Traffic Trace Info


DumpFile: 201006191400.dump
FileSize: 2158.39MB
Id: 201006191400
StartTime: Sat Jun 19 14:00:01 2010
EndTime: Sat Jun 19 14:15:01 2010
TotalTime: 899.87 seconds
TotalCapSize: 1689.05MB CapLen: 96 bytes
# of packets: 30755147 (19476.32MB)
AvgRate: 181.56Mbps stddev:14.35M

IP flow (unique src/dst pair) Information

# of flows: 825624 (avg. 37.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.5% 1.2% 1.1% 1.1% 1.1% 1.0% 0.9% 0.9% 0.9%

IP address Information

# of IPv4 addresses: 442212
Top 10 bandwidth usage (bytes/total in %):
16.3% 9.8% 4.3% 3.2% 2.8% 2.7% 2.6% 2.4% 2.4% 2.1%
# of IPv6 addresses: 1020
Top 10 bandwidth usage (bytes/total in %):
46.6% 46.6% 6.8% 4.2% 4.2% 3.9% 3.7% 3.7% 3.3% 2.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4560438
 [   64-  127]:    8726590
 [  128-  255]:    2376740
 [  256-  511]:    1670182
 [  512- 1023]:     894398
 [ 1024- 2047]:   12526799


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         30755147 (100.00%)      20422402009 (100.00%)    664.03
 ip            30728938 ( 99.91%)      20413636863 ( 99.96%)    664.31
  tcp          16842751 ( 54.76%)      13421630718 ( 65.72%)    796.88
   http(s)      7711027 ( 25.07%)      10393454115 ( 50.89%)   1347.87
   http(c)      4901772 ( 15.94%)        847546804 (  4.15%)    172.91
   squid         177870 (  0.58%)         76468324 (  0.37%)    429.91
   smtp          267754 (  0.87%)         69995823 (  0.34%)    261.42
   ftp            22664 (  0.07%)          8272384 (  0.04%)    365.00
   pop3            9159 (  0.03%)          4610796 (  0.02%)    503.42
   imap            2433 (  0.01%)           584409 (  0.00%)    240.20
   telnet          2521 (  0.01%)           181057 (  0.00%)     71.82
   ssh           188404 (  0.61%)         21176293 (  0.10%)    112.40
   dns            66573 (  0.22%)          5261343 (  0.03%)     79.03
   bgp              158 (  0.00%)            63930 (  0.00%)    404.62
   napster           45 (  0.00%)            17275 (  0.00%)    383.89
   realaud           25 (  0.00%)             4922 (  0.00%)    196.88
   rtsp            6578 (  0.02%)          7698765 (  0.04%)   1170.38
   icecast         7622 (  0.02%)           480266 (  0.00%)     63.01
   hotline           27 (  0.00%)             2438 (  0.00%)     90.30
   other        3478118 ( 11.31%)       1985811714 (  9.72%)    570.94
  udp           9706167 ( 31.56%)       4879040643 ( 23.89%)    502.67
   dns           762941 (  2.48%)        150822710 (  0.74%)    197.69
   rip                4 (  0.00%)              300 (  0.00%)     75.00
   realaud           25 (  0.00%)             4214 (  0.00%)    168.56
   halflif        72181 (  0.23%)         17939550 (  0.09%)    248.54
   starcra           80 (  0.00%)             9818 (  0.00%)    122.72
   everque         1949 (  0.01%)           319394 (  0.00%)    163.88
   unreal            42 (  0.00%)             5898 (  0.00%)    140.43
   quake             13 (  0.00%)             1179 (  0.00%)     90.69
   cuseeme           33 (  0.00%)             2077 (  0.00%)     62.94
   other        8868314 ( 28.84%)       4709474798 ( 23.06%)    531.05
  icmp           431394 (  1.40%)         38686453 (  0.19%)     89.68
  ipip              168 (  0.00%)            21420 (  0.00%)    127.50
  ipsec             469 (  0.00%)            87790 (  0.00%)    187.19
  ip6           3642471 ( 11.84%)       2001538994 (  9.80%)    549.50
  other          105518 (  0.34%)         72630845 (  0.36%)    688.33
  frag            10019 (  0.03%)         13299397 (  0.07%)   1327.42
 ip6              26209 (  0.09%)          8765146 (  0.04%)    334.43
  tcp6             8286 (  0.03%)          4867893 (  0.02%)    587.48
   http(s)         3291 (  0.01%)          4104026 (  0.02%)   1247.05
   http(c)         1347 (  0.00%)           132339 (  0.00%)     98.25
   smtp             102 (  0.00%)            44153 (  0.00%)    432.87
   imap             292 (  0.00%)            32846 (  0.00%)    112.49
   ssh             1811 (  0.01%)           329090 (  0.00%)    181.72
   dns              193 (  0.00%)            45983 (  0.00%)    238.25
   bgp              119 (  0.00%)            16256 (  0.00%)    136.61
   other           1131 (  0.00%)           163200 (  0.00%)    144.30
  udp6            12828 (  0.04%)          3048082 (  0.01%)    237.61
   dns            11804 (  0.04%)          2656625 (  0.01%)    225.06
   other           1024 (  0.00%)           391457 (  0.00%)    382.28
  icmp6            4885 (  0.02%)           757509 (  0.00%)    155.07
  rtopt6              5 (  0.00%)              700 (  0.00%)    140.00
  dstopt6            66 (  0.00%)             9240 (  0.00%)    140.00
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6            108 (  0.00%)            77506 (  0.00%)    717.65


tcpdump file: 201006191400.dump.gz (790.74 MB)