Traffic Trace Info


DumpFile: 200907231400.dump
FileSize: 1871.32MB
Id: 200907231400
StartTime: Thu Jul 23 14:00:01 2009
EndTime: Thu Jul 23 14:15:00 2009
TotalTime: 899.43 seconds
TotalCapSize: 1457.04MB CapLen: 96 bytes
# of packets: 27149481 (18232.62MB)
AvgRate: 170.09Mbps stddev:27.25M

IP flow (unique src/dst pair) Information

# of flows: 1432642 (avg. 18.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 3.8% 3.0% 1.1% 0.9% 0.9% 0.8% 0.8% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 814050
Top 10 bandwidth usage (bytes/total in %):
11.9% 6.8% 6.8% 5.5% 5.4% 5.3% 4.4% 4.2% 3.9% 3.4%
# of IPv6 addresses: 996
Top 10 bandwidth usage (bytes/total in %):
24.8% 24.8% 10.7% 10.7% 8.2% 5.8% 5.7% 3.8% 3.4% 3.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5744763
 [   64-  127]:    6457101
 [  128-  255]:    1279592
 [  256-  511]:    1029089
 [  512- 1023]:     831013
 [ 1024- 2047]:   11807923


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         27149481 (100.00%)      19118282814 (100.00%)    704.19
 ip            27126596 ( 99.92%)      19112022743 ( 99.97%)    704.55
  tcp          20128863 ( 74.14%)      16148910242 ( 84.47%)    802.28
   http(s)      7555323 ( 27.83%)      10047272412 ( 52.55%)   1329.83
   http(c)      3962497 ( 14.60%)        569307072 (  2.98%)    143.67
   squid         491672 (  1.81%)        244740867 (  1.28%)    497.77
   smtp          345053 (  1.27%)        111258944 (  0.58%)    322.44
   nntp              65 (  0.00%)             5900 (  0.00%)     90.77
   ftp           182663 (  0.67%)         71839072 (  0.38%)    393.29
   pop3          114844 (  0.42%)         16555339 (  0.09%)    144.16
   imap            5301 (  0.02%)          1621197 (  0.01%)    305.83
   telnet           290 (  0.00%)            26199 (  0.00%)     90.34
   ssh            26330 (  0.10%)          5910762 (  0.03%)    224.49
   dns             7749 (  0.03%)          6763469 (  0.04%)    872.82
   bgp              170 (  0.00%)            56848 (  0.00%)    334.40
   napster          154 (  0.00%)            53737 (  0.00%)    348.94
   realaud          309 (  0.00%)            29194 (  0.00%)     94.48
   rtsp           74528 (  0.27%)         43872958 (  0.23%)    588.68
   icecast       100349 (  0.37%)         93091472 (  0.49%)    927.68
   hotline           58 (  0.00%)             6547 (  0.00%)    112.88
   other        7261388 ( 26.75%)       4936321811 ( 25.82%)    679.80
  udp           6003126 ( 22.11%)       2639359415 ( 13.81%)    439.66
   dns          1260951 (  4.64%)        235688319 (  1.23%)    186.91
   realaud         3229 (  0.01%)           200224 (  0.00%)     62.01
   halflif         1561 (  0.01%)           103640 (  0.00%)     66.39
   starcra          265 (  0.00%)            57605 (  0.00%)    217.38
   everque          255 (  0.00%)            50915 (  0.00%)    199.67
   unreal          3541 (  0.01%)           440192 (  0.00%)    124.31
   quake             40 (  0.00%)             6139 (  0.00%)    153.47
   cuseeme           10 (  0.00%)             1558 (  0.00%)    155.80
   other        4730907 ( 17.43%)       2402488702 ( 12.57%)    507.83
  icmp           536244 (  1.98%)         47015718 (  0.25%)     87.68
  ipip              325 (  0.00%)            40972 (  0.00%)    126.07
  ipsec             273 (  0.00%)            46758 (  0.00%)    171.27
  ip6            389118 (  1.43%)        263238241 (  1.38%)    676.50
  other           68647 (  0.25%)         13411397 (  0.07%)    195.37
  frag            10556 (  0.04%)          8706369 (  0.05%)    824.78
 ip6              22885 (  0.08%)          6260071 (  0.03%)    273.54
  tcp6             8174 (  0.03%)          3588886 (  0.02%)    439.06
   http(s)          785 (  0.00%)           998216 (  0.01%)   1271.61
   http(c)         2786 (  0.01%)           255227 (  0.00%)     91.61
   smtp            1087 (  0.00%)           541013 (  0.00%)    497.71
   bgp              379 (  0.00%)            33223 (  0.00%)     87.66
   other           3137 (  0.01%)          1761207 (  0.01%)    561.43
  udp6            10364 (  0.04%)          2138660 (  0.01%)    206.35
   dns            10356 (  0.04%)          2137780 (  0.01%)    206.43
   other              8 (  0.00%)              880 (  0.00%)    110.00
  icmp6            4301 (  0.02%)           513831 (  0.00%)    119.47
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             16 (  0.00%)            14614 (  0.00%)    913.38


tcpdump file: 200907231400.dump.gz (672.64 MB)