Traffic Trace Info


DumpFile: 200910091400.dump
FileSize: 5962.40MB
Id: 200910091400
StartTime: Fri Oct 9 14:00:00 2009
EndTime: Fri Oct 9 14:15:01 2009
TotalTime: 900.77 seconds
TotalCapSize: 344.17MB CapLen: 96 bytes
# of packets: 99759671 (24650.09MB)
AvgRate: 229.57Mbps stddev:21.56M

IP flow (unique src/dst pair) Information

# of flows: 1752609 (avg. 56.92 pkts/flow)
Top 10 big flow size (bytes/total in %):
15.0% 3.3% 2.1% 1.5% 1.2% 0.9% 0.6% 0.5% 0.5% 0.5%

IP address Information

# of IPv4 addresses: 995051
Top 10 bandwidth usage (bytes/total in %):
19.0% 15.1% 15.1% 7.0% 3.8% 3.4% 3.3% 3.1% 2.1% 2.1%
# of IPv6 addresses: 932
Top 10 bandwidth usage (bytes/total in %):
92.7% 86.9% 3.7% 2.2% 0.7% 0.7% 0.6% 0.6% 0.5% 0.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   74160723
 [   64-  127]:    8163756
 [  128-  255]:    1821362
 [  256-  511]:    1053227
 [  512- 1023]:    1190772
 [ 1024- 2047]:   13369831


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         99759671 (100.00%)      25847495841 (100.00%)    259.10
 ip            99655626 ( 99.90%)      25777479896 ( 99.73%)    258.67
  tcp          27460498 ( 27.53%)      19057240907 ( 73.73%)    693.99
   http(s)      8283943 (  8.30%)      10508512909 ( 40.66%)   1268.54
   http(c)      6794802 (  6.81%)       1307240908 (  5.06%)    192.39
   squid        1389610 (  1.39%)        694668796 (  2.69%)    499.90
   smtp          311029 (  0.31%)        110256765 (  0.43%)    354.49
   nntp              16 (  0.00%)             1785 (  0.00%)    111.56
   ftp            89572 (  0.09%)         63808504 (  0.25%)    712.37
   pop3           16497 (  0.02%)          6285993 (  0.02%)    381.04
   imap           15826 (  0.02%)         13696364 (  0.05%)    865.43
   telnet         22335 (  0.02%)          1702554 (  0.01%)     76.23
   ssh            81721 (  0.08%)         11860999 (  0.05%)    145.14
   dns            11063 (  0.01%)          7366074 (  0.03%)    665.83
   bgp              168 (  0.00%)            74667 (  0.00%)    444.45
   napster        78047 (  0.08%)         52350052 (  0.20%)    670.75
   realaud         1451 (  0.00%)           176339 (  0.00%)    121.53
   rtsp          109448 (  0.11%)         23815427 (  0.09%)    217.60
   icecast        30988 (  0.03%)          7075314 (  0.03%)    228.32
   hotline           28 (  0.00%)             3450 (  0.00%)    123.21
   other       10223920 ( 10.25%)       6248341967 ( 24.17%)    611.15
  udp          71669229 ( 71.84%)       6667461260 ( 25.80%)     93.03
   dns          1446937 (  1.45%)        267616768 (  1.04%)    184.95
   rip                1 (  0.00%)               70 (  0.00%)     70.00
   realaud         5616 (  0.01%)           383741 (  0.00%)     68.33
   halflif          572 (  0.00%)            50510 (  0.00%)     88.30
   starcra          484 (  0.00%)            94126 (  0.00%)    194.48
   everque         4354 (  0.00%)          3887796 (  0.02%)    892.93
   unreal           129 (  0.00%)            24314 (  0.00%)    188.48
   quake             72 (  0.00%)            11404 (  0.00%)    158.39
   cuseeme         1770 (  0.00%)           986014 (  0.00%)    557.07
   other       70205602 ( 70.37%)       6393191729 ( 24.73%)     91.06
  icmp           470684 (  0.47%)         42834310 (  0.17%)     91.00
  ipip              314 (  0.00%)            38524 (  0.00%)    122.69
  ipsec             503 (  0.00%)            65890 (  0.00%)    130.99
  ip6             28872 (  0.03%)          4442593 (  0.02%)    153.87
  other           25526 (  0.03%)          5396412 (  0.02%)    211.41
  frag            12346 (  0.01%)         11157786 (  0.04%)    903.76
 ip6             104045 (  0.10%)         70015945 (  0.27%)    672.94
  tcp6            86289 (  0.09%)         66459544 (  0.26%)    770.20
   http(s)          578 (  0.00%)           688556 (  0.00%)   1191.27
   http(c)         2936 (  0.00%)           266320 (  0.00%)     90.71
   smtp             881 (  0.00%)           437965 (  0.00%)    497.12
   ssh               45 (  0.00%)             3846 (  0.00%)     85.47
   bgp              121 (  0.00%)            16451 (  0.00%)    135.96
   other          81728 (  0.08%)         65046406 (  0.25%)    795.89
  udp6            13473 (  0.01%)          3016404 (  0.01%)    223.89
   dns            13463 (  0.01%)          3015304 (  0.01%)    223.97
   other             10 (  0.00%)             1100 (  0.00%)    110.00
  icmp6            4231 (  0.00%)           514271 (  0.00%)    121.55
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             22 (  0.00%)            21646 (  0.00%)    983.91


tcpdump file: 200910091400.dump.gz (1498.67 MB)