Traffic Trace Info


DumpFile: 200910261400.dump
FileSize: 2555.50MB
Id: 200910261400
StartTime: Mon Oct 26 14:00:00 2009
EndTime: Mon Oct 26 14:15:01 2009
TotalTime: 900.48 seconds
TotalCapSize: 1983.05MB CapLen: 96 bytes
# of packets: 37507346 (21556.72MB)
AvgRate: 200.81Mbps stddev:17.81M

IP flow (unique src/dst pair) Information

# of flows: 1628884 (avg. 23.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.0% 1.0% 1.0% 0.9% 0.9% 0.9% 0.8% 0.8% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 937282
Top 10 bandwidth usage (bytes/total in %):
22.1% 11.0% 9.0% 4.9% 3.8% 3.3% 2.5% 2.1% 1.8% 1.6%
# of IPv6 addresses: 950
Top 10 bandwidth usage (bytes/total in %):
12.7% 12.7% 12.6% 7.9% 7.9% 7.2% 5.6% 5.5% 5.0% 4.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    8846580
 [   64-  127]:   10709424
 [  128-  255]:    1995614
 [  256-  511]:    1158467
 [  512- 1023]:    1127190
 [ 1024- 2047]:   13670071


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         37507346 (100.00%)      22603857458 (100.00%)    602.65
 ip            37470665 ( 99.90%)      22594945919 ( 99.96%)    603.00
  tcp          27637570 ( 73.69%)      17930979927 ( 79.33%)    648.79
   http(s)      8345238 ( 22.25%)      10464363778 ( 46.29%)   1253.93
   http(c)      7155788 ( 19.08%)       1305574620 (  5.78%)    182.45
   squid        1047248 (  2.79%)        321251351 (  1.42%)    306.76
   smtp          214815 (  0.57%)         57576095 (  0.25%)    268.03
   nntp             115 (  0.00%)            15135 (  0.00%)    131.61
   ftp            23434 (  0.06%)          2002198 (  0.01%)     85.44
   pop3           39562 (  0.11%)         35192019 (  0.16%)    889.54
   imap            2923 (  0.01%)           362577 (  0.00%)    124.04
   telnet         12024 (  0.03%)          2956178 (  0.01%)    245.86
   ssh           986738 (  2.63%)        146236622 (  0.65%)    148.20
   dns             1671 (  0.00%)           155109 (  0.00%)     92.82
   bgp              146 (  0.00%)            43307 (  0.00%)    296.62
   napster         1404 (  0.00%)           928506 (  0.00%)    661.33
   realaud         1653 (  0.00%)           205351 (  0.00%)    124.23
   rtsp          179299 (  0.48%)         37951575 (  0.17%)    211.67
   icecast        20710 (  0.06%)         11256273 (  0.05%)    543.52
   hotline           71 (  0.00%)             6488 (  0.00%)     91.38
   other        9604723 ( 25.61%)       5544902265 ( 24.53%)    577.31
  udp           9188991 ( 24.50%)       4605188821 ( 20.37%)    501.16
   dns          1110570 (  2.96%)        192770920 (  0.85%)    173.58
   realaud          102 (  0.00%)            16765 (  0.00%)    164.36
   halflif          138 (  0.00%)            24124 (  0.00%)    174.81
   starcra          680 (  0.00%)           134029 (  0.00%)    197.10
   everque          666 (  0.00%)           211727 (  0.00%)    317.91
   unreal           136 (  0.00%)            29770 (  0.00%)    218.90
   quake             65 (  0.00%)            13139 (  0.00%)    202.14
   cuseeme           17 (  0.00%)             2708 (  0.00%)    159.29
   other        8074359 ( 21.53%)       4411546682 ( 19.52%)    546.36
  icmp           615624 (  1.64%)         54389988 (  0.24%)     88.35
  ipip              331 (  0.00%)            40470 (  0.00%)    122.27
  ipsec              62 (  0.00%)             9796 (  0.00%)    158.00
  ip6             27222 (  0.07%)          4233145 (  0.02%)    155.50
  other             865 (  0.00%)           103772 (  0.00%)    119.97
  frag            27901 (  0.07%)         23824318 (  0.11%)    853.89
 ip6              36681 (  0.10%)          8911539 (  0.04%)    242.95
  tcp6            19305 (  0.05%)          5322208 (  0.02%)    275.69
   http(s)          958 (  0.00%)          1224280 (  0.01%)   1277.95
   http(c)         2935 (  0.01%)           268324 (  0.00%)     91.42
   smtp            2319 (  0.01%)          1178699 (  0.01%)    508.28
   ftp             2472 (  0.01%)           249770 (  0.00%)    101.04
   ssh             5007 (  0.01%)          1863454 (  0.01%)    372.17
   dns               16 (  0.00%)             2125 (  0.00%)    132.81
   bgp              116 (  0.00%)            15347 (  0.00%)    132.30
   other           5482 (  0.01%)           520209 (  0.00%)     94.89
  udp6            11729 (  0.03%)          2797285 (  0.01%)    238.49
   dns            11091 (  0.03%)          2586657 (  0.01%)    233.22
   other            638 (  0.00%)           210628 (  0.00%)    330.14
  icmp6            5210 (  0.01%)           623021 (  0.00%)    119.58
  rtopt6            358 (  0.00%)           119572 (  0.00%)    334.00
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             49 (  0.00%)            45373 (  0.00%)    925.98


tcpdump file: 200910261400.dump.gz (969.93 MB)