Traffic Trace Info


DumpFile: 200908231400.dump
FileSize: 1626.18MB
Id: 200908231400
StartTime: Sun Aug 23 14:00:01 2009
EndTime: Sun Aug 23 14:15:00 2009
TotalTime: 899.45 seconds
TotalCapSize: 1256.78MB CapLen: 96 bytes
# of packets: 24208212 (14916.70MB)
AvgRate: 139.12Mbps stddev:12.47M

IP flow (unique src/dst pair) Information

# of flows: 1290812 (avg. 18.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.1% 3.6% 1.6% 1.2% 0.9% 0.9% 0.8% 0.8% 0.7% 0.6%

IP address Information

# of IPv4 addresses: 763103
Top 10 bandwidth usage (bytes/total in %):
19.1% 13.9% 12.2% 6.3% 5.0% 3.7% 3.6% 3.2% 2.4% 2.3%
# of IPv6 addresses: 780
Top 10 bandwidth usage (bytes/total in %):
18.2% 17.5% 13.7% 8.9% 8.6% 6.1% 5.5% 4.9% 4.5% 4.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5745157
 [   64-  127]:    6229271
 [  128-  255]:    1161416
 [  256-  511]:     699000
 [  512- 1023]:     646280
 [ 1024- 2047]:    9727088


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         24208212 (100.00%)      15641290151 (100.00%)    646.12
 ip            24191654 ( 99.93%)      15637654959 ( 99.98%)    646.41
  tcp          17101888 ( 70.64%)      12935321336 ( 82.70%)    756.37
   http(s)      6736717 ( 27.83%)       8231812650 ( 52.63%)   1221.93
   http(c)      2446418 ( 10.11%)        314024815 (  2.01%)    128.36
   squid         721323 (  2.98%)        174785618 (  1.12%)    242.31
   smtp          191447 (  0.79%)         27705718 (  0.18%)    144.72
   nntp               7 (  0.00%)              461 (  0.00%)     65.86
   ftp            17665 (  0.07%)          1975738 (  0.01%)    111.84
   pop3            5970 (  0.02%)          3565851 (  0.02%)    597.29
   imap             698 (  0.00%)           398173 (  0.00%)    570.45
   telnet           529 (  0.00%)            36376 (  0.00%)     68.76
   ssh            83907 (  0.35%)          6813125 (  0.04%)     81.20
   dns             9299 (  0.04%)          6918608 (  0.04%)    744.02
   bgp              140 (  0.00%)            50469 (  0.00%)    360.49
   napster          202 (  0.00%)            56495 (  0.00%)    279.68
   realaud          109 (  0.00%)            14178 (  0.00%)    130.07
   rtsp           91257 (  0.38%)        127587869 (  0.82%)   1398.12
   icecast        45278 (  0.19%)         39301082 (  0.25%)    868.00
   hotline           49 (  0.00%)            13420 (  0.00%)    273.88
   other        6750658 ( 27.89%)       4000246336 ( 25.57%)    592.57
  udp           6109981 ( 25.24%)       2596732913 ( 16.60%)    425.00
   dns           961782 (  3.97%)        160775756 (  1.03%)    167.16
   realaud          117 (  0.00%)            19262 (  0.00%)    164.63
   halflif           94 (  0.00%)            15880 (  0.00%)    168.94
   starcra         6467 (  0.03%)           471626 (  0.00%)     72.93
   everque         1126 (  0.00%)           754253 (  0.00%)    669.85
   unreal           123 (  0.00%)            24758 (  0.00%)    201.28
   quake           2013 (  0.01%)          1327173 (  0.01%)    659.30
   cuseeme           20 (  0.00%)             3774 (  0.00%)    188.70
   other        5135957 ( 21.22%)       2432344776 ( 15.55%)    473.59
  icmp           930099 (  3.84%)         92521941 (  0.59%)     99.48
  ipip              334 (  0.00%)            41836 (  0.00%)    125.26
  ipsec              60 (  0.00%)             9480 (  0.00%)    158.00
  ip6             15824 (  0.07%)          5479444 (  0.04%)    346.27
  other           33468 (  0.14%)          7548009 (  0.05%)    225.53
  frag            15571 (  0.06%)         15143618 (  0.10%)    972.55
 ip6              16558 (  0.07%)          3635192 (  0.02%)    219.54
  tcp6             4688 (  0.02%)          1556150 (  0.01%)    331.94
   http(s)         1108 (  0.00%)           768369 (  0.00%)    693.47
   http(c)         1876 (  0.01%)           175956 (  0.00%)     93.79
   smtp            1067 (  0.00%)           544615 (  0.00%)    510.42
   ssh                1 (  0.00%)               74 (  0.00%)     74.00
   dns                8 (  0.00%)             1847 (  0.00%)    230.88
   bgp              121 (  0.00%)            17498 (  0.00%)    144.61
   other            507 (  0.00%)            47791 (  0.00%)     94.26
  udp6             8022 (  0.03%)          1595721 (  0.01%)    198.92
   dns             7991 (  0.03%)          1592304 (  0.01%)    199.26
   quake              1 (  0.00%)              117 (  0.00%)    117.00
   other             30 (  0.00%)             3300 (  0.00%)    110.00
  icmp6            3780 (  0.02%)           448150 (  0.00%)    118.56
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             38 (  0.00%)            31091 (  0.00%)    818.18


tcpdump file: 200908231400.dump.gz (590.35 MB)