Traffic Trace Info


DumpFile: 200912251400.dump
FileSize: 1183.86MB
Id: 200912251400
StartTime: Fri Dec 25 14:00:01 2009
EndTime: Fri Dec 25 14:15:01 2009
TotalTime: 900.16 seconds
TotalCapSize: 924.34MB CapLen: 96 bytes
# of packets: 17007491 (10285.02MB)
AvgRate: 95.80Mbps stddev:12.51M

IP flow (unique src/dst pair) Information

# of flows: 765278 (avg. 22.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.5% 2.5% 1.8% 1.4% 1.4% 1.2% 1.2% 1.0% 1.0%

IP address Information

# of IPv4 addresses: 462681
Top 10 bandwidth usage (bytes/total in %):
6.6% 5.9% 4.0% 3.9% 3.8% 3.3% 3.0% 2.9% 2.7% 2.6%
# of IPv6 addresses: 917
Top 10 bandwidth usage (bytes/total in %):
65.1% 65.0% 10.7% 3.1% 2.0% 1.8% 1.8% 1.3% 1.3% 1.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4348215
 [   64-  127]:    4297763
 [  128-  255]:     833919
 [  256-  511]:     469079
 [  512- 1023]:     405733
 [ 1024- 2047]:    6652782


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         17007491 (100.00%)      10784620682 (100.00%)    634.11
 ip            16877041 ( 99.23%)      10770618885 ( 99.87%)    638.18
  tcp          13329084 ( 78.37%)       9562157376 ( 88.66%)    717.39
   http(s)      5134487 ( 30.19%)       6688877866 ( 62.02%)   1302.74
   http(c)      3759206 ( 22.10%)        353594921 (  3.28%)     94.06
   squid         298931 (  1.76%)         79735980 (  0.74%)    266.74
   smtp          202964 (  1.19%)         85284441 (  0.79%)    420.19
   ftp            21483 (  0.13%)          4880272 (  0.05%)    227.17
   pop3           40922 (  0.24%)         20861856 (  0.19%)    509.80
   imap            2748 (  0.02%)          1313008 (  0.01%)    477.80
   telnet          1047 (  0.01%)            73126 (  0.00%)     69.84
   ssh            90213 (  0.53%)         68368353 (  0.63%)    757.85
   dns            32602 (  0.19%)          4397645 (  0.04%)    134.89
   bgp              130 (  0.00%)            37493 (  0.00%)    288.41
   napster          876 (  0.01%)           400629 (  0.00%)    457.34
   realaud           46 (  0.00%)             4046 (  0.00%)     87.96
   rtsp          114194 (  0.67%)         96823258 (  0.90%)    847.88
   icecast        47656 (  0.28%)         31610756 (  0.29%)    663.31
   other        3581576 ( 21.06%)       2125893546 ( 19.71%)    593.56
  udp           2904960 ( 17.08%)       1127117118 ( 10.45%)    388.00
   dns           973027 (  5.72%)        169160516 (  1.57%)    173.85
   realaud         1888 (  0.01%)           114908 (  0.00%)     60.86
   halflif           85 (  0.00%)             8128 (  0.00%)     95.62
   starcra           87 (  0.00%)            16355 (  0.00%)    187.99
   everque          282 (  0.00%)            43522 (  0.00%)    154.33
   unreal            46 (  0.00%)             7979 (  0.00%)    173.46
   quake             15 (  0.00%)             2019 (  0.00%)    134.60
   cuseeme            8 (  0.00%)              752 (  0.00%)     94.00
   other        1928626 ( 11.34%)        957307884 (  8.88%)    496.37
  icmp           520165 (  3.06%)         42746039 (  0.40%)     82.18
  ipip              349 (  0.00%)            42888 (  0.00%)    122.89
  ipsec             408 (  0.00%)            77232 (  0.00%)    189.29
  ip6             65235 (  0.38%)          8336998 (  0.08%)    127.80
  other           56840 (  0.33%)         30141234 (  0.28%)    530.28
  frag             4738 (  0.03%)          4410769 (  0.04%)    930.93
 ip6             130450 (  0.77%)         14001797 (  0.13%)    107.33
  tcp6           109452 (  0.64%)         10199633 (  0.09%)     93.19
   http(s)          115 (  0.00%)            69949 (  0.00%)    608.25
   http(c)         3570 (  0.02%)           321570 (  0.00%)     90.08
   smtp             884 (  0.01%)           477959 (  0.00%)    540.68
   ssh              573 (  0.00%)           132414 (  0.00%)    231.09
   bgp              114 (  0.00%)            14732 (  0.00%)    129.23
   other         104196 (  0.61%)          9183009 (  0.09%)     88.13
  udp6            17046 (  0.10%)          3315480 (  0.03%)    194.50
   dns            16921 (  0.10%)          3292890 (  0.03%)    194.60
   other            125 (  0.00%)            22590 (  0.00%)    180.72
  icmp6            3895 (  0.02%)           455063 (  0.00%)    116.83
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6             27 (  0.00%)            27541 (  0.00%)   1020.04


tcpdump file: 200912251400.dump.gz (424.64 MB)