Traffic Trace Info


DumpFile: 200909071400.dump
FileSize: 1927.50MB
Id: 200909071400
StartTime: Mon Sep 7 14:00:01 2009
EndTime: Mon Sep 7 14:15:00 2009
TotalTime: 899.41 seconds
TotalCapSize: 1492.93MB CapLen: 96 bytes
# of packets: 28479720 (17642.54MB)
AvgRate: 164.52Mbps stddev:14.58M

IP flow (unique src/dst pair) Information

# of flows: 1435346 (avg. 19.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.2% 1.5% 1.1% 1.0% 0.9% 0.9% 0.8% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 878579
Top 10 bandwidth usage (bytes/total in %):
16.5% 8.9% 6.9% 4.1% 3.8% 3.1% 2.8% 2.5% 2.5% 2.5%
# of IPv6 addresses: 1742
Top 10 bandwidth usage (bytes/total in %):
34.0% 34.0% 11.1% 11.1% 7.3% 4.1% 4.1% 3.8% 3.7% 3.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    7802987
 [   64-  127]:    6190841
 [  128-  255]:    1380967
 [  256-  511]:     916648
 [  512- 1023]:     770061
 [ 1024- 2047]:   11418216


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         28479720 (100.00%)      18499545035 (100.00%)    649.57
 ip            28449664 ( 99.89%)      18487540313 ( 99.94%)    649.83
  tcp          21892667 ( 76.87%)      15644220411 ( 84.57%)    714.59
   http(s)      7983317 ( 28.03%)      10682982880 ( 57.75%)   1338.16
   http(c)      5356516 ( 18.81%)        697274407 (  3.77%)    130.17
   squid        1324138 (  4.65%)        260068792 (  1.41%)    196.41
   smtp          391712 (  1.38%)        111782495 (  0.60%)    285.37
   nntp               2 (  0.00%)              120 (  0.00%)     60.00
   ftp            71350 (  0.25%)         42054407 (  0.23%)    589.41
   pop3           21665 (  0.08%)          4357547 (  0.02%)    201.13
   imap            1893 (  0.01%)           638988 (  0.00%)    337.55
   telnet           356 (  0.00%)            34026 (  0.00%)     95.58
   ssh            15966 (  0.06%)          3217309 (  0.02%)    201.51
   dns             6140 (  0.02%)          6827900 (  0.04%)   1112.04
   bgp              172 (  0.00%)            68513 (  0.00%)    398.33
   napster          259 (  0.00%)            28892 (  0.00%)    111.55
   realaud           95 (  0.00%)            11651 (  0.00%)    122.64
   rtsp          280583 (  0.99%)         29135045 (  0.16%)    103.84
   icecast        11937 (  0.04%)          8043530 (  0.04%)    673.83
   hotline            3 (  0.00%)              198 (  0.00%)     66.00
   other        6426325 ( 22.56%)       3797624442 ( 20.53%)    590.95
  udp           5793343 ( 20.34%)       2763627315 ( 14.94%)    477.03
   dns          1262316 (  4.43%)        219514567 (  1.19%)    173.90
   realaud         2334 (  0.01%)           347987 (  0.00%)    149.09
   halflif         1526 (  0.01%)           101668 (  0.00%)     66.62
   starcra         2663 (  0.01%)           220201 (  0.00%)     82.69
   everque          628 (  0.00%)           201889 (  0.00%)    321.48
   unreal           123 (  0.00%)            20933 (  0.00%)    170.19
   quake             51 (  0.00%)             7208 (  0.00%)    141.33
   cuseeme           18 (  0.00%)             3320 (  0.00%)    184.44
   other        4523450 ( 15.88%)       2543080487 ( 13.75%)    562.20
  icmp           720883 (  2.53%)         59249339 (  0.32%)     82.19
  ipip              308 (  0.00%)            37898 (  0.00%)    123.05
  ipsec             106 (  0.00%)            16620 (  0.00%)    156.79
  ip6             36694 (  0.13%)         19228260 (  0.10%)    524.02
  other            5663 (  0.02%)          1160470 (  0.01%)    204.92
  frag             4227 (  0.01%)          3678883 (  0.02%)    870.33
 ip6              30056 (  0.11%)         12004722 (  0.06%)    399.41
  tcp6             8803 (  0.03%)          7190318 (  0.04%)    816.80
   http(s)         2181 (  0.01%)          2048063 (  0.01%)    939.05
   http(c)         1795 (  0.01%)           169209 (  0.00%)     94.27
   smtp            4057 (  0.01%)          4884465 (  0.03%)   1203.96
   dns               32 (  0.00%)             4308 (  0.00%)    134.62
   bgp              121 (  0.00%)            19238 (  0.00%)    158.99
   other            617 (  0.00%)            65035 (  0.00%)    105.41
  udp6            16527 (  0.06%)          3666910 (  0.02%)    221.87
   dns            15130 (  0.05%)          3423127 (  0.02%)    226.25
   everque            2 (  0.00%)              247 (  0.00%)    123.50
   other           1395 (  0.00%)           243536 (  0.00%)    174.58
  icmp6            3888 (  0.01%)           456238 (  0.00%)    117.35
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            808 (  0.00%)           687176 (  0.00%)    850.47


tcpdump file: 200909071400.dump.gz (714.42 MB)