Traffic Trace Info


DumpFile: 200909061400.dump
FileSize: 1356.13MB
Id: 200909061400
StartTime: Sun Sep 6 14:00:00 2009
EndTime: Sun Sep 6 14:15:00 2009
TotalTime: 900.16 seconds
TotalCapSize: 1052.39MB CapLen: 96 bytes
# of packets: 19905317 (10923.62MB)
AvgRate: 101.80Mbps stddev:11.95M

IP flow (unique src/dst pair) Information

# of flows: 1311465 (avg. 15.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.7% 3.1% 1.5% 1.4% 1.4% 1.3% 1.2% 1.1% 1.1% 1.0%

IP address Information

# of IPv4 addresses: 815883
Top 10 bandwidth usage (bytes/total in %):
22.2% 9.7% 6.8% 6.7% 4.1% 3.7% 3.2% 3.2% 2.7% 1.8%
# of IPv6 addresses: 1615
Top 10 bandwidth usage (bytes/total in %):
14.8% 11.9% 8.6% 7.3% 7.0% 6.8% 6.6% 5.6% 4.3% 4.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4571816
 [   64-  127]:    5968033
 [  128-  255]:    1229527
 [  256-  511]:     668731
 [  512- 1023]:     567224
 [ 1024- 2047]:    6899986


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         19905317 (100.00%)      11454241165 (100.00%)    575.44
 ip            19884052 ( 99.89%)      11450075099 ( 99.96%)    575.84
  tcp          14211524 ( 71.40%)       9576769611 ( 83.61%)    673.87
   http(s)      4124520 ( 20.72%)       5337162601 ( 46.60%)   1294.01
   http(c)      1838427 (  9.24%)        358923831 (  3.13%)    195.23
   squid         979586 (  4.92%)        312543161 (  2.73%)    319.06
   smtp          314915 (  1.58%)         47021019 (  0.41%)    149.31
   nntp               6 (  0.00%)              378 (  0.00%)     63.00
   ftp            76007 (  0.38%)         26640194 (  0.23%)    350.50
   pop3            5024 (  0.03%)          2833951 (  0.02%)    564.08
   imap             851 (  0.00%)           575368 (  0.01%)    676.11
   telnet           235 (  0.00%)            30633 (  0.00%)    130.35
   ssh           853879 (  4.29%)        156129271 (  1.36%)    182.85
   dns             5236 (  0.03%)          6738791 (  0.06%)   1287.01
   bgp              136 (  0.00%)            37728 (  0.00%)    277.41
   napster         1854 (  0.01%)           672717 (  0.01%)    362.85
   realaud         1165 (  0.01%)           155594 (  0.00%)    133.56
   rtsp           55342 (  0.28%)         79302888 (  0.69%)   1432.96
   icecast         8732 (  0.04%)          4345754 (  0.04%)    497.68
   hotline           12 (  0.00%)             1009 (  0.00%)     84.08
   other        5945562 ( 29.87%)       3243614557 ( 28.32%)    545.55
  udp           4780850 ( 24.02%)       1791624990 ( 15.64%)    374.75
   dns           906270 (  4.55%)        153028675 (  1.34%)    168.86
   realaud           79 (  0.00%)            12609 (  0.00%)    159.61
   halflif         2678 (  0.01%)           169498 (  0.00%)     63.29
   starcra          408 (  0.00%)            85973 (  0.00%)    210.72
   everque        21096 (  0.11%)          7128515 (  0.06%)    337.91
   unreal           126 (  0.00%)            19938 (  0.00%)    158.24
   quake             36 (  0.00%)             5752 (  0.00%)    159.78
   cuseeme           17 (  0.00%)             3054 (  0.00%)    179.65
   other        3844979 ( 19.32%)       1629924540 ( 14.23%)    423.91
  icmp           857812 (  4.31%)         72774508 (  0.64%)     84.84
  ipip              330 (  0.00%)            41100 (  0.00%)    124.55
  ipsec             892 (  0.00%)           541400 (  0.00%)    606.95
  ip6             28822 (  0.14%)          7279606 (  0.06%)    252.57
  other            3822 (  0.02%)          1043884 (  0.01%)    273.13
  frag            43668 (  0.22%)         35991963 (  0.31%)    824.22
 ip6              21265 (  0.11%)          4166066 (  0.04%)    195.91
  tcp6             6000 (  0.03%)          1130482 (  0.01%)    188.41
   http(s)          787 (  0.00%)           146832 (  0.00%)    186.57
   http(c)         1749 (  0.01%)           160521 (  0.00%)     91.78
   smtp            1058 (  0.01%)           501249 (  0.00%)    473.77
   bgp               92 (  0.00%)            10927 (  0.00%)    118.77
   other           2314 (  0.01%)           310953 (  0.00%)    134.38
  udp6            10719 (  0.05%)          2145680 (  0.02%)    200.18
   dns             9498 (  0.05%)          1924040 (  0.02%)    202.57
   other           1221 (  0.01%)           221640 (  0.00%)    181.52
  icmp6            3973 (  0.02%)           464512 (  0.00%)    116.92
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            543 (  0.00%)           421312 (  0.00%)    775.90


tcpdump file: 200909061400.dump.gz (523.38 MB)