Traffic Trace Info


DumpFile: 200909271400.dump
FileSize: 1867.12MB
Id: 200909271400
StartTime: Sun Sep 27 14:00:01 2009
EndTime: Sun Sep 27 14:15:01 2009
TotalTime: 900.29 seconds
TotalCapSize: 1435.18MB CapLen: 96 bytes
# of packets: 28306708 (15626.72MB)
AvgRate: 145.62Mbps stddev:13.46M

IP flow (unique src/dst pair) Information

# of flows: 1591210 (avg. 17.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 1.7% 1.1% 1.1% 1.0% 1.0% 1.0% 0.9% 0.9% 0.8%

IP address Information

# of IPv4 addresses: 939019
Top 10 bandwidth usage (bytes/total in %):
28.7% 9.9% 7.3% 5.4% 3.7% 3.2% 2.5% 1.9% 1.7% 1.7%
# of IPv6 addresses: 841
Top 10 bandwidth usage (bytes/total in %):
19.2% 13.0% 10.0% 10.0% 6.2% 6.2% 5.6% 5.0% 4.9% 4.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    7664228
 [   64-  127]:    7237185
 [  128-  255]:    1650067
 [  256-  511]:     983495
 [  512- 1023]:     776166
 [ 1024- 2047]:    9995567


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         28306708 (100.00%)      16385802006 (100.00%)    578.87
 ip            28286511 ( 99.93%)      16382083015 ( 99.98%)    579.15
  tcp          19618139 ( 69.31%)      13170938749 ( 80.38%)    671.37
   http(s)      5305561 ( 18.74%)       6955756961 ( 42.45%)   1311.03
   http(c)      3025276 ( 10.69%)        463236007 (  2.83%)    153.12
   squid        1363963 (  4.82%)        231316972 (  1.41%)    169.59
   smtp          134937 (  0.48%)         27597765 (  0.17%)    204.52
   nntp          543495 (  1.92%)         32763010 (  0.20%)     60.28
   ftp            39153 (  0.14%)          7342663 (  0.04%)    187.54
   pop3            7374 (  0.03%)          5827824 (  0.04%)    790.32
   imap            1728 (  0.01%)           774678 (  0.00%)    448.31
   telnet          5122 (  0.02%)           568940 (  0.00%)    111.08
   ssh            17539 (  0.06%)          2532783 (  0.02%)    144.41
   dns             6652 (  0.02%)          7386172 (  0.05%)   1110.37
   bgp              160 (  0.00%)            55779 (  0.00%)    348.62
   napster          604 (  0.00%)           141332 (  0.00%)    233.99
   realaud          959 (  0.00%)           108403 (  0.00%)    113.04
   rtsp           59479 (  0.21%)         82402794 (  0.50%)   1385.41
   icecast         5378 (  0.02%)          1084138 (  0.01%)    201.59
   hotline           62 (  0.00%)             6956 (  0.00%)    112.19
   other        9100690 ( 32.15%)       5352035152 ( 32.66%)    588.09
  udp           7883731 ( 27.85%)       3141001754 ( 19.17%)    398.42
   dns          1119474 (  3.95%)        171808929 (  1.05%)    153.47
   rip                1 (  0.00%)              140 (  0.00%)    140.00
   realaud          966 (  0.00%)            87666 (  0.00%)     90.75
   halflif         8976 (  0.03%)           551796 (  0.00%)     61.47
   starcra          525 (  0.00%)           109002 (  0.00%)    207.62
   everque          617 (  0.00%)            85554 (  0.00%)    138.66
   unreal           964 (  0.00%)           578808 (  0.00%)    600.42
   quake             89 (  0.00%)             9338 (  0.00%)    104.92
   cuseeme           25 (  0.00%)             4846 (  0.00%)    193.84
   other        6748007 ( 23.84%)       2967274463 ( 18.11%)    439.73
  icmp           750091 (  2.65%)         62780166 (  0.38%)     83.70
  ipip              289 (  0.00%)            35774 (  0.00%)    123.79
  ipsec             159 (  0.00%)            41034 (  0.00%)    258.08
  ip6             20366 (  0.07%)          4325027 (  0.03%)    212.37
  other           13736 (  0.05%)          2960511 (  0.02%)    215.53
  frag            15629 (  0.06%)         12732700 (  0.08%)    814.68
 ip6              20197 (  0.07%)          3718991 (  0.02%)    184.14
  tcp6             7014 (  0.02%)          1340753 (  0.01%)    191.15
   http(s)            6 (  0.00%)              701 (  0.00%)    116.83
   http(c)         1549 (  0.01%)           140729 (  0.00%)     90.85
   smtp            1388 (  0.00%)           729554 (  0.00%)    525.62
   ssh             3094 (  0.01%)           375040 (  0.00%)    121.22
   dns                6 (  0.00%)             2249 (  0.00%)    374.83
   bgp              104 (  0.00%)            12681 (  0.00%)    121.93
   other            867 (  0.00%)            79799 (  0.00%)     92.04
  udp6            10058 (  0.04%)          1988262 (  0.01%)    197.68
   dns            10047 (  0.04%)          1987052 (  0.01%)    197.78
   other             11 (  0.00%)             1210 (  0.00%)    110.00
  icmp6            3069 (  0.01%)           360665 (  0.00%)    117.52
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6             25 (  0.00%)            25095 (  0.00%)   1003.80


tcpdump file: 200909271400.dump.gz (705.95 MB)