Traffic Trace Info


DumpFile: 200907201400.dump
FileSize: 1818.48MB
Id: 200907201400
StartTime: Mon Jul 20 14:00:00 2009
EndTime: Mon Jul 20 14:15:01 2009
TotalTime: 900.42 seconds
TotalCapSize: 1406.58MB CapLen: 96 bytes
# of packets: 26993510 (19039.47MB)
AvgRate: 177.34Mbps stddev:17.75M

IP flow (unique src/dst pair) Information

# of flows: 1269737 (avg. 21.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
15.2% 3.4% 1.7% 1.6% 1.4% 1.3% 1.2% 1.2% 0.9% 0.9%

IP address Information

# of IPv4 addresses: 793742
Top 10 bandwidth usage (bytes/total in %):
15.6% 15.6% 11.7% 8.4% 5.7% 3.6% 3.6% 3.4% 3.3% 2.5%
# of IPv6 addresses: 914
Top 10 bandwidth usage (bytes/total in %):
98.9% 65.7% 33.6% 0.3% 0.2% 0.1% 0.1% 0.1% 0.1% 0.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5064212
 [   64-  127]:    5778155
 [  128-  255]:    1585214
 [  256-  511]:     971618
 [  512- 1023]:     863944
 [ 1024- 2047]:   12730367


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         26993510 (100.00%)      19964333045 (100.00%)    739.60
 ip            26644173 ( 98.71%)      19481384875 ( 97.58%)    731.17
  tcp          17875635 ( 66.22%)      15151614669 ( 75.89%)    847.61
   http(s)      5412029 ( 20.05%)       7275521135 ( 36.44%)   1344.32
   http(c)      2965914 ( 10.99%)        327661922 (  1.64%)    110.48
   squid         441329 (  1.63%)        133317373 (  0.67%)    302.08
   smtp          260736 (  0.97%)         87895600 (  0.44%)    337.11
   nntp              30 (  0.00%)             2304 (  0.00%)     76.80
   ftp            27870 (  0.10%)          5409766 (  0.03%)    194.11
   pop3           20589 (  0.08%)          3372842 (  0.02%)    163.82
   imap            1799 (  0.01%)          1113205 (  0.01%)    618.79
   telnet         11380 (  0.04%)           843804 (  0.00%)     74.15
   ssh           739282 (  2.74%)        710284414 (  3.56%)    960.78
   dns             5718 (  0.02%)          6631769 (  0.03%)   1159.81
   bgp              136 (  0.00%)            50166 (  0.00%)    368.87
   napster          946 (  0.00%)           395974 (  0.00%)    418.58
   realaud          517 (  0.00%)            63337 (  0.00%)    122.51
   rtsp          108308 (  0.40%)         95264608 (  0.48%)    879.57
   icecast        21348 (  0.08%)         20083328 (  0.10%)    940.76
   hotline           16 (  0.00%)             1525 (  0.00%)     95.31
   other        7857648 ( 29.11%)       6483653718 ( 32.48%)    825.14
  udp           7731747 ( 28.64%)       3908572726 ( 19.58%)    505.52
   dns          1360768 (  5.04%)        243585550 (  1.22%)    179.01
   realaud         1642 (  0.01%)           108223 (  0.00%)     65.91
   halflif           75 (  0.00%)            12152 (  0.00%)    162.03
   starcra          246 (  0.00%)            49967 (  0.00%)    203.12
   everque          256 (  0.00%)            48986 (  0.00%)    191.35
   unreal           136 (  0.00%)            23557 (  0.00%)    173.21
   quake            183 (  0.00%)            17326 (  0.00%)     94.68
   cuseeme           19 (  0.00%)             2725 (  0.00%)    143.42
   other        6343368 ( 23.50%)       3660628535 ( 18.34%)    577.08
  icmp           584483 (  2.17%)         68927242 (  0.35%)    117.93
  ipip              338 (  0.00%)            43162 (  0.00%)    127.70
  ip6            449795 (  1.67%)        351934824 (  1.76%)    782.43
  other            2175 (  0.01%)           292252 (  0.00%)    134.37
  frag            57093 (  0.21%)         41763296 (  0.21%)    731.50
 ip6             349337 (  1.29%)        482948170 (  2.42%)   1382.47
  tcp6           336509 (  1.25%)        480779404 (  2.41%)   1428.73
   http(s)          162 (  0.00%)           168183 (  0.00%)   1038.17
   http(c)         1843 (  0.01%)           175122 (  0.00%)     95.02
   smtp            1707 (  0.01%)           901567 (  0.00%)    528.16
   bgp              402 (  0.00%)            36296 (  0.00%)     90.29
   other         332395 (  1.23%)        479498236 (  2.40%)   1442.56
  udp6             8295 (  0.03%)          1627704 (  0.01%)    196.23
   dns             8289 (  0.03%)          1627044 (  0.01%)    196.29
   other              6 (  0.00%)              660 (  0.00%)    110.00
  icmp6            4495 (  0.02%)           530835 (  0.00%)    118.09
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6              8 (  0.00%)             6147 (  0.00%)    768.38


tcpdump file: 200907201400.dump.gz (654.37 MB)