Traffic Trace Info


DumpFile: 201007201400.dump
FileSize: 2509.65MB
Id: 201007201400
StartTime: Tue Jul 20 14:00:00 2010
EndTime: Tue Jul 20 14:15:00 2010
TotalTime: 899.88 seconds
TotalCapSize: 1972.96MB CapLen: 96 bytes
# of packets: 35171621 (22873.20MB)
AvgRate: 213.26Mbps stddev:16.31M

IP flow (unique src/dst pair) Information

# of flows: 919034 (avg. 38.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.9% 1.1% 1.1% 1.0% 1.0% 1.0% 0.9% 0.9% 0.9%

IP address Information

# of IPv4 addresses: 484394
Top 10 bandwidth usage (bytes/total in %):
14.1% 8.3% 6.4% 4.0% 3.3% 3.2% 2.7% 2.6% 2.1% 2.1%
# of IPv6 addresses: 1972
Top 10 bandwidth usage (bytes/total in %):
23.1% 23.1% 16.3% 16.3% 13.9% 13.8% 12.8% 12.8% 5.4% 5.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5441841
 [   64-  127]:    9837569
 [  128-  255]:    2353742
 [  256-  511]:    1904051
 [  512- 1023]:     958292
 [ 1024- 2047]:   14676126


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         35171621 (100.00%)      23984289235 (100.00%)    681.92
 ip            35081285 ( 99.74%)      23937693402 ( 99.81%)    682.35
  tcp          22341428 ( 63.52%)      17580703575 ( 73.30%)    786.91
   http(s)     10228105 ( 29.08%)      13793647674 ( 57.51%)   1348.60
   http(c)      7508750 ( 21.35%)       1392000686 (  5.80%)    185.38
   squid         356166 (  1.01%)        111083638 (  0.46%)    311.89
   smtp          320950 (  0.91%)         79023425 (  0.33%)    246.22
   nntp              41 (  0.00%)             3285 (  0.00%)     80.12
   ftp            30131 (  0.09%)          8017051 (  0.03%)    266.07
   pop3           18969 (  0.05%)         13218938 (  0.06%)    696.87
   imap            4378 (  0.01%)           681882 (  0.00%)    155.75
   telnet          1215 (  0.00%)           118215 (  0.00%)     97.30
   ssh            59337 (  0.17%)         20034310 (  0.08%)    337.64
   dns             3908 (  0.01%)           291078 (  0.00%)     74.48
   bgp              160 (  0.00%)            59099 (  0.00%)    369.37
   napster           68 (  0.00%)            14411 (  0.00%)    211.93
   realaud           21 (  0.00%)             3595 (  0.00%)    171.19
   rtsp             129 (  0.00%)             9981 (  0.00%)     77.37
   icecast        32481 (  0.09%)         27169374 (  0.11%)    836.47
   hotline           20 (  0.00%)             6054 (  0.00%)    302.70
   other        3776599 ( 10.74%)       2135320879 (  8.90%)    565.41
  udp           8705860 ( 24.75%)       4241137249 ( 17.68%)    487.16
   dns           894347 (  2.54%)        156172405 (  0.65%)    174.62
   realaud           21 (  0.00%)             2641 (  0.00%)    125.76
   halflif           59 (  0.00%)             5785 (  0.00%)     98.05
   starcra          122 (  0.00%)            19976 (  0.00%)    163.74
   everque          548 (  0.00%)           108479 (  0.00%)    197.95
   unreal            77 (  0.00%)            13615 (  0.00%)    176.82
   quake             39 (  0.00%)             6365 (  0.00%)    163.21
   cuseeme            8 (  0.00%)              613 (  0.00%)     76.62
   other        7810327 ( 22.21%)       4084662053 ( 17.03%)    522.98
  icmp           452849 (  1.29%)        107148385 (  0.45%)    236.61
  ipip              353 (  0.00%)            43184 (  0.00%)    122.33
  ipsec            5642 (  0.02%)          1815820 (  0.01%)    321.84
  ip6           3563887 ( 10.13%)       2004353896 (  8.36%)    562.41
  other           11266 (  0.03%)          2491293 (  0.01%)    221.13
  frag             1174 (  0.00%)          1116103 (  0.00%)    950.68
 ip6              90336 (  0.26%)         46595833 (  0.19%)    515.81
  tcp6            42976 (  0.12%)         29893493 (  0.12%)    695.59
   http(s)          825 (  0.00%)           826916 (  0.00%)   1002.32
   http(c)         6982 (  0.02%)           595994 (  0.00%)     85.36
   smtp             149 (  0.00%)            32313 (  0.00%)    216.87
   imap             291 (  0.00%)            33445 (  0.00%)    114.93
   ssh             1854 (  0.01%)           334708 (  0.00%)    180.53
   dns              110 (  0.00%)            19770 (  0.00%)    179.73
   bgp              100 (  0.00%)            12152 (  0.00%)    121.52
   other          32665 (  0.09%)         28038195 (  0.12%)    858.36
  udp6            31274 (  0.09%)          8370294 (  0.03%)    267.64
   dns            18736 (  0.05%)          4557488 (  0.02%)    243.25
   other          12538 (  0.04%)          3812806 (  0.02%)    304.10
  icmp6            5672 (  0.02%)          1040401 (  0.00%)    183.43
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6          10384 (  0.03%)          7287565 (  0.03%)    701.81


tcpdump file: 201007201400.dump.gz (905.53 MB)