Traffic Trace Info


DumpFile: 200906261400.dump
FileSize: 2320.49MB
Id: 200906261400
StartTime: Fri Jun 26 14:00:00 2009
EndTime: Fri Jun 26 14:15:01 2009
TotalTime: 900.26 seconds
TotalCapSize: 1807.24MB CapLen: 96 bytes
# of packets: 33635986 (21839.06MB)
AvgRate: 203.50Mbps stddev:22.27M

IP flow (unique src/dst pair) Information

# of flows: 1216002 (avg. 27.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.4% 1.0% 1.0% 0.9% 0.9% 0.8% 0.8% 0.8% 0.7% 0.6%

IP address Information

# of IPv4 addresses: 710303
Top 10 bandwidth usage (bytes/total in %):
12.0% 7.6% 4.8% 4.2% 3.8% 3.7% 3.0% 2.8% 2.7% 2.3%
# of IPv6 addresses: 893
Top 10 bandwidth usage (bytes/total in %):
27.3% 22.0% 21.2% 19.6% 8.2% 7.8% 6.4% 6.4% 2.8% 2.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    7094528
 [   64-  127]:    8710353
 [  128-  255]:    1785196
 [  256-  511]:     896192
 [  512- 1023]:     958841
 [ 1024- 2047]:   14190876


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         33635986 (100.00%)      22899910381 (100.00%)    680.82
 ip            33607726 ( 99.92%)      22893391999 ( 99.97%)    681.19
  tcp          25114893 ( 74.67%)      18819919477 ( 82.18%)    749.35
   http(s)      9925084 ( 29.51%)      13327829965 ( 58.20%)   1342.84
   http(c)      6425443 ( 19.10%)        714377290 (  3.12%)    111.18
   squid         589879 (  1.75%)        180603052 (  0.79%)    306.17
   smtp          340477 (  1.01%)        125460305 (  0.55%)    368.48
   nntp              62 (  0.00%)             6020 (  0.00%)     97.10
   ftp           124641 (  0.37%)         16226231 (  0.07%)    130.18
   pop3           14890 (  0.04%)          7764611 (  0.03%)    521.46
   imap            2812 (  0.01%)          1028134 (  0.00%)    365.62
   telnet         12270 (  0.04%)           916421 (  0.00%)     74.69
   ssh           317876 (  0.95%)         92606828 (  0.40%)    291.33
   dns            11090 (  0.03%)          8552696 (  0.04%)    771.21
   bgp              164 (  0.00%)            66645 (  0.00%)    406.37
   napster        11949 (  0.04%)          1587690 (  0.01%)    132.87
   realaud          607 (  0.00%)            84619 (  0.00%)    139.41
   rtsp          216755 (  0.64%)         45625625 (  0.20%)    210.49
   icecast        26996 (  0.08%)         16888656 (  0.07%)    625.60
   hotline           10 (  0.00%)             1194 (  0.00%)    119.40
   other        7093831 ( 21.09%)       4280217236 ( 18.69%)    603.37
  udp           7835588 ( 23.30%)       3975429722 ( 17.36%)    507.36
   dns          1686134 (  5.01%)        310293320 (  1.35%)    184.03
   rip                5 (  0.00%)              895 (  0.00%)    179.00
   realaud         5267 (  0.02%)           390115 (  0.00%)     74.07
   halflif           77 (  0.00%)            13302 (  0.00%)    172.75
   starcra          367 (  0.00%)            65687 (  0.00%)    178.98
   everque          314 (  0.00%)            46017 (  0.00%)    146.55
   unreal           415 (  0.00%)            93066 (  0.00%)    224.26
   quake             44 (  0.00%)             4745 (  0.00%)    107.84
   cuseeme           18 (  0.00%)             2701 (  0.00%)    150.06
   other        6142189 ( 18.26%)       3664245123 ( 16.00%)    596.57
  icmp           631105 (  1.88%)         93314633 (  0.41%)    147.86
  ipip             1157 (  0.00%)           188358 (  0.00%)    162.80
  ipsec             273 (  0.00%)            46638 (  0.00%)    170.84
  ip6             21685 (  0.06%)          4062019 (  0.02%)    187.32
  other            3025 (  0.01%)           431152 (  0.00%)    142.53
  frag            14189 (  0.04%)         11006702 (  0.05%)    775.72
 ip6              28260 (  0.08%)          6518382 (  0.03%)    230.66
  tcp6            15272 (  0.05%)          4520052 (  0.02%)    295.97
   http(s)         1997 (  0.01%)          1327910 (  0.01%)    664.95
   http(c)         4634 (  0.01%)           803794 (  0.00%)    173.46
   smtp            1178 (  0.00%)           307750 (  0.00%)    261.25
   ftp               22 (  0.00%)             3023 (  0.00%)    137.41
   ssh              364 (  0.00%)            65032 (  0.00%)    178.66
   bgp              381 (  0.00%)            32975 (  0.00%)     86.55
   other           6696 (  0.02%)          1979568 (  0.01%)    295.63
  udp6             7607 (  0.02%)          1363150 (  0.01%)    179.20
   dns             7595 (  0.02%)          1361830 (  0.01%)    179.31
   other             12 (  0.00%)             1320 (  0.00%)    110.00
  icmp6            5350 (  0.02%)           630835 (  0.00%)    117.91
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              1 (  0.00%)              265 (  0.00%)    265.00


tcpdump file: 200906261400.dump.gz (829.38 MB)