Traffic Trace Info


DumpFile: 200907041400.dump
FileSize: 1604.16MB
Id: 200907041400
StartTime: Sat Jul 4 14:00:00 2009
EndTime: Sat Jul 4 14:15:01 2009
TotalTime: 900.39 seconds
TotalCapSize: 1256.15MB CapLen: 96 bytes
# of packets: 22806697 (15795.57MB)
AvgRate: 147.16Mbps stddev:24.89M

IP flow (unique src/dst pair) Information

# of flows: 960826 (avg. 23.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 3.8% 3.1% 2.7% 2.3% 1.9% 1.3% 1.3% 1.0% 1.0%

IP address Information

# of IPv4 addresses: 572960
Top 10 bandwidth usage (bytes/total in %):
8.5% 6.8% 5.9% 5.8% 5.0% 4.6% 3.9% 3.9% 3.9% 3.7%
# of IPv6 addresses: 860
Top 10 bandwidth usage (bytes/total in %):
98.2% 72.4% 26.1% 0.5% 0.5% 0.5% 0.2% 0.2% 0.2% 0.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5103630
 [   64-  127]:    5143599
 [  128-  255]:    1149074
 [  256-  511]:     524906
 [  512- 1023]:     518610
 [ 1024- 2047]:   10366878


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         22806697 (100.00%)      16562853444 (100.00%)    726.23
 ip            22351252 ( 98.00%)      15933764682 ( 96.20%)    712.88
  tcp          18505078 ( 81.14%)      14887769230 ( 89.89%)    804.52
   http(s)      6961804 ( 30.53%)       9271057228 ( 55.98%)   1331.70
   http(c)      4211087 ( 18.46%)        435860965 (  2.63%)    103.50
   squid         323581 (  1.42%)        144530551 (  0.87%)    446.66
   smtp          239755 (  1.05%)         32084116 (  0.19%)    133.82
   ftp            26499 (  0.12%)          3516436 (  0.02%)    132.70
   pop3           20696 (  0.09%)          3766875 (  0.02%)    182.01
   imap            1795 (  0.01%)           610859 (  0.00%)    340.31
   telnet           671 (  0.00%)            49150 (  0.00%)     73.25
   ssh           587325 (  2.58%)        540938660 (  3.27%)    921.02
   dns             5088 (  0.02%)          6540669 (  0.04%)   1285.51
   bgp              145 (  0.00%)            53309 (  0.00%)    367.65
   napster          552 (  0.00%)           338700 (  0.00%)    613.59
   realaud          189 (  0.00%)            22086 (  0.00%)    116.86
   rtsp          200641 (  0.88%)        128088705 (  0.77%)    638.40
   icecast         2520 (  0.01%)          1071150 (  0.01%)    425.06
   hotline           35 (  0.00%)             2559 (  0.00%)     73.11
   other        5922393 ( 25.97%)       4319219092 ( 26.08%)    729.30
  udp           3152362 ( 13.82%)        980887218 (  5.92%)    311.16
   dns          1279960 (  5.61%)        227116560 (  1.37%)    177.44
   rip                8 (  0.00%)             1704 (  0.00%)    213.00
   realaud         1005 (  0.00%)            67962 (  0.00%)     67.62
   halflif           76 (  0.00%)            11677 (  0.00%)    153.64
   starcra          334 (  0.00%)            71579 (  0.00%)    214.31
   everque          169 (  0.00%)            30765 (  0.00%)    182.04
   unreal           101 (  0.00%)            23197 (  0.00%)    229.67
   quake             40 (  0.00%)             5814 (  0.00%)    145.35
   cuseeme           19 (  0.00%)             3226 (  0.00%)    169.79
   other        1870429 (  8.20%)        753421087 (  4.55%)    402.81
  icmp           606938 (  2.66%)         51009391 (  0.31%)     84.04
  ipip              306 (  0.00%)            38606 (  0.00%)    126.16
  ip6             28136 (  0.12%)          6528418 (  0.04%)    232.03
  other           58432 (  0.26%)          7531819 (  0.05%)    128.90
  frag             2241 (  0.01%)          2117785 (  0.01%)    945.02
 ip6             455445 (  2.00%)        629088762 (  3.80%)   1381.26
  tcp6           443901 (  1.95%)        627109315 (  3.79%)   1412.72
   http(s)         1415 (  0.01%)           857650 (  0.01%)    606.11
   http(c)         1456 (  0.01%)           131474 (  0.00%)     90.30
   smtp             117 (  0.00%)            20712 (  0.00%)    177.03
   ssh              345 (  0.00%)            48310 (  0.00%)    140.03
   dns                6 (  0.00%)             2249 (  0.00%)    374.83
   bgp              370 (  0.00%)            31331 (  0.00%)     84.68
   other         440192 (  1.93%)        626017589 (  3.78%)   1422.15
  udp6             7780 (  0.03%)          1528868 (  0.01%)    196.51
   dns             7752 (  0.03%)          1525770 (  0.01%)    196.82
   realaud            1 (  0.00%)              109 (  0.00%)    109.00
   other             27 (  0.00%)             2989 (  0.00%)    110.70
  icmp6            3698 (  0.02%)           444339 (  0.00%)    120.16
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             36 (  0.00%)             2160 (  0.00%)     60.00


tcpdump file: 200907041400.dump.gz (556.61 MB)