Traffic Trace Info


DumpFile: 200908061400.dump
FileSize: 1716.83MB
Id: 200908061400
StartTime: Thu Aug 6 14:00:00 2009
EndTime: Thu Aug 6 14:15:01 2009
TotalTime: 900.38 seconds
TotalCapSize: 1333.94MB CapLen: 96 bytes
# of packets: 25092607 (16200.94MB)
AvgRate: 150.93Mbps stddev:19.56M

IP flow (unique src/dst pair) Information

# of flows: 1438045 (avg. 17.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 2.0% 1.6% 1.4% 1.2% 0.9% 0.9% 0.8% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 855847
Top 10 bandwidth usage (bytes/total in %):
15.4% 7.4% 7.0% 6.2% 5.6% 3.5% 3.3% 2.7% 2.3% 2.3%
# of IPv6 addresses: 973
Top 10 bandwidth usage (bytes/total in %):
25.6% 24.1% 24.1% 17.1% 9.4% 9.4% 8.1% 6.6% 5.4% 4.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6499902
 [   64-  127]:    5252858
 [  128-  255]:    1295152
 [  256-  511]:     822482
 [  512- 1023]:     886352
 [ 1024- 2047]:   10335861


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         25092607 (100.00%)      16987918211 (100.00%)    677.01
 ip            25053742 ( 99.85%)      16970320107 ( 99.90%)    677.36
  tcp          19892288 ( 79.28%)      15427464228 ( 90.81%)    775.55
   http(s)      7631314 ( 30.41%)      10314562697 ( 60.72%)   1351.61
   http(c)      4420798 ( 17.62%)        492289368 (  2.90%)    111.36
   squid         452353 (  1.80%)        216048099 (  1.27%)    477.61
   smtp          349195 (  1.39%)        127460672 (  0.75%)    365.01
   nntp              11 (  0.00%)              714 (  0.00%)     64.91
   ftp            26461 (  0.11%)          5037859 (  0.03%)    190.39
   pop3           13567 (  0.05%)          6773914 (  0.04%)    499.29
   imap            3633 (  0.01%)          1204707 (  0.01%)    331.60
   telnet           388 (  0.00%)            58899 (  0.00%)    151.80
   ssh            13124 (  0.05%)          2164330 (  0.01%)    164.91
   dns             5848 (  0.02%)          6691017 (  0.04%)   1144.15
   bgp              459 (  0.00%)           303500 (  0.00%)    661.22
   napster          535 (  0.00%)            98711 (  0.00%)    184.51
   realaud          331 (  0.00%)            37839 (  0.00%)    114.32
   rtsp          190487 (  0.76%)         55770853 (  0.33%)    292.78
   icecast        34790 (  0.14%)         16810599 (  0.10%)    483.20
   other        6748965 ( 26.90%)       4182147256 ( 24.62%)    619.67
  udp           4287326 ( 17.09%)       1460252509 (  8.60%)    340.60
   dns          1394403 (  5.56%)        250124428 (  1.47%)    179.38
   realaud         1069 (  0.00%)            73161 (  0.00%)     68.44
   halflif         1259 (  0.01%)            90537 (  0.00%)     71.91
   starcra          286 (  0.00%)            59557 (  0.00%)    208.24
   everque          490 (  0.00%)            78682 (  0.00%)    160.58
   unreal            91 (  0.00%)            17024 (  0.00%)    187.08
   quake             40 (  0.00%)             6241 (  0.00%)    156.03
   cuseeme           44 (  0.00%)             8200 (  0.00%)    186.36
   other        2887453 ( 11.51%)       1209394980 (  7.12%)    418.84
  icmp           690975 (  2.75%)         55550380 (  0.33%)     80.39
  ipip              290 (  0.00%)            36332 (  0.00%)    125.28
  ipsec              68 (  0.00%)            10744 (  0.00%)    158.00
  ip6             22755 (  0.09%)          5167321 (  0.03%)    227.09
  other          160040 (  0.64%)         21838593 (  0.13%)    136.46
  frag            10926 (  0.04%)          9001095 (  0.05%)    823.82
 ip6              38865 (  0.15%)         17598104 (  0.10%)    452.80
  tcp6            22580 (  0.09%)         13681080 (  0.08%)    605.89
   http(s)         4394 (  0.02%)          6139800 (  0.04%)   1397.31
   http(c)         2593 (  0.01%)           286739 (  0.00%)    110.58
   smtp            1470 (  0.01%)           765857 (  0.00%)    520.99
   dns               21 (  0.00%)             4495 (  0.00%)    214.05
   bgp              113 (  0.00%)            27918 (  0.00%)    247.06
   other          13989 (  0.06%)          6456271 (  0.04%)    461.52
  udp6            12054 (  0.05%)          2562231 (  0.02%)    212.56
   dns            12009 (  0.05%)          2557759 (  0.02%)    212.99
   halflif            1 (  0.00%)               99 (  0.00%)     99.00
   quake              1 (  0.00%)              107 (  0.00%)    107.00
   other             43 (  0.00%)             4266 (  0.00%)     99.21
  icmp6            4177 (  0.02%)          1337099 (  0.01%)    320.11
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             24 (  0.00%)            13614 (  0.00%)    567.25


tcpdump file: 200908061400.dump.gz (632.04 MB)