Traffic Trace Info


DumpFile: 200907291400.dump
FileSize: 1833.71MB
Id: 200907291400
StartTime: Wed Jul 29 14:00:00 2009
EndTime: Wed Jul 29 14:15:01 2009
TotalTime: 900.38 seconds
TotalCapSize: 1424.27MB CapLen: 96 bytes
# of packets: 26832950 (15304.84MB)
AvgRate: 142.59Mbps stddev:13.97M

IP flow (unique src/dst pair) Information

# of flows: 1495886 (avg. 17.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 1.4% 1.3% 1.0% 0.9% 0.9% 0.8% 0.7% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 934101
Top 10 bandwidth usage (bytes/total in %):
14.0% 5.3% 5.1% 4.9% 4.5% 4.1% 4.1% 3.3% 3.2% 3.2%
# of IPv6 addresses: 992
Top 10 bandwidth usage (bytes/total in %):
26.9% 26.9% 10.7% 7.3% 4.6% 4.2% 4.1% 4.0% 3.8% 3.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6880861
 [   64-  127]:    6496486
 [  128-  255]:    1721645
 [  256-  511]:    1282251
 [  512- 1023]:     692130
 [ 1024- 2047]:    9759577


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         26832950 (100.00%)      16048290698 (100.00%)    598.08
 ip            26810056 ( 99.91%)      16042461018 ( 99.96%)    598.37
  tcp          18722318 ( 69.77%)      12547398710 ( 78.19%)    670.18
   http(s)      6009472 ( 22.40%)       7919119509 ( 49.35%)   1317.77
   http(c)      4668573 ( 17.40%)        548400378 (  3.42%)    117.47
   squid         704212 (  2.62%)        224934032 (  1.40%)    319.41
   smtp          454783 (  1.69%)        124796162 (  0.78%)    274.41
   ftp           148664 (  0.55%)         15916391 (  0.10%)    107.06
   pop3          111920 (  0.42%)         10788843 (  0.07%)     96.40
   imap            4865 (  0.02%)          2055249 (  0.01%)    422.46
   telnet           975 (  0.00%)            72234 (  0.00%)     74.09
   ssh           746229 (  2.78%)        674515074 (  4.20%)    903.90
   dns             5920 (  0.02%)          6666447 (  0.04%)   1126.09
   bgp              173 (  0.00%)            75649 (  0.00%)    437.28
   napster          834 (  0.00%)           437917 (  0.00%)    525.08
   realaud          701 (  0.00%)            68354 (  0.00%)     97.51
   rtsp          538773 (  2.01%)        270975556 (  1.69%)    502.95
   icecast        47489 (  0.18%)         35625933 (  0.22%)    750.19
   hotline            8 (  0.00%)              717 (  0.00%)     89.62
   other        5278622 ( 19.67%)       2712844558 ( 16.90%)    513.93
  udp           7222333 ( 26.92%)       3193542434 ( 19.90%)    442.18
   dns          1997391 (  7.44%)        317980947 (  1.98%)    159.20
   realaud        10193 (  0.04%)          4053588 (  0.03%)    397.68
   halflif        43016 (  0.16%)          3507859 (  0.02%)     81.55
   starcra          480 (  0.00%)           104706 (  0.00%)    218.14
   everque         1258 (  0.00%)           385378 (  0.00%)    306.34
   unreal            76 (  0.00%)            15263 (  0.00%)    200.83
   quake            115 (  0.00%)            14016 (  0.00%)    121.88
   cuseeme           16 (  0.00%)             2140 (  0.00%)    133.75
   other        5169186 ( 19.26%)       2867303664 ( 17.87%)    554.69
  icmp           500163 (  1.86%)         42781438 (  0.27%)     85.53
  ipip              297 (  0.00%)            35790 (  0.00%)    120.51
  ipsec              32 (  0.00%)             5056 (  0.00%)    158.00
  ip6            355638 (  1.33%)        257340753 (  1.60%)    723.60
  other            9275 (  0.03%)          1356837 (  0.01%)    146.29
  frag             4441 (  0.02%)          4101402 (  0.03%)    923.53
 ip6              22894 (  0.09%)          5829680 (  0.04%)    254.64
  tcp6             7181 (  0.03%)          2833459 (  0.02%)    394.58
   http(s)           39 (  0.00%)            22877 (  0.00%)    586.59
   http(c)         2118 (  0.01%)           209257 (  0.00%)     98.80
   smtp            1693 (  0.01%)           811375 (  0.01%)    479.25
   pop3              90 (  0.00%)             9752 (  0.00%)    108.36
   bgp              396 (  0.00%)            36020 (  0.00%)     90.96
   other           2845 (  0.01%)          1744178 (  0.01%)    613.07
  udp6            12179 (  0.05%)          2540126 (  0.02%)    208.57
   dns            12170 (  0.05%)          2539134 (  0.02%)    208.64
   everque            1 (  0.00%)              112 (  0.00%)    112.00
   other              8 (  0.00%)              880 (  0.00%)    110.00
  icmp6            3471 (  0.01%)           418345 (  0.00%)    120.53
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             33 (  0.00%)            33670 (  0.00%)   1020.30


tcpdump file: 200907291400.dump.gz (674.87 MB)