Traffic Trace Info


DumpFile: 200908181400.dump
FileSize: 2154.59MB
Id: 200908181400
StartTime: Tue Aug 18 14:00:01 2009
EndTime: Tue Aug 18 14:15:00 2009
TotalTime: 899.64 seconds
TotalCapSize: 1678.75MB CapLen: 96 bytes
# of packets: 31184236 (21028.85MB)
AvgRate: 196.08Mbps stddev:22.48M

IP flow (unique src/dst pair) Information

# of flows: 1228383 (avg. 25.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.9% 9.9% 1.6% 1.4% 1.4% 1.0% 0.9% 0.9% 0.9% 0.8%

IP address Information

# of IPv4 addresses: 728292
Top 10 bandwidth usage (bytes/total in %):
20.2% 10.3% 10.2% 10.1% 8.8% 5.9% 4.7% 4.6% 2.7% 2.4%
# of IPv6 addresses: 891
Top 10 bandwidth usage (bytes/total in %):
14.5% 13.5% 8.0% 7.3% 6.0% 5.0% 4.5% 4.1% 4.0% 4.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    8616846
 [   64-  127]:    6136155
 [  128-  255]:    1128962
 [  256-  511]:     824355
 [  512- 1023]:     827642
 [ 1024- 2047]:   13650276


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         31184236 (100.00%)      22050349744 (100.00%)    707.10
 ip            31162530 ( 99.93%)      22046044267 ( 99.98%)    707.45
  tcp          26758332 ( 85.81%)      20569095445 ( 93.28%)    768.70
   http(s)     11705776 ( 37.54%)      15549103463 ( 70.52%)   1328.33
   http(c)      7309130 ( 23.44%)        838937316 (  3.80%)    114.78
   squid         872107 (  2.80%)        217568245 (  0.99%)    249.47
   smtp          244094 (  0.78%)         95710526 (  0.43%)    392.11
   ftp           100792 (  0.32%)         69403051 (  0.31%)    688.58
   pop3           17211 (  0.06%)          8326220 (  0.04%)    483.77
   imap            2707 (  0.01%)          1083763 (  0.00%)    400.36
   telnet           596 (  0.00%)           128017 (  0.00%)    214.79
   ssh           108628 (  0.35%)         19068214 (  0.09%)    175.54
   dns             6958 (  0.02%)          6962152 (  0.03%)   1000.60
   bgp              173 (  0.00%)            72311 (  0.00%)    417.98
   napster          148 (  0.00%)            23401 (  0.00%)    158.11
   realaud          248 (  0.00%)            30092 (  0.00%)    121.34
   rtsp          133201 (  0.43%)         19404946 (  0.09%)    145.68
   icecast        10282 (  0.03%)          4843686 (  0.02%)    471.08
   hotline           46 (  0.00%)             3944 (  0.00%)     85.74
   other        6246228 ( 20.03%)       3738425678 ( 16.95%)    598.51
  udp           3695540 ( 11.85%)       1416501750 (  6.42%)    383.30
   dns          1212913 (  3.89%)        183860515 (  0.83%)    151.59
   realaud          116 (  0.00%)            19049 (  0.00%)    164.22
   halflif          535 (  0.00%)            43168 (  0.00%)     80.69
   starcra          329 (  0.00%)            58251 (  0.00%)    177.05
   everque         1327 (  0.00%)          1145313 (  0.01%)    863.08
   unreal            93 (  0.00%)            16959 (  0.00%)    182.35
   quake             82 (  0.00%)            12634 (  0.00%)    154.07
   cuseeme           13 (  0.00%)             1755 (  0.00%)    135.00
   other        2479904 (  7.95%)       1231215072 (  5.58%)    496.48
  icmp           685363 (  2.20%)         54317329 (  0.25%)     79.25
  ipip              323 (  0.00%)            37884 (  0.00%)    117.29
  ipsec              62 (  0.00%)             9796 (  0.00%)    158.00
  ip6             19247 (  0.06%)          5380086 (  0.02%)    279.53
  other            3663 (  0.01%)           701977 (  0.00%)    191.64
  frag             3077 (  0.01%)          2785903 (  0.01%)    905.40
 ip6              21706 (  0.07%)          4305477 (  0.02%)    198.35
  tcp6             4357 (  0.01%)          1119401 (  0.01%)    256.92
   http(s)          213 (  0.00%)           219303 (  0.00%)   1029.59
   http(c)         2009 (  0.01%)           187149 (  0.00%)     93.16
   smtp            1280 (  0.00%)           629657 (  0.00%)    491.92
   bgp              125 (  0.00%)            18131 (  0.00%)    145.05
   other            730 (  0.00%)            65161 (  0.00%)     89.26
  udp6            14332 (  0.05%)          2819729 (  0.01%)    196.74
   dns            14322 (  0.05%)          2818629 (  0.01%)    196.80
   other             10 (  0.00%)             1100 (  0.00%)    110.00
  icmp6            2975 (  0.01%)           354093 (  0.00%)    119.02
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             12 (  0.00%)             8174 (  0.00%)    681.17


tcpdump file: 200908181400.dump.gz (766.92 MB)