Traffic Trace Info


DumpFile: 200908221400.dump
FileSize: 1777.75MB
Id: 200908221400
StartTime: Sat Aug 22 14:00:01 2009
EndTime: Sat Aug 22 14:15:01 2009
TotalTime: 900.28 seconds
TotalCapSize: 1373.00MB CapLen: 96 bytes
# of packets: 26525579 (16323.24MB)
AvgRate: 152.10Mbps stddev:15.28M

IP flow (unique src/dst pair) Information

# of flows: 1175141 (avg. 22.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.2% 1.2% 1.2% 1.2% 1.2% 1.0% 0.9% 0.9% 0.9%

IP address Information

# of IPv4 addresses: 722769
Top 10 bandwidth usage (bytes/total in %):
15.8% 10.1% 6.7% 6.5% 5.9% 4.1% 2.5% 2.3% 1.9% 1.8%
# of IPv6 addresses: 828
Top 10 bandwidth usage (bytes/total in %):
23.6% 12.4% 10.0% 9.8% 9.0% 8.6% 8.1% 4.8% 4.4% 4.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6471668
 [   64-  127]:    6527836
 [  128-  255]:    1298099
 [  256-  511]:     819573
 [  512- 1023]:     739563
 [ 1024- 2047]:   10668840


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         26525579 (100.00%)      17116157646 (100.00%)    645.27
 ip            26508182 ( 99.93%)      17112431950 ( 99.98%)    645.55
  tcp          18883427 ( 71.19%)      13764094565 ( 80.42%)    728.90
   http(s)      7122280 ( 26.85%)       9079097066 ( 53.04%)   1274.75
   http(c)      3490324 ( 13.16%)        385301181 (  2.25%)    110.39
   squid         930607 (  3.51%)        252428879 (  1.47%)    271.25
   smtp          215162 (  0.81%)         61314170 (  0.36%)    284.97
   ftp            48943 (  0.18%)          4720928 (  0.03%)     96.46
   pop3            7514 (  0.03%)          4871612 (  0.03%)    648.34
   imap            1475 (  0.01%)          1092911 (  0.01%)    740.96
   telnet           401 (  0.00%)            84303 (  0.00%)    210.23
   ssh            21009 (  0.08%)          5295319 (  0.03%)    252.05
   dns            45695 (  0.17%)          9122624 (  0.05%)    199.64
   bgp              137 (  0.00%)            41817 (  0.00%)    305.23
   napster           88 (  0.00%)             5558 (  0.00%)     63.16
   realaud          457 (  0.00%)            56536 (  0.00%)    123.71
   rtsp           80781 (  0.30%)         22478299 (  0.13%)    278.26
   icecast         2490 (  0.01%)           633279 (  0.00%)    254.33
   hotline           24 (  0.00%)             4897 (  0.00%)    204.04
   other        6915848 ( 26.07%)       3937478773 ( 23.00%)    569.34
  udp           6904131 ( 26.03%)       3268756658 ( 19.10%)    473.45
   dns          1064934 (  4.01%)        174820178 (  1.02%)    164.16
   realaud         3007 (  0.01%)           189683 (  0.00%)     63.08
   halflif          135 (  0.00%)            16397 (  0.00%)    121.46
   starcra          338 (  0.00%)            62234 (  0.00%)    184.12
   everque         3820 (  0.01%)          3669266 (  0.02%)    960.54
   unreal            59 (  0.00%)            13108 (  0.00%)    222.17
   quake             61 (  0.00%)             6183 (  0.00%)    101.36
   cuseeme            5 (  0.00%)              627 (  0.00%)    125.40
   other        5798231 ( 21.86%)       3087660841 ( 18.04%)    532.52
  icmp           657898 (  2.48%)         52680658 (  0.31%)     80.07
  ipip              342 (  0.00%)            41536 (  0.00%)    121.45
  ipsec              62 (  0.00%)             9796 (  0.00%)    158.00
  ip6             15790 (  0.06%)          4623892 (  0.03%)    292.84
  other           46532 (  0.18%)         22224845 (  0.13%)    477.62
  frag            78166 (  0.29%)         62254633 (  0.36%)    796.44
 ip6              17397 (  0.07%)          3725696 (  0.02%)    214.16
  tcp6             4941 (  0.02%)          1573685 (  0.01%)    318.50
   http(s)          898 (  0.00%)           451758 (  0.00%)    503.07
   http(c)         1582 (  0.01%)           146286 (  0.00%)     92.47
   smtp            1683 (  0.01%)           886763 (  0.01%)    526.89
   ssh                1 (  0.00%)               74 (  0.00%)     74.00
   dns                5 (  0.00%)              647 (  0.00%)    129.40
   bgp              131 (  0.00%)            26822 (  0.00%)    204.75
   other            641 (  0.00%)            61335 (  0.00%)     95.69
  udp6             8573 (  0.03%)          1669887 (  0.01%)    194.78
   dns             8558 (  0.03%)          1668237 (  0.01%)    194.93
   other             15 (  0.00%)             1650 (  0.00%)    110.00
  icmp6            3834 (  0.01%)           463410 (  0.00%)    120.87
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6             18 (  0.00%)            14498 (  0.00%)    805.44


tcpdump file: 200908221400.dump.gz (653.84 MB)