Traffic Trace Info


DumpFile: 200910231400.dump
FileSize: 2589.25MB
Id: 200910231400
StartTime: Fri Oct 23 14:00:01 2009
EndTime: Fri Oct 23 14:15:00 2009
TotalTime: 899.22 seconds
TotalCapSize: 2014.32MB CapLen: 96 bytes
# of packets: 37677966 (22952.18MB)
AvgRate: 214.15Mbps stddev:27.84M

IP flow (unique src/dst pair) Information

# of flows: 1705757 (avg. 22.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.7% 1.6% 1.4% 0.8% 0.7% 0.7% 0.6% 0.6% 0.6% 0.6%

IP address Information

# of IPv4 addresses: 1029874
Top 10 bandwidth usage (bytes/total in %):
18.8% 7.7% 7.7% 6.7% 4.4% 3.6% 3.5% 3.5% 3.4% 2.4%
# of IPv6 addresses: 974
Top 10 bandwidth usage (bytes/total in %):
93.6% 93.6% 1.0% 0.5% 0.4% 0.4% 0.3% 0.3% 0.3% 0.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    9467937
 [   64-  127]:    9243307
 [  128-  255]:    1950911
 [  256-  511]:    1179863
 [  512- 1023]:    1063490
 [ 1024- 2047]:   14772458


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         37677966 (100.00%)      24067108886 (100.00%)    638.76
 ip            37592265 ( 99.77%)      23974675725 ( 99.62%)    637.76
  tcp          29153303 ( 77.37%)      20392676671 ( 84.73%)    699.50
   http(s)     10097854 ( 26.80%)      13479867261 ( 56.01%)   1334.92
   http(c)      7443339 ( 19.76%)        991921891 (  4.12%)    133.26
   squid        1886661 (  5.01%)        372451510 (  1.55%)    197.41
   smtp          437376 (  1.16%)         97656113 (  0.41%)    223.28
   nntp              19 (  0.00%)             1540 (  0.00%)     81.05
   ftp            17892 (  0.05%)          2139773 (  0.01%)    119.59
   pop3           19257 (  0.05%)          6507308 (  0.03%)    337.92
   imap            5226 (  0.01%)           772399 (  0.00%)    147.80
   telnet         10662 (  0.03%)           807970 (  0.00%)     75.78
   ssh           172513 (  0.46%)         99804652 (  0.41%)    578.53
   dns            12534 (  0.03%)         11513968 (  0.05%)    918.62
   bgp              137 (  0.00%)            47584 (  0.00%)    347.33
   napster          118 (  0.00%)             9655 (  0.00%)     81.82
   realaud         5527 (  0.01%)           415041 (  0.00%)     75.09
   rtsp          182734 (  0.48%)         14357760 (  0.06%)     78.57
   icecast        55605 (  0.15%)         27726981 (  0.12%)    498.64
   hotline           29 (  0.00%)             2290 (  0.00%)     78.97
   other        8805421 ( 23.37%)       5286605695 ( 21.97%)    600.38
  udp           7850771 ( 20.84%)       3526333011 ( 14.65%)    449.17
   dns          1443601 (  3.83%)        261833163 (  1.09%)    181.38
   realaud        16383 (  0.04%)          5933538 (  0.02%)    362.18
   halflif          277 (  0.00%)            27582 (  0.00%)     99.57
   starcra          660 (  0.00%)           130370 (  0.00%)    197.53
   everque          732 (  0.00%)           201950 (  0.00%)    275.89
   unreal            91 (  0.00%)            18832 (  0.00%)    206.95
   quake            113 (  0.00%)            12390 (  0.00%)    109.65
   cuseeme           62 (  0.00%)             5241 (  0.00%)     84.53
   other        6384490 ( 16.94%)       3257692302 ( 13.54%)    510.25
  icmp           548693 (  1.46%)         49066368 (  0.20%)     89.42
  ipip              306 (  0.00%)            37528 (  0.00%)    122.64
  ipsec             470 (  0.00%)            82388 (  0.00%)    175.29
  ip6             28279 (  0.08%)          4872563 (  0.02%)    172.30
  other           10443 (  0.03%)          1607196 (  0.01%)    153.90
  frag            17466 (  0.05%)         14215595 (  0.06%)    813.90
 ip6              85701 (  0.23%)         92433161 (  0.38%)   1078.55
  tcp6            69011 (  0.18%)         89105177 (  0.37%)   1291.17
   http(s)        60692 (  0.16%)         87332315 (  0.36%)   1438.94
   http(c)         2845 (  0.01%)           257444 (  0.00%)     90.49
   smtp            1890 (  0.01%)           975365 (  0.00%)    516.07
   ssh              425 (  0.00%)           224010 (  0.00%)    527.08
   bgp              106 (  0.00%)            13169 (  0.00%)    124.24
   other           3053 (  0.01%)           302874 (  0.00%)     99.21
  udp6            12095 (  0.03%)          2769090 (  0.01%)    228.95
   dns            12087 (  0.03%)          2768210 (  0.01%)    229.02
   other              8 (  0.00%)              880 (  0.00%)    110.00
  icmp6            4547 (  0.01%)           537890 (  0.00%)    118.30
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             18 (  0.00%)            16924 (  0.00%)    940.22


tcpdump file: 200910231400.dump.gz (944.08 MB)