Traffic Trace Info


DumpFile: 200908161400.dump
FileSize: 1143.23MB
Id: 200908161400
StartTime: Sun Aug 16 14:00:01 2009
EndTime: Sun Aug 16 14:15:00 2009
TotalTime: 899.84 seconds
TotalCapSize: 888.16MB CapLen: 96 bytes
# of packets: 16715618 (10380.86MB)
AvgRate: 96.73Mbps stddev:13.09M

IP flow (unique src/dst pair) Information

# of flows: 1146228 (avg. 14.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.7% 3.2% 2.5% 1.8% 1.6% 1.6% 1.4% 1.3% 1.3% 1.2%

IP address Information

# of IPv4 addresses: 686689
Top 10 bandwidth usage (bytes/total in %):
22.3% 7.7% 7.7% 6.1% 4.9% 3.6% 3.3% 3.2% 3.2% 2.9%
# of IPv6 addresses: 805
Top 10 bandwidth usage (bytes/total in %):
18.6% 18.4% 12.3% 11.7% 8.5% 5.6% 5.2% 5.0% 4.7% 4.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3694940
 [   64-  127]:    4156132
 [  128-  255]:    1115346
 [  256-  511]:     657044
 [  512- 1023]:     462348
 [ 1024- 2047]:    6629808


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         16715618 (100.00%)      10885119267 (100.00%)    651.19
 ip            16696938 ( 99.89%)      10881428164 ( 99.97%)    651.70
  tcp          12163348 ( 72.77%)       9348430903 ( 85.88%)    768.57
   http(s)      5011403 ( 29.98%)       6573736286 ( 60.39%)   1311.76
   http(c)      1846725 ( 11.05%)        478216070 (  4.39%)    258.95
   squid         815814 (  4.88%)        210256031 (  1.93%)    257.73
   smtp          190212 (  1.14%)         36010345 (  0.33%)    189.32
   ftp            83259 (  0.50%)         31036106 (  0.29%)    372.77
   pop3           96176 (  0.58%)          9591694 (  0.09%)     99.73
   imap             730 (  0.00%)           367526 (  0.00%)    503.46
   telnet           525 (  0.00%)            38053 (  0.00%)     72.48
   ssh            37271 (  0.22%)         10138649 (  0.09%)    272.03
   dns             5373 (  0.03%)          6666402 (  0.06%)   1240.72
   bgp              149 (  0.00%)            43321 (  0.00%)    290.74
   napster          161 (  0.00%)            40035 (  0.00%)    248.66
   realaud          465 (  0.00%)            54954 (  0.00%)    118.18
   rtsp           21610 (  0.13%)          1321422 (  0.01%)     61.15
   icecast        18864 (  0.11%)         16110605 (  0.15%)    854.04
   hotline            1 (  0.00%)               60 (  0.00%)     60.00
   other        4034559 ( 24.14%)       1974756619 ( 18.14%)    489.46
  udp           3964104 ( 23.71%)       1480607600 ( 13.60%)    373.50
   dns          1129833 (  6.76%)        182013524 (  1.67%)    161.10
   realaud          960 (  0.01%)            62434 (  0.00%)     65.04
   halflif           91 (  0.00%)            11516 (  0.00%)    126.55
   starcra          281 (  0.00%)            59702 (  0.00%)    212.46
   everque         1383 (  0.01%)          1126188 (  0.01%)    814.31
   unreal           100 (  0.00%)            18656 (  0.00%)    186.56
   quake             40 (  0.00%)             6919 (  0.00%)    172.97
   cuseeme           21 (  0.00%)             3101 (  0.00%)    147.67
   other        2830303 ( 16.93%)       1297105689 ( 11.92%)    458.29
  icmp           543923 (  3.25%)         43257731 (  0.40%)     79.53
  ipip              289 (  0.00%)            34722 (  0.00%)    120.15
  ipsec              64 (  0.00%)            10112 (  0.00%)    158.00
  ip6             14281 (  0.09%)          3758175 (  0.03%)    263.16
  other           10929 (  0.07%)          5328921 (  0.05%)    487.59
  frag             8636 (  0.05%)          8024322 (  0.07%)    929.17
 ip6              18680 (  0.11%)          3691103 (  0.03%)    197.60
  tcp6             4398 (  0.03%)          1415801 (  0.01%)    321.92
   http(s)          503 (  0.00%)           478762 (  0.00%)    951.81
   http(c)         1741 (  0.01%)           161816 (  0.00%)     92.94
   smtp            1356 (  0.01%)           689499 (  0.01%)    508.48
   bgp              126 (  0.00%)            18101 (  0.00%)    143.66
   other            672 (  0.00%)            67623 (  0.00%)    100.63
  udp6            10804 (  0.06%)          1836788 (  0.02%)    170.01
   dns            10782 (  0.06%)          1834368 (  0.02%)    170.13
   other             22 (  0.00%)             2420 (  0.00%)    110.00
  icmp6            3422 (  0.02%)           406827 (  0.00%)    118.89
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             26 (  0.00%)            27607 (  0.00%)   1061.81


tcpdump file: 200908161400.dump.gz (423.54 MB)