Traffic Trace Info


DumpFile: 200906171400.dump
FileSize: 2859.23MB
Id: 200906171400
StartTime: Wed Jun 17 14:00:01 2009
EndTime: Wed Jun 17 14:15:01 2009
TotalTime: 899.75 seconds
TotalCapSize: -1883.54MB CapLen: 96 bytes
# of packets: 42386158 (28208.84MB)
AvgRate: 262.98Mbps stddev:24.18M

IP flow (unique src/dst pair) Information

# of flows: 1389243 (avg. 30.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 1.4% 1.1% 1.0% 0.9% 0.8% 0.8% 0.8% 0.8% 0.6%

IP address Information

# of IPv4 addresses: 836289
Top 10 bandwidth usage (bytes/total in %):
31.2% 3.8% 3.8% 3.5% 3.3% 2.9% 2.9% 2.8% 2.3% 2.2%
# of IPv6 addresses: 936
Top 10 bandwidth usage (bytes/total in %):
96.3% 96.0% 1.0% 1.0% 0.4% 0.4% 0.4% 0.4% 0.4% 0.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    9079256
 [   64-  127]:   10186040
 [  128-  255]:    2023761
 [  256-  511]:    1017460
 [  512- 1023]:    1274182
 [ 1024- 2047]:   18805459


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         42386158 (100.00%)      29579115453 (100.00%)    697.85
 ip            42077711 ( 99.27%)      29162623094 ( 98.59%)    693.07
  tcp          29871979 ( 70.48%)      23840514496 ( 80.60%)    798.09
   http(s)     10353770 ( 24.43%)      13898528383 ( 46.99%)   1342.36
   http(c)      5555714 ( 13.11%)        648486561 (  2.19%)    116.72
   squid         888275 (  2.10%)        426697489 (  1.44%)    480.37
   smtp          445891 (  1.05%)        202596231 (  0.68%)    454.36
   nntp              32 (  0.00%)             5540 (  0.00%)    173.12
   ftp            50374 (  0.12%)          6606883 (  0.02%)    131.16
   pop3           15599 (  0.04%)          4711722 (  0.02%)    302.05
   imap            3892 (  0.01%)          1230728 (  0.00%)    316.22
   telnet          6148 (  0.01%)           470567 (  0.00%)     76.54
   ssh           117263 (  0.28%)         85281699 (  0.29%)    727.27
   dns             5658 (  0.01%)          6403279 (  0.02%)   1131.72
   bgp              135 (  0.00%)            45562 (  0.00%)    337.50
   napster          741 (  0.00%)            54676 (  0.00%)     73.79
   realaud          923 (  0.00%)           106202 (  0.00%)    115.06
   rtsp          496697 (  1.17%)        104817843 (  0.35%)    211.03
   icecast        71620 (  0.17%)          5895420 (  0.02%)     82.32
   hotline           18 (  0.00%)             2156 (  0.00%)    119.78
   other       11859108 ( 27.98%)       8448476338 ( 28.56%)    712.40
  udp          11646846 ( 27.48%)       5260105292 ( 17.78%)    451.63
   dns          1577484 (  3.72%)        303530585 (  1.03%)    192.41
   rip                1 (  0.00%)              104 (  0.00%)    104.00
   realaud         7972 (  0.02%)           524320 (  0.00%)     65.77
   halflif         2777 (  0.01%)           174372 (  0.00%)     62.79
   starcra          515 (  0.00%)           100948 (  0.00%)    196.02
   everque         2757 (  0.01%)          1960017 (  0.01%)    710.92
   unreal           158 (  0.00%)            33967 (  0.00%)    214.98
   quake             53 (  0.00%)            12390 (  0.00%)    233.77
   cuseeme           14 (  0.00%)             2223 (  0.00%)    158.79
   other       10050458 ( 23.71%)       4952932038 ( 16.74%)    492.81
  icmp           507491 (  1.20%)         45889815 (  0.16%)     90.42
  ipip             1166 (  0.00%)           185352 (  0.00%)    158.96
  ipsec              82 (  0.00%)            12956 (  0.00%)    158.00
  ip6             11173 (  0.03%)          2002300 (  0.01%)    179.21
  other           38974 (  0.09%)         13912883 (  0.05%)    356.98
  frag            20700 (  0.05%)         14976872 (  0.05%)    723.52
 ip6             308447 (  0.73%)        416492359 (  1.41%)   1350.29
  tcp6           292426 (  0.69%)        412761752 (  1.40%)   1411.51
   http(s)         5735 (  0.01%)          6521975 (  0.02%)   1137.22
   http(c)         3999 (  0.01%)           759168 (  0.00%)    189.84
   squid              2 (  0.00%)              148 (  0.00%)     74.00
   smtp            1128 (  0.00%)           460939 (  0.00%)    408.63
   ssh             4793 (  0.01%)          1530246 (  0.01%)    319.27
   bgp              410 (  0.00%)            37550 (  0.00%)     91.59
   icecast            1 (  0.00%)               74 (  0.00%)     74.00
   other         276358 (  0.65%)        403451652 (  1.36%)   1459.89
  udp6            10181 (  0.02%)          2023469 (  0.01%)    198.75
   dns            10113 (  0.02%)          2016349 (  0.01%)    199.38
   other             68 (  0.00%)             7120 (  0.00%)    104.71
  icmp6            4026 (  0.01%)           481183 (  0.00%)    119.52
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           1784 (  0.00%)          1221875 (  0.00%)    684.91


tcpdump file: 200906171400.dump.gz (1040.67 MB)