Traffic Trace Info


DumpFile: 200909231400.dump
FileSize: 2085.65MB
Id: 200909231400
StartTime: Wed Sep 23 14:00:01 2009
EndTime: Wed Sep 23 14:15:01 2009
TotalTime: 900.12 seconds
TotalCapSize: 1609.49MB CapLen: 96 bytes
# of packets: 31204506 (17754.85MB)
AvgRate: 165.49Mbps stddev:14.90M

IP flow (unique src/dst pair) Information

# of flows: 1640466 (avg. 19.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 2.7% 1.9% 1.3% 1.2% 1.1% 1.0% 1.0% 1.0% 0.9%

IP address Information

# of IPv4 addresses: 972323
Top 10 bandwidth usage (bytes/total in %):
28.8% 9.4% 4.5% 4.5% 3.2% 2.8% 2.8% 2.8% 2.1% 2.0%
# of IPv6 addresses: 1725
Top 10 bandwidth usage (bytes/total in %):
72.3% 72.3% 4.9% 3.4% 2.7% 1.7% 1.7% 1.5% 1.4% 1.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    8964110
 [   64-  127]:    7240050
 [  128-  255]:    1736094
 [  256-  511]:    1009687
 [  512- 1023]:     816923
 [ 1024- 2047]:   11437642


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         31204506 (100.00%)      18617305067 (100.00%)    596.62
 ip            31070709 ( 99.57%)      18603255767 ( 99.92%)    598.74
  tcp          22788965 ( 73.03%)      15678035972 ( 84.21%)    687.97
   http(s)      7216564 ( 23.13%)       9518142796 ( 51.13%)   1318.93
   http(c)      4094936 ( 13.12%)        481201032 (  2.58%)    117.51
   squid        1637915 (  5.25%)        292248168 (  1.57%)    178.43
   smtp          291691 (  0.93%)         63367704 (  0.34%)    217.24
   ftp            37063 (  0.12%)         17239388 (  0.09%)    465.14
   pop3           14600 (  0.05%)         11601442 (  0.06%)    794.62
   imap            1356 (  0.00%)           889069 (  0.00%)    655.66
   telnet          3458 (  0.01%)           277089 (  0.00%)     80.13
   ssh            10233 (  0.03%)          2986515 (  0.02%)    291.85
   dns             6043 (  0.02%)          6865390 (  0.04%)   1136.09
   bgp              160 (  0.00%)            63386 (  0.00%)    396.16
   napster          108 (  0.00%)             7588 (  0.00%)     70.26
   realaud          449 (  0.00%)            53914 (  0.00%)    120.08
   rtsp           16514 (  0.05%)         20343142 (  0.11%)   1231.87
   icecast        10919 (  0.03%)          2879187 (  0.02%)    263.69
   hotline          178 (  0.00%)            11366 (  0.00%)     63.85
   other        9446769 ( 30.27%)       5259858256 ( 28.25%)    556.79
  udp           7381645 ( 23.66%)       2839807080 ( 15.25%)    384.71
   dns          1110180 (  3.56%)        193166969 (  1.04%)    174.00
   rip                4 (  0.00%)              300 (  0.00%)     75.00
   realaud         3704 (  0.01%)          1872517 (  0.01%)    505.54
   halflif        19923 (  0.06%)          1207938 (  0.01%)     60.63
   starcra          482 (  0.00%)           103620 (  0.00%)    214.98
   everque          677 (  0.00%)           106015 (  0.00%)    156.60
   unreal           123 (  0.00%)            22431 (  0.00%)    182.37
   quake             62 (  0.00%)            11020 (  0.00%)    177.74
   cuseeme           17 (  0.00%)             3378 (  0.00%)    198.71
   other        6243736 ( 20.01%)       2642898871 ( 14.20%)    423.29
  icmp           857570 (  2.75%)         72072281 (  0.39%)     84.04
  ipip              325 (  0.00%)            40470 (  0.00%)    124.52
  ipsec              78 (  0.00%)            12324 (  0.00%)    158.00
  ip6             20817 (  0.07%)          4622611 (  0.02%)    222.06
  other           21309 (  0.07%)          8665029 (  0.05%)    406.64
  frag            11276 (  0.04%)          8349496 (  0.04%)    740.47
 ip6             133797 (  0.43%)         14049300 (  0.08%)    105.00
  tcp6           119226 (  0.38%)         11202748 (  0.06%)     93.96
   http(s)           55 (  0.00%)            30955 (  0.00%)    562.82
   http(c)         2070 (  0.01%)           204313 (  0.00%)     98.70
   squid              3 (  0.00%)              254 (  0.00%)     84.67
   smtp            1378 (  0.00%)           697727 (  0.00%)    506.33
   bgp              102 (  0.00%)            12461 (  0.00%)    122.17
   other         115618 (  0.37%)         10257038 (  0.06%)     88.71
  udp6            11288 (  0.04%)          2360026 (  0.01%)    209.07
   dns             9969 (  0.03%)          1979998 (  0.01%)    198.62
   starcra            1 (  0.00%)              576 (  0.00%)    576.00
   other           1318 (  0.00%)           379452 (  0.00%)    287.90
  icmp6            3152 (  0.01%)           407796 (  0.00%)    129.38
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            101 (  0.00%)            74650 (  0.00%)    739.11


tcpdump file: 200909231400.dump.gz (789.36 MB)