Traffic Trace Info


DumpFile: 200907301400.dump
FileSize: 1623.52MB
Id: 200907301400
StartTime: Thu Jul 30 14:00:00 2009
EndTime: Thu Jul 30 14:15:00 2009
TotalTime: 900.24 seconds
TotalCapSize: 1262.05MB CapLen: 96 bytes
# of packets: 23688581 (14547.58MB)
AvgRate: 135.58Mbps stddev:16.35M

IP flow (unique src/dst pair) Information

# of flows: 1378603 (avg. 17.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.3% 1.2% 1.2% 1.1% 1.1% 1.0% 1.0% 1.0% 0.7%

IP address Information

# of IPv4 addresses: 848104
Top 10 bandwidth usage (bytes/total in %):
12.4% 5.8% 5.2% 4.7% 4.5% 4.2% 3.5% 3.4% 3.4% 2.3%
# of IPv6 addresses: 1011
Top 10 bandwidth usage (bytes/total in %):
54.2% 54.2% 13.9% 13.9% 4.1% 3.7% 2.2% 1.8% 1.7% 1.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5679708
 [   64-  127]:    5592211
 [  128-  255]:    1410117
 [  256-  511]:     864906
 [  512- 1023]:     876023
 [ 1024- 2047]:    9265616


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         23688581 (100.00%)      15254245577 (100.00%)    643.95
 ip            23655951 ( 99.86%)      15242963266 ( 99.93%)    644.36
  tcp          17794869 ( 75.12%)      13142489349 ( 86.16%)    738.55
   http(s)      6119574 ( 25.83%)       7737521829 ( 50.72%)   1264.39
   http(c)      4536725 ( 19.15%)       1032996269 (  6.77%)    227.70
   squid         378793 (  1.60%)        140645309 (  0.92%)    371.30
   smtp          417132 (  1.76%)        183800756 (  1.20%)    440.63
   ftp            88975 (  0.38%)         33402548 (  0.22%)    375.41
   pop3           23870 (  0.10%)          5409402 (  0.04%)    226.62
   imap            3175 (  0.01%)           656826 (  0.00%)    206.87
   telnet           323 (  0.00%)            29897 (  0.00%)     92.56
   ssh           436860 (  1.84%)        524956859 (  3.44%)   1201.66
   dns             6000 (  0.03%)          6680827 (  0.04%)   1113.47
   bgp              169 (  0.00%)            71159 (  0.00%)    421.06
   napster          102 (  0.00%)            14639 (  0.00%)    143.52
   realaud          594 (  0.00%)            52519 (  0.00%)     88.42
   rtsp          168929 (  0.71%)         49298849 (  0.32%)    291.83
   icecast        46549 (  0.20%)         35591857 (  0.23%)    764.61
   other        5567049 ( 23.50%)       3391309853 ( 22.23%)    609.18
  udp           5014330 ( 21.17%)       2028374936 ( 13.30%)    404.52
   dns          1419084 (  5.99%)        236609335 (  1.55%)    166.73
   realaud         5187 (  0.02%)           355187 (  0.00%)     68.48
   halflif         1177 (  0.00%)            82147 (  0.00%)     69.79
   starcra          278 (  0.00%)            56347 (  0.00%)    202.69
   everque        69166 (  0.29%)         40243229 (  0.26%)    581.84
   unreal            73 (  0.00%)            14212 (  0.00%)    194.68
   quake             38 (  0.00%)             5038 (  0.00%)    132.58
   cuseeme            9 (  0.00%)             1173 (  0.00%)    130.33
   other        3512976 ( 14.83%)       1743939724 ( 11.43%)    496.43
  icmp           775024 (  3.27%)         60224169 (  0.39%)     77.71
  ipip              297 (  0.00%)            36494 (  0.00%)    122.88
  ipsec              66 (  0.00%)            10428 (  0.00%)    158.00
  ip6             21264 (  0.09%)          3295408 (  0.02%)    154.98
  other           50101 (  0.21%)          8532482 (  0.06%)    170.31
  frag            40494 (  0.17%)         51566669 (  0.34%)   1273.44
 ip6              32630 (  0.14%)         11282311 (  0.07%)    345.76
  tcp6            19822 (  0.08%)          8988275 (  0.06%)    453.45
   http(s)          104 (  0.00%)            94500 (  0.00%)    908.65
   http(c)         1906 (  0.01%)           183390 (  0.00%)     96.22
   smtp            1486 (  0.01%)           571399 (  0.00%)    384.52
   ftp              118 (  0.00%)            15970 (  0.00%)    135.34
   pop3               4 (  0.00%)              392 (  0.00%)     98.00
   ssh            10692 (  0.05%)          6118956 (  0.04%)    572.29
   dns               10 (  0.00%)             2338 (  0.00%)    233.80
   bgp              367 (  0.00%)            31279 (  0.00%)     85.23
   other           5135 (  0.02%)          1970051 (  0.01%)    383.65
  udp6             9793 (  0.04%)          1916964 (  0.01%)    195.75
   dns             9741 (  0.04%)          1908296 (  0.01%)    195.90
   other             52 (  0.00%)             8668 (  0.00%)    166.69
  icmp6            2970 (  0.01%)           360316 (  0.00%)    121.32
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             15 (  0.00%)            12676 (  0.00%)    845.07


tcpdump file: 200907301400.dump.gz (587.63 MB)