Traffic Trace Info


DumpFile: 200908141400.dump
FileSize: 1324.65MB
Id: 200908141400
StartTime: Fri Aug 14 14:00:01 2009
EndTime: Fri Aug 14 14:15:00 2009
TotalTime: 899.23 seconds
TotalCapSize: 1026.85MB CapLen: 96 bytes
# of packets: 19516203 (10902.85MB)
AvgRate: 101.72Mbps stddev:10.28M

IP flow (unique src/dst pair) Information

# of flows: 1258492 (avg. 15.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.3% 1.3% 1.1% 0.9% 0.9% 0.9% 0.9% 0.9% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 664688
Top 10 bandwidth usage (bytes/total in %):
21.8% 6.0% 5.0% 5.0% 4.3% 2.8% 2.7% 2.5% 2.3% 2.2%
# of IPv6 addresses: 853
Top 10 bandwidth usage (bytes/total in %):
14.2% 11.6% 11.6% 7.8% 6.0% 6.0% 5.7% 5.3% 5.2% 4.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5181497
 [   64-  127]:    4722518
 [  128-  255]:    1331179
 [  256-  511]:     760890
 [  512- 1023]:     654353
 [ 1024- 2047]:    6865766


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         19516203 (100.00%)      11432464061 (100.00%)    585.79
 ip            19498962 ( 99.91%)      11428296015 ( 99.96%)    586.10
  tcp          14382822 ( 73.70%)       9623726217 ( 84.18%)    669.11
   http(s)      4297418 ( 22.02%)       5369654679 ( 46.97%)   1249.51
   http(c)      2339318 ( 11.99%)        406123621 (  3.55%)    173.61
   squid        1080458 (  5.54%)        390417523 (  3.41%)    361.34
   smtp          245487 (  1.26%)         49376278 (  0.43%)    201.14
   ftp            51889 (  0.27%)         35055362 (  0.31%)    675.58
   pop3           10678 (  0.05%)          4871582 (  0.04%)    456.23
   imap            1055 (  0.01%)           141739 (  0.00%)    134.35
   telnet          1529 (  0.01%)           102885 (  0.00%)     67.29
   ssh            12956 (  0.07%)          1560448 (  0.01%)    120.44
   dns             5788 (  0.03%)          6704163 (  0.06%)   1158.29
   bgp              161 (  0.00%)            56703 (  0.00%)    352.19
   napster           77 (  0.00%)             6130 (  0.00%)     79.61
   realaud         1806 (  0.01%)           248679 (  0.00%)    137.70
   rtsp           90688 (  0.46%)         20203381 (  0.18%)    222.78
   icecast         2403 (  0.01%)           776598 (  0.01%)    323.18
   hotline          178 (  0.00%)           102282 (  0.00%)    574.62
   other        6240860 ( 31.98%)       3338233605 ( 29.20%)    534.90
  udp           4696948 ( 24.07%)       1763563078 ( 15.43%)    375.47
   dns          1323333 (  6.78%)        225680016 (  1.97%)    170.54
   realaud           71 (  0.00%)            11521 (  0.00%)    162.27
   halflif          126 (  0.00%)            19238 (  0.00%)    152.68
   starcra         4671 (  0.02%)           364004 (  0.00%)     77.93
   everque          248 (  0.00%)            46419 (  0.00%)    187.17
   unreal            76 (  0.00%)            15481 (  0.00%)    203.70
   quake            325 (  0.00%)           157688 (  0.00%)    485.19
   cuseeme           19 (  0.00%)             3245 (  0.00%)    170.79
   other        3367434 ( 17.25%)       1536905779 ( 13.44%)    456.40
  icmp           399398 (  2.05%)         35310593 (  0.31%)     88.41
  ipip              300 (  0.00%)            38154 (  0.00%)    127.18
  ipsec              62 (  0.00%)             9796 (  0.00%)    158.00
  ip6             15015 (  0.08%)          4020352 (  0.04%)    267.76
  other            4417 (  0.02%)          1627825 (  0.01%)    368.54
  frag             6098 (  0.03%)          6729648 (  0.06%)   1103.58
 ip6              17241 (  0.09%)          4168046 (  0.04%)    241.75
  tcp6             4741 (  0.02%)          1789540 (  0.02%)    377.46
   http(s)          727 (  0.00%)           916726 (  0.01%)   1260.97
   http(c)         2005 (  0.01%)           185151 (  0.00%)     92.34
   smtp            1364 (  0.01%)           613776 (  0.01%)    449.98
   bgp              132 (  0.00%)            25807 (  0.00%)    195.51
   other            513 (  0.00%)            48080 (  0.00%)     93.72
  udp6             9599 (  0.05%)          2026312 (  0.02%)    211.10
   dns             9547 (  0.05%)          2020592 (  0.02%)    211.65
   other             52 (  0.00%)             5720 (  0.00%)    110.00
  icmp6            2857 (  0.01%)           335287 (  0.00%)    117.36
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             14 (  0.00%)            12827 (  0.00%)    916.21


tcpdump file: 200908141400.dump.gz (510.97 MB)