Traffic Trace Info


DumpFile: 200906241400.dump
FileSize: 2473.01MB
Id: 200906241400
StartTime: Wed Jun 24 14:00:01 2009
EndTime: Wed Jun 24 14:15:00 2009
TotalTime: 899.35 seconds
TotalCapSize: 1927.17MB CapLen: 96 bytes
# of packets: 35772033 (23761.60MB)
AvgRate: 221.63Mbps stddev:19.69M

IP flow (unique src/dst pair) Information

# of flows: 1387061 (avg. 25.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.2% 1.1% 1.0% 1.0% 0.8% 0.8% 0.7% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 806119
Top 10 bandwidth usage (bytes/total in %):
22.0% 6.3% 5.2% 5.0% 4.6% 4.1% 4.1% 2.3% 2.3% 1.7%
# of IPv6 addresses: 857
Top 10 bandwidth usage (bytes/total in %):
53.8% 53.8% 11.0% 7.5% 3.5% 3.5% 2.7% 2.4% 2.3% 2.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    7641917
 [   64-  127]:    8983282
 [  128-  255]:    1590646
 [  256-  511]:     955508
 [  512- 1023]:    1140895
 [ 1024- 2047]:   15459785


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         35772033 (100.00%)      24915843674 (100.00%)    696.52
 ip            35740420 ( 99.91%)      24901995500 ( 99.94%)    696.75
  tcp          28592547 ( 79.93%)      22258611512 ( 89.34%)    778.48
   http(s)      9845997 ( 27.52%)      13315606711 ( 53.44%)   1352.39
   http(c)      6623707 ( 18.52%)        828905664 (  3.33%)    125.14
   squid         528998 (  1.48%)        207365844 (  0.83%)    392.00
   smtp          339205 (  0.95%)        102834038 (  0.41%)    303.16
   nntp              96 (  0.00%)            10991 (  0.00%)    114.49
   ftp           238639 (  0.67%)         27615006 (  0.11%)    115.72
   pop3           16099 (  0.05%)          3820246 (  0.02%)    237.30
   imap            3491 (  0.01%)          1274125 (  0.01%)    364.97
   telnet          6185 (  0.02%)           458228 (  0.00%)     74.09
   ssh            12697 (  0.04%)          6079426 (  0.02%)    478.81
   dns             9194 (  0.03%)          6918189 (  0.03%)    752.47
   bgp              155 (  0.00%)            64583 (  0.00%)    416.66
   napster          100 (  0.00%)            14261 (  0.00%)    142.61
   realaud          941 (  0.00%)           123235 (  0.00%)    130.96
   rtsp           86541 (  0.24%)         82334788 (  0.33%)    951.40
   icecast        40037 (  0.11%)         20038729 (  0.08%)    500.51
   hotline            6 (  0.00%)              380 (  0.00%)     63.33
   other       10840447 ( 30.30%)       7655146348 ( 30.72%)    706.17
  udp           6571321 ( 18.37%)       2570957990 ( 10.32%)    391.24
   dns          1570940 (  4.39%)        311616966 (  1.25%)    198.36
   realaud         4789 (  0.01%)           342354 (  0.00%)     71.49
   halflif           63 (  0.00%)             9056 (  0.00%)    143.75
   starcra          347 (  0.00%)            65663 (  0.00%)    189.23
   everque         1035 (  0.00%)           853831 (  0.00%)    824.96
   unreal           140 (  0.00%)            29642 (  0.00%)    211.73
   quake             64 (  0.00%)             8541 (  0.00%)    133.45
   cuseeme           15 (  0.00%)             1997 (  0.00%)    133.13
   other        4993160 ( 13.96%)       2257500422 (  9.06%)    452.12
  icmp           488611 (  1.37%)         44620342 (  0.18%)     91.32
  igmp                8 (  0.00%)              480 (  0.00%)     60.00
  ipip             1104 (  0.00%)           171436 (  0.00%)    155.29
  ipsec             321 (  0.00%)            54270 (  0.00%)    169.07
  ip6             56783 (  0.16%)         17564304 (  0.07%)    309.32
  other           29725 (  0.08%)         10015166 (  0.04%)    336.93
  frag             9312 (  0.03%)          8976471 (  0.04%)    963.97
 ip6              31613 (  0.09%)         13848174 (  0.06%)    438.05
  tcp6            17773 (  0.05%)         11397315 (  0.05%)    641.27
   http(s)         2434 (  0.01%)          2094842 (  0.01%)    860.66
   http(c)         3947 (  0.01%)           744407 (  0.00%)    188.60
   smtp            1404 (  0.00%)           642632 (  0.00%)    457.72
   ftp                1 (  0.00%)               74 (  0.00%)     74.00
   ssh               40 (  0.00%)             4144 (  0.00%)    103.60
   dns                5 (  0.00%)              724 (  0.00%)    144.80
   bgp              410 (  0.00%)            37364 (  0.00%)     91.13
   other           9532 (  0.03%)          7873128 (  0.03%)    825.97
  udp6             9593 (  0.03%)          1911887 (  0.01%)    199.30
   dns             9531 (  0.03%)          1905051 (  0.01%)    199.88
   other             62 (  0.00%)             6836 (  0.00%)    110.26
  icmp6            4198 (  0.01%)           516785 (  0.00%)    123.10
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             19 (  0.00%)            18107 (  0.00%)    953.00


tcpdump file: 200906241400.dump.gz (896.52 MB)