Traffic Trace Info


DumpFile: 200908241400.dump
FileSize: 1901.06MB
Id: 200908241400
StartTime: Mon Aug 24 14:00:01 2009
EndTime: Mon Aug 24 14:15:01 2009
TotalTime: 900.27 seconds
TotalCapSize: 1475.48MB CapLen: 96 bytes
# of packets: 27890417 (18873.89MB)
AvgRate: 175.85Mbps stddev:21.10M

IP flow (unique src/dst pair) Information

# of flows: 1396925 (avg. 19.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.1% 1.1% 1.0% 0.9% 0.9% 0.9% 0.8% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 876616
Top 10 bandwidth usage (bytes/total in %):
26.2% 10.8% 7.6% 4.9% 3.2% 2.8% 2.4% 2.4% 2.0% 1.9%
# of IPv6 addresses: 891
Top 10 bandwidth usage (bytes/total in %):
86.3% 86.3% 3.5% 3.5% 1.5% 0.9% 0.8% 0.8% 0.8% 0.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6960929
 [   64-  127]:    5583870
 [  128-  255]:    1140267
 [  256-  511]:     870942
 [  512- 1023]:     989005
 [ 1024- 2047]:   12345404


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         27890417 (100.00%)      19790712541 (100.00%)    709.59
 ip            27830662 ( 99.79%)      19750412842 ( 99.80%)    709.66
  tcp          22182145 ( 79.53%)      17607775766 ( 88.97%)    793.78
   http(s)     10962792 ( 39.31%)      13115081012 ( 66.27%)   1196.33
   http(c)      3894424 ( 13.96%)        801788192 (  4.05%)    205.88
   squid         708951 (  2.54%)        170988620 (  0.86%)    241.19
   smtp          245351 (  0.88%)         71166118 (  0.36%)    290.06
   ftp            72102 (  0.26%)         15020754 (  0.08%)    208.33
   pop3           13220 (  0.05%)          4212740 (  0.02%)    318.66
   imap            2147 (  0.01%)          1058678 (  0.01%)    493.10
   telnet           534 (  0.00%)            73530 (  0.00%)    137.70
   ssh            38203 (  0.14%)          5758201 (  0.03%)    150.73
   dns             6037 (  0.02%)          6734079 (  0.03%)   1115.47
   bgp              166 (  0.00%)            53179 (  0.00%)    320.36
   napster         1251 (  0.00%)           445527 (  0.00%)    356.14
   realaud          321 (  0.00%)            40805 (  0.00%)    127.12
   rtsp          106326 (  0.38%)         17683472 (  0.09%)    166.31
   icecast        21880 (  0.08%)         17274222 (  0.09%)    789.50
   other        6108299 ( 21.90%)       3380246592 ( 17.08%)    553.39
  udp           4727646 ( 16.95%)       2017054087 ( 10.19%)    426.65
   dns          1158677 (  4.15%)        216340322 (  1.09%)    186.71
   realaud           79 (  0.00%)            12851 (  0.00%)    162.67
   halflif           87 (  0.00%)            11509 (  0.00%)    132.29
   starcra          338 (  0.00%)            63263 (  0.00%)    187.17
   everque          937 (  0.00%)           546880 (  0.00%)    583.65
   unreal          3058 (  0.01%)          2077854 (  0.01%)    679.48
   quake             47 (  0.00%)             6571 (  0.00%)    139.81
   cuseeme           78 (  0.00%)             7721 (  0.00%)     98.99
   other        3563966 ( 12.78%)       1797842145 (  9.08%)    504.45
  icmp           826278 (  2.96%)         96149190 (  0.49%)    116.36
  ipip              312 (  0.00%)            37134 (  0.00%)    119.02
  ipsec              12 (  0.00%)             1672 (  0.00%)    139.33
  ip6             26044 (  0.09%)         14786003 (  0.07%)    567.73
  other           68225 (  0.24%)         14608990 (  0.07%)    214.13
  frag             3751 (  0.01%)          3480846 (  0.02%)    927.98
 ip6              59755 (  0.21%)         40299699 (  0.20%)    674.42
  tcp6            44044 (  0.16%)         37376656 (  0.19%)    848.62
   http(s)        24196 (  0.09%)         35089518 (  0.18%)   1450.22
   http(c)        17659 (  0.06%)          1569268 (  0.01%)     88.87
   smtp            1240 (  0.00%)           618670 (  0.00%)    498.93
   dns               20 (  0.00%)             3991 (  0.00%)    199.55
   bgp              123 (  0.00%)            18167 (  0.00%)    147.70
   other            806 (  0.00%)            77042 (  0.00%)     95.59
  udp6            11835 (  0.04%)          2447148 (  0.01%)    206.77
   dns            11797 (  0.04%)          2435800 (  0.01%)    206.48
   other             38 (  0.00%)            11348 (  0.00%)    298.63
  icmp6            3834 (  0.01%)           460264 (  0.00%)    120.05
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             12 (  0.00%)            11551 (  0.00%)    962.58


tcpdump file: 200908241400.dump.gz (690.99 MB)