Traffic Trace Info


DumpFile: 200906301400.dump
FileSize: 2121.70MB
Id: 200906301400
StartTime: Tue Jun 30 14:00:01 2009
EndTime: Tue Jun 30 14:15:01 2009
TotalTime: 899.54 seconds
TotalCapSize: 1655.54MB CapLen: 96 bytes
# of packets: 30549433 (18720.07MB)
AvgRate: 174.57Mbps stddev:21.12M

IP flow (unique src/dst pair) Information

# of flows: 1401100 (avg. 21.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 1.9% 1.3% 1.2% 1.0% 0.9% 0.7% 0.7% 0.6% 0.6%

IP address Information

# of IPv4 addresses: 796215
Top 10 bandwidth usage (bytes/total in %):
9.1% 7.7% 5.8% 5.8% 5.3% 2.3% 2.3% 2.3% 2.0% 1.9%
# of IPv6 addresses: 894
Top 10 bandwidth usage (bytes/total in %):
97.8% 49.6% 48.2% 0.7% 0.5% 0.2% 0.2% 0.1% 0.1% 0.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    7080772
 [   64-  127]:    7156051
 [  128-  255]:    2510413
 [  256-  511]:    1050636
 [  512- 1023]:     880847
 [ 1024- 2047]:   11870714


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         30549433 (100.00%)      19629419567 (100.00%)    642.55
 ip            30377038 ( 99.44%)      19404781248 ( 98.86%)    638.80
  tcp          23901447 ( 78.24%)      17523640258 ( 89.27%)    733.16
   http(s)      8793931 ( 28.79%)      11572735828 ( 58.96%)   1315.99
   http(c)      7293176 ( 23.87%)       1101341034 (  5.61%)    151.01
   squid         487912 (  1.60%)        228248481 (  1.16%)    467.81
   smtp          362117 (  1.19%)         90022347 (  0.46%)    248.60
   nntp              34 (  0.00%)             2720 (  0.00%)     80.00
   ftp            44895 (  0.15%)         34840536 (  0.18%)    776.04
   pop3           14553 (  0.05%)          3968228 (  0.02%)    272.67
   imap            1636 (  0.01%)           165544 (  0.00%)    101.19
   telnet          6899 (  0.02%)           511036 (  0.00%)     74.07
   ssh           602017 (  1.97%)        120221082 (  0.61%)    199.70
   dns            21071 (  0.07%)         27261653 (  0.14%)   1293.80
   bgp              166 (  0.00%)            65889 (  0.00%)    396.92
   napster          479 (  0.00%)           175519 (  0.00%)    366.43
   realaud         3912 (  0.01%)           261703 (  0.00%)     66.90
   rtsp          157433 (  0.52%)        174257676 (  0.89%)   1106.87
   icecast        10582 (  0.03%)          7986050 (  0.04%)    754.68
   hotline           12 (  0.00%)             1217 (  0.00%)    101.42
   other        6098735 ( 19.96%)       4161460495 ( 21.20%)    682.35
  udp           5679235 ( 18.59%)       1685969364 (  8.59%)    296.87
   dns          1447517 (  4.74%)        246846651 (  1.26%)    170.53
   realaud          957 (  0.00%)           797269 (  0.00%)    833.09
   halflif           92 (  0.00%)            15558 (  0.00%)    169.11
   starcra          495 (  0.00%)            98980 (  0.00%)    199.96
   everque          365 (  0.00%)            60917 (  0.00%)    166.90
   unreal           113 (  0.00%)            26706 (  0.00%)    236.34
   quake             50 (  0.00%)             8027 (  0.00%)    160.54
   cuseeme           17 (  0.00%)             2260 (  0.00%)    132.94
   other        4218289 ( 13.81%)       1437292574 (  7.32%)    340.73
  icmp           537349 (  1.76%)         48528055 (  0.25%)     90.31
  ipip              315 (  0.00%)            38450 (  0.00%)    122.06
  ip6            215902 (  0.71%)        136860545 (  0.70%)    633.90
  other           42790 (  0.14%)          9744576 (  0.05%)    227.73
  frag            33248 (  0.11%)         22802323 (  0.12%)    685.83
 ip6             172395 (  0.56%)        224638319 (  1.14%)   1303.04
  tcp6           157364 (  0.52%)        221860351 (  1.13%)   1409.85
   http(s)         1590 (  0.01%)          1036106 (  0.01%)    651.64
   http(c)         3489 (  0.01%)           719312 (  0.00%)    206.17
   smtp              79 (  0.00%)             8185 (  0.00%)    103.61
   ssh              233 (  0.00%)            52365 (  0.00%)    224.74
   bgp              398 (  0.00%)            36295 (  0.00%)     91.19
   other         151575 (  0.50%)        220008088 (  1.12%)   1451.48
  udp6            10919 (  0.04%)          2248374 (  0.01%)    205.91
   dns            10908 (  0.04%)          2247164 (  0.01%)    206.01
   other             11 (  0.00%)             1210 (  0.00%)    110.00
  icmp6            4077 (  0.01%)           522062 (  0.00%)    128.05
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              5 (  0.00%)             3452 (  0.00%)    690.40


tcpdump file: 200906301400.dump.gz (751.49 MB)