Traffic Trace Info


DumpFile: 200908021400.dump
FileSize: 1055.04MB
Id: 200908021400
StartTime: Sun Aug 2 14:00:00 2009
EndTime: Sun Aug 2 14:15:01 2009
TotalTime: 900.76 seconds
TotalCapSize: 812.72MB CapLen: 96 bytes
# of packets: 15879778 (9659.56MB)
AvgRate: 89.96Mbps stddev:14.12M

IP flow (unique src/dst pair) Information

# of flows: 1002324 (avg. 15.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.6% 1.4% 1.2% 1.2% 1.1% 1.1% 1.1% 1.1% 1.0%

IP address Information

# of IPv4 addresses: 607480
Top 10 bandwidth usage (bytes/total in %):
24.9% 9.1% 6.3% 4.2% 3.7% 3.5% 3.5% 3.3% 2.6% 2.6%
# of IPv6 addresses: 761
Top 10 bandwidth usage (bytes/total in %):
42.1% 42.1% 9.4% 9.0% 5.1% 4.9% 4.7% 3.9% 3.9% 3.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3912205
 [   64-  127]:    3589080
 [  128-  255]:     993099
 [  256-  511]:     596580
 [  512- 1023]:     520954
 [ 1024- 2047]:    6267860


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         15879778 (100.00%)      10128783413 (100.00%)    637.84
 ip            15864684 ( 99.90%)      10124999939 ( 99.96%)    638.21
  tcp          10630539 ( 66.94%)       8091691589 ( 79.89%)    761.17
   http(s)      3610602 ( 22.74%)       4715777683 ( 46.56%)   1306.09
   http(c)      1870640 ( 11.78%)        311539662 (  3.08%)    166.54
   squid         348610 (  2.20%)         86926030 (  0.86%)    249.35
   smtp          150607 (  0.95%)         22211181 (  0.22%)    147.48
   ftp           107137 (  0.67%)         20602034 (  0.20%)    192.30
   pop3            5803 (  0.04%)          2196730 (  0.02%)    378.55
   imap            7285 (  0.05%)          4981687 (  0.05%)    683.83
   telnet           190 (  0.00%)            16228 (  0.00%)     85.41
   ssh            18736 (  0.12%)          3898906 (  0.04%)    208.10
   dns             5371 (  0.03%)          6626623 (  0.07%)   1233.78
   bgp              138 (  0.00%)            44312 (  0.00%)    321.10
   napster         2990 (  0.02%)           743620 (  0.01%)    248.70
   realaud          716 (  0.00%)            87184 (  0.00%)    121.77
   rtsp          138853 (  0.87%)        166045249 (  1.64%)   1195.83
   icecast         2735 (  0.02%)           334759 (  0.00%)    122.40
   hotline           10 (  0.00%)             1226 (  0.00%)    122.60
   other        4360020 ( 27.46%)       2749519104 ( 27.15%)    630.62
  udp           4535175 ( 28.56%)       1964599199 ( 19.40%)    433.19
   dns           730651 (  4.60%)        137600599 (  1.36%)    188.33
   realaud         3318 (  0.02%)           210513 (  0.00%)     63.45
   halflif         1028 (  0.01%)            69671 (  0.00%)     67.77
   starcra          281 (  0.00%)            57706 (  0.00%)    205.36
   everque          265 (  0.00%)            55627 (  0.00%)    209.91
   unreal            82 (  0.00%)            15395 (  0.00%)    187.74
   quake             37 (  0.00%)             5865 (  0.00%)    158.51
   cuseeme           13 (  0.00%)             2320 (  0.00%)    178.46
   other        3799015 ( 23.92%)       1826431159 ( 18.03%)    480.76
  icmp           677348 (  4.27%)         53410968 (  0.53%)     78.85
  ipip              320 (  0.00%)            39856 (  0.00%)    124.55
  ipsec              62 (  0.00%)             9796 (  0.00%)    158.00
  ip6              8470 (  0.05%)          1849924 (  0.02%)    218.41
  other           12770 (  0.08%)         13398607 (  0.13%)   1049.23
  frag             2395 (  0.02%)          2192033 (  0.02%)    915.25
 ip6              15094 (  0.10%)          3783474 (  0.04%)    250.66
  tcp6             5510 (  0.03%)          2293523 (  0.02%)    416.25
   http(c)         1968 (  0.01%)           180329 (  0.00%)     91.63
   smtp             714 (  0.00%)           362725 (  0.00%)    508.02
   ftp               13 (  0.00%)             1161 (  0.00%)     89.31
   bgp              365 (  0.00%)            31078 (  0.00%)     85.15
   other           2450 (  0.02%)          1718230 (  0.02%)    701.32
  udp6             6445 (  0.04%)          1121164 (  0.01%)    173.96
   dns             6421 (  0.04%)          1118524 (  0.01%)    174.20
   other             24 (  0.00%)             2640 (  0.00%)    110.00
  icmp6            3109 (  0.02%)           364707 (  0.00%)    117.31
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00


tcpdump file: 200908021400.dump.gz (388.76 MB)