Traffic Trace Info


DumpFile: 200907151400.dump
FileSize: 1844.20MB
Id: 200907151400
StartTime: Wed Jul 15 14:00:01 2009
EndTime: Wed Jul 15 14:15:01 2009
TotalTime: 900.15 seconds
TotalCapSize: 1442.55MB CapLen: 96 bytes
# of packets: 26322225 (16824.51MB)
AvgRate: 156.78Mbps stddev:20.71M

IP flow (unique src/dst pair) Information

# of flows: 1150605 (avg. 22.88 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.4% 1.3% 1.3% 1.0% 1.0% 0.9% 0.8% 0.8% 0.7%

IP address Information

# of IPv4 addresses: 670894
Top 10 bandwidth usage (bytes/total in %):
14.2% 9.5% 5.3% 4.7% 3.8% 3.5% 3.5% 3.2% 2.5% 2.4%
# of IPv6 addresses: 1040
Top 10 bandwidth usage (bytes/total in %):
98.5% 65.1% 33.7% 0.3% 0.3% 0.3% 0.2% 0.1% 0.1% 0.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6772771
 [   64-  127]:    5835039
 [  128-  255]:    1296686
 [  256-  511]:     754045
 [  512- 1023]:     722501
 [ 1024- 2047]:   10941183


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         26322225 (100.00%)      17641775656 (100.00%)    670.22
 ip            25951662 ( 98.59%)      17132396198 ( 97.11%)    660.17
  tcp          21169813 ( 80.43%)      15732047598 ( 89.17%)    743.14
   http(s)      7784221 ( 29.57%)      10064034465 ( 57.05%)   1292.88
   http(c)      5809139 ( 22.07%)        821910537 (  4.66%)    141.49
   squid         462216 (  1.76%)        141186839 (  0.80%)    305.46
   smtp          325072 (  1.23%)         91566647 (  0.52%)    281.68
   ftp            27495 (  0.10%)          2613226 (  0.01%)     95.04
   pop3           18095 (  0.07%)          5271400 (  0.03%)    291.32
   imap           30987 (  0.12%)          2793083 (  0.02%)     90.14
   telnet           440 (  0.00%)            32859 (  0.00%)     74.68
   ssh            32046 (  0.12%)          7166819 (  0.04%)    223.64
   dns             5976 (  0.02%)          6736345 (  0.04%)   1127.23
   bgp              153 (  0.00%)            52373 (  0.00%)    342.31
   napster          567 (  0.00%)            57089 (  0.00%)    100.69
   realaud          586 (  0.00%)            74562 (  0.00%)    127.24
   rtsp          318413 (  1.21%)        276122731 (  1.57%)    867.18
   icecast       102375 (  0.39%)         97459639 (  0.55%)    951.99
   hotline            3 (  0.00%)              206 (  0.00%)     68.67
   other        6251980 ( 23.75%)       4214899482 ( 23.89%)    674.17
  udp           4092710 ( 15.55%)       1331854536 (  7.55%)    325.42
   dns          1492361 (  5.67%)        280594257 (  1.59%)    188.02
   realaud         1890 (  0.01%)           121366 (  0.00%)     64.21
   halflif           70 (  0.00%)            10464 (  0.00%)    149.49
   starcra          243 (  0.00%)            47853 (  0.00%)    196.93
   everque          363 (  0.00%)            45276 (  0.00%)    124.73
   unreal           130 (  0.00%)            33933 (  0.00%)    261.02
   quake             52 (  0.00%)            12420 (  0.00%)    238.85
   cuseeme           13 (  0.00%)             1625 (  0.00%)    125.00
   other        2595652 (  9.86%)       1050730004 (  5.96%)    404.80
  icmp           645589 (  2.45%)         60245818 (  0.34%)     93.32
  ipip              332 (  0.00%)            40048 (  0.00%)    120.63
  ipsec             284 (  0.00%)            48576 (  0.00%)    171.04
  ip6             27868 (  0.11%)          4869715 (  0.03%)    174.74
  other           15066 (  0.06%)          3289907 (  0.02%)    218.37
  frag             6535 (  0.02%)          5511415 (  0.03%)    843.37
 ip6             370563 (  1.41%)        509379458 (  2.89%)   1374.61
  tcp6           355397 (  1.35%)        506687751 (  2.87%)   1425.70
   http(s)         1577 (  0.01%)          1775260 (  0.01%)   1125.72
   http(c)         1825 (  0.01%)           172266 (  0.00%)     94.39
   smtp            1770 (  0.01%)           996216 (  0.01%)    562.83
   ssh               12 (  0.00%)             1736 (  0.00%)    144.67
   bgp              410 (  0.00%)            40035 (  0.00%)     97.65
   other         349803 (  1.33%)        503702238 (  2.86%)   1439.96
  udp6            10709 (  0.04%)          2126924 (  0.01%)    198.61
   dns            10696 (  0.04%)          2125486 (  0.01%)    198.72
   everque            1 (  0.00%)              118 (  0.00%)    118.00
   other             12 (  0.00%)             1320 (  0.00%)    110.00
  icmp6            4396 (  0.02%)           528829 (  0.00%)    120.30
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             31 (  0.00%)            31874 (  0.00%)   1028.19


tcpdump file: 200907151400.dump.gz (654.32 MB)