Traffic Trace Info


DumpFile: 200907131400.dump
FileSize: 1673.64MB
Id: 200907131400
StartTime: Mon Jul 13 14:00:00 2009
EndTime: Mon Jul 13 14:15:00 2009
TotalTime: 899.67 seconds
TotalCapSize: 1303.22MB CapLen: 96 bytes
# of packets: 24274768 (14717.05MB)
AvgRate: 137.22Mbps stddev:14.76M

IP flow (unique src/dst pair) Information

# of flows: 1166211 (avg. 20.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 1.3% 1.1% 1.1% 1.0% 0.9% 0.9% 0.8% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 697131
Top 10 bandwidth usage (bytes/total in %):
19.2% 7.8% 4.9% 4.8% 3.1% 2.4% 2.2% 1.5% 1.4% 1.4%
# of IPv6 addresses: 1007
Top 10 bandwidth usage (bytes/total in %):
92.6% 92.6% 4.0% 2.2% 1.9% 1.2% 1.1% 0.6% 0.6% 0.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5657464
 [   64-  127]:    6275458
 [  128-  255]:    1350646
 [  256-  511]:     729289
 [  512- 1023]:     771019
 [ 1024- 2047]:    9490892


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         24274768 (100.00%)      15431945961 (100.00%)    635.72
 ip            23896464 ( 98.44%)      14941349957 ( 96.82%)    625.25
  tcp          17720686 ( 73.00%)      12668324827 ( 82.09%)    714.89
   http(s)      5911832 ( 24.35%)       7587804169 ( 49.17%)   1283.49
   http(c)      4282974 ( 17.64%)        559037077 (  3.62%)    130.53
   squid         446693 (  1.84%)        254983625 (  1.65%)    570.83
   smtp          327696 (  1.35%)         90367088 (  0.59%)    275.77
   nntp           25375 (  0.10%)          1525046 (  0.01%)     60.10
   ftp            44595 (  0.18%)         20841983 (  0.14%)    467.36
   pop3           21945 (  0.09%)          8821821 (  0.06%)    402.00
   imap            3181 (  0.01%)           545114 (  0.00%)    171.37
   telnet           690 (  0.00%)           187280 (  0.00%)    271.42
   ssh           621582 (  2.56%)         91779649 (  0.59%)    147.65
   dns            10112 (  0.04%)          9513561 (  0.06%)    940.82
   bgp              151 (  0.00%)            55276 (  0.00%)    366.07
   napster         5441 (  0.02%)          1350459 (  0.01%)    248.20
   realaud          296 (  0.00%)            37302 (  0.00%)    126.02
   rtsp          103032 (  0.42%)        136403878 (  0.88%)   1323.90
   icecast        78209 (  0.32%)         35878541 (  0.23%)    458.75
   other        5836857 ( 24.04%)       3869174010 ( 25.07%)    662.89
  udp           5482556 ( 22.59%)       2192723809 ( 14.21%)    399.95
   dns          1516688 (  6.25%)        285059182 (  1.85%)    187.95
   realaud          995 (  0.00%)            66580 (  0.00%)     66.91
   halflif           60 (  0.00%)             7081 (  0.00%)    118.02
   starcra         8518 (  0.04%)           655327 (  0.00%)     76.93
   everque        26785 (  0.11%)         24920131 (  0.16%)    930.38
   unreal           142 (  0.00%)            29690 (  0.00%)    209.08
   quake             51 (  0.00%)             7394 (  0.00%)    144.98
   cuseeme           12 (  0.00%)             1653 (  0.00%)    137.75
   other        3928441 ( 16.18%)       1881797043 ( 12.19%)    479.02
  icmp           559455 (  2.30%)         48216354 (  0.31%)     86.18
  ipip              322 (  0.00%)            38468 (  0.00%)    119.47
  ipsec             277 (  0.00%)            47254 (  0.00%)    170.59
  ip6             66587 (  0.27%)         14843575 (  0.10%)    222.92
  other           66581 (  0.27%)         17155670 (  0.11%)    257.67
  frag             4131 (  0.02%)          3639403 (  0.02%)    881.00
 ip6             378304 (  1.56%)        490596004 (  3.18%)   1296.83
  tcp6           362811 (  1.49%)        487927064 (  3.16%)   1344.85
   http(s)         1305 (  0.01%)           533820 (  0.00%)    409.06
   http(c)         4223 (  0.02%)           400111 (  0.00%)     94.75
   smtp            1253 (  0.01%)           645210 (  0.00%)    514.93
   ssh              396 (  0.00%)           147864 (  0.00%)    373.39
   dns               15 (  0.00%)             1508 (  0.00%)    100.53
   bgp              404 (  0.00%)            44396 (  0.00%)    109.89
   other         355215 (  1.46%)        486154155 (  3.15%)   1368.62
  udp6            10595 (  0.04%)          2085453 (  0.01%)    196.83
   dns            10584 (  0.04%)          2084235 (  0.01%)    196.92
   starcra            1 (  0.00%)               99 (  0.00%)     99.00
   other             10 (  0.00%)             1119 (  0.00%)    111.90
  icmp6            4845 (  0.02%)           563725 (  0.00%)    116.35
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             23 (  0.00%)            15682 (  0.00%)    681.83


tcpdump file: 200907131400.dump.gz (619.50 MB)