ( 28.85%)       5898487671 ( 22.14%)    503.59
  icmp           746396 (  1.84%)         80914207 (  0.30%)    108.41
  ipip             1130 (  0.00%)           182324 (  0.00%)    161.35
  ipsec             908 (  0.00%)           243688 (  0.00%)    268.38
  ip6             10605 (  0.03%)          1905738 (  0.01%)    179.70
  other           59757 (  0.15%)         12833007 (  0.05%)    214.75
  frag            58190 (  0.14%)         45971580 (  0.17%)    790.03
 ip6              44339 (  0.11%)         17948532 (  0.07%)    404.80
  tcp6            28805 (  0.07%)         14380816 (  0.05%)    499.25
   http(s)         8125 (  0.02%)          9106489 (  0.03%)   1120.80
   http(c)         3642 (  0.01%)           724354 (  0.00%)    198.89
   smtp            2401 (  0.01%)          1235290 (  0.00%)    514.49
   ssh             6040 (  0.01%)          1350392 (  0.01%)    223.57
   bgp              424 (  0.00%)            39867 (  0.00%)     94.03
   other           8173 (  0.02%)          1924424 (  0.01%)    235.46
  udp6             9200 (  0.02%)          1807094 (  0.01%)    196.42
   dns             9187 (  0.02%)          1805664 (  0.01%)    196.55
   other             13 (  0.00%)             1430 (  0.00%)    110.00
  icmp6            4527 (  0.01%)           543398 (  0.00%)    120.03
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6           1776 (  0.00%)          1213008 (  0.00%)    683.00


tcpdump file: 200906151400.dump.gz (1001.27 MB)