Traffic Trace Info


DumpFile: 200910311400.dump
FileSize: 2050.11MB
Id: 200910311400
StartTime: Sat Oct 31 14:00:00 2009
EndTime: Sat Oct 31 14:15:01 2009
TotalTime: 900.91 seconds
TotalCapSize: 1584.89MB CapLen: 96 bytes
# of packets: 30487937 (18900.06MB)
AvgRate: 175.99Mbps stddev:16.44M

IP flow (unique src/dst pair) Information

# of flows: 1458612 (avg. 20.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.1% 2.0% 1.4% 1.1% 0.8% 0.8% 0.8% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 896237
Top 10 bandwidth usage (bytes/total in %):
24.1% 8.9% 4.9% 4.6% 3.4% 3.1% 3.1% 2.7% 2.7% 2.5%
# of IPv6 addresses: 774
Top 10 bandwidth usage (bytes/total in %):
22.6% 13.0% 11.6% 11.4% 10.8% 6.9% 6.3% 4.7% 4.5% 3.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    7920583
 [   64-  127]:    6725713
 [  128-  255]:    1574484
 [  256-  511]:     852606
 [  512- 1023]:    1073114
 [ 1024- 2047]:   12341437


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         30487937 (100.00%)      19818144143 (100.00%)    650.03
 ip            30460631 ( 99.91%)      19814064026 ( 99.98%)    650.48
  tcp          22236341 ( 72.93%)      16506807509 ( 83.29%)    742.33
   http(s)      7856248 ( 25.77%)      10439541517 ( 52.68%)   1328.82
   http(c)      4873250 ( 15.98%)        551106866 (  2.78%)    113.09
   squid         980297 (  3.22%)        319270929 (  1.61%)    325.69
   smtp          156002 (  0.51%)         32355810 (  0.16%)    207.41
   ftp            21696 (  0.07%)          2635144 (  0.01%)    121.46
   pop3            8492 (  0.03%)          2746389 (  0.01%)    323.41
   imap            4345 (  0.01%)           859323 (  0.00%)    197.77
   telnet          1137 (  0.00%)           129184 (  0.00%)    113.62
   ssh            88408 (  0.29%)         20213388 (  0.10%)    228.64
   dns             1324 (  0.00%)           128573 (  0.00%)     97.11
   bgp              132 (  0.00%)            41807 (  0.00%)    316.72
   napster         6407 (  0.02%)          6497878 (  0.03%)   1014.18
   realaud         1179 (  0.00%)           155388 (  0.00%)    131.80
   rtsp          227444 (  0.75%)         74077486 (  0.37%)    325.70
   icecast        75287 (  0.25%)         28130895 (  0.14%)    373.65
   hotline           75 (  0.00%)            70645 (  0.00%)    941.93
   other        7934498 ( 26.03%)       5028838881 ( 25.37%)    633.79
  udp           7355455 ( 24.13%)       3205596745 ( 16.18%)    435.81
   dns          1048011 (  3.44%)        166839476 (  0.84%)    159.20
   realaud         1645 (  0.01%)           116803 (  0.00%)     71.00
   halflif           98 (  0.00%)            16165 (  0.00%)    164.95
   starcra          387 (  0.00%)            82969 (  0.00%)    214.39
   everque         3038 (  0.01%)           506421 (  0.00%)    166.70
   unreal          8412 (  0.03%)          4610726 (  0.02%)    548.11
   quake             54 (  0.00%)             8598 (  0.00%)    159.22
   cuseeme           23 (  0.00%)             3516 (  0.00%)    152.87
   other        6292227 ( 20.64%)       3032885236 ( 15.30%)    482.01
  icmp           819636 (  2.69%)         85024815 (  0.43%)    103.73
  ipip              353 (  0.00%)            43544 (  0.00%)    123.35
  ipsec              74 (  0.00%)            11516 (  0.00%)    155.62
  ip6             34387 (  0.11%)          7585443 (  0.04%)    220.59
  other           14385 (  0.05%)          8994454 (  0.05%)    625.27
  frag            16423 (  0.05%)         13602752 (  0.07%)    828.27
 ip6              27306 (  0.09%)          4080117 (  0.02%)    149.42
  tcp6            14357 (  0.05%)          1835009 (  0.01%)    127.81
   http(s)           68 (  0.00%)            37536 (  0.00%)    552.00
   http(c)         2946 (  0.01%)           265342 (  0.00%)     90.07
   smtp            1137 (  0.00%)           544973 (  0.00%)    479.31
   ftp             5185 (  0.02%)           533393 (  0.00%)    102.87
   ssh                1 (  0.00%)               74 (  0.00%)     74.00
   bgp               98 (  0.00%)            11754 (  0.00%)    119.94
   other           4922 (  0.02%)           441937 (  0.00%)     89.79
  udp6             7747 (  0.03%)          1610241 (  0.01%)    207.85
   dns             7719 (  0.03%)          1607164 (  0.01%)    208.21
   halflif            1 (  0.00%)              107 (  0.00%)    107.00
   other             27 (  0.00%)             2970 (  0.00%)    110.00
  icmp6            5156 (  0.02%)           612668 (  0.00%)    118.83
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             16 (  0.00%)            18119 (  0.00%)   1132.44


tcpdump file: 200910311400.dump.gz (773.04 MB)