Traffic Trace Info


DumpFile: 201010091400.dump
FileSize: 3424.13MB
Id: 201010091400
StartTime: Sat Oct 9 14:00:00 2010
EndTime: Sat Oct 9 14:15:00 2010
TotalTime: 900.12 seconds
TotalCapSize: -1376.98MB CapLen: 96 bytes
# of packets: 46209585 (32610.04MB)
AvgRate: 303.91Mbps stddev:39.31M

IP flow (unique src/dst pair) Information

# of flows: 1696497 (avg. 27.24 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.5% 1.2% 1.2% 1.2% 1.2% 1.2% 1.2% 1.2% 1.1% 1.1%

IP address Information

# of IPv4 addresses: 746170
Top 10 bandwidth usage (bytes/total in %):
23.3% 9.9% 8.6% 7.5% 7.5% 6.4% 1.9% 1.6% 1.4% 1.3%
# of IPv6 addresses: 3647
Top 10 bandwidth usage (bytes/total in %):
16.0% 14.1% 11.2% 11.2% 9.3% 8.2% 7.5% 6.9% 6.8% 6.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5789959
 [   64-  127]:   15065645
 [  128-  255]:    1677825
 [  256-  511]:    1466276
 [  512- 1023]:     794282
 [ 1024- 2047]:   21415598


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         46209585 (100.00%)      34194103163 (100.00%)    739.98
 ip            45992558 ( 99.53%)      34137507513 ( 99.83%)    742.24
  tcp          33866678 ( 73.29%)      27988189763 ( 81.85%)    826.42
   http(s)     18273728 ( 39.55%)      24473008787 ( 71.57%)   1339.25
   http(c)     10850271 ( 23.48%)       1111602775 (  3.25%)    102.45
   squid         321714 (  0.70%)        125767153 (  0.37%)    390.93
   smtp          115342 (  0.25%)         34994740 (  0.10%)    303.40
   nntp              14 (  0.00%)              868 (  0.00%)     62.00
   ftp            14878 (  0.03%)          1307275 (  0.00%)     87.87
   pop3           15100 (  0.03%)          4593655 (  0.01%)    304.22
   imap           50898 (  0.11%)         44380231 (  0.13%)    871.94
   telnet          1201 (  0.00%)            86111 (  0.00%)     71.70
   ssh           364634 (  0.79%)        123671000 (  0.36%)    339.16
   dns             5631 (  0.01%)           458473 (  0.00%)     81.42
   bgp              334 (  0.00%)            94595 (  0.00%)    283.22
   napster          193 (  0.00%)            14795 (  0.00%)     76.66
   realaud           12 (  0.00%)             3846 (  0.00%)    320.50
   rtsp           19583 (  0.04%)         22656289 (  0.07%)   1156.94
   icecast         1124 (  0.00%)           481667 (  0.00%)    428.53
   hotline           37 (  0.00%)             3910 (  0.00%)    105.68
   other        3831984 (  8.29%)       2045063593 (  5.98%)    533.68
  udp           7474012 ( 16.17%)       3370526601 (  9.86%)    450.97
   dns           928098 (  2.01%)        131463276 (  0.38%)    141.65
   realaud          102 (  0.00%)            27563 (  0.00%)    270.23
   halflif          117 (  0.00%)            21335 (  0.00%)    182.35
   starcra           21 (  0.00%)             4731 (  0.00%)    225.29
   everque          395 (  0.00%)            87524 (  0.00%)    221.58
   unreal            87 (  0.00%)            16977 (  0.00%)    195.14
   quake             45 (  0.00%)             3762 (  0.00%)     83.60
   cuseeme            2 (  0.00%)              596 (  0.00%)    298.00
   other        6544919 ( 14.16%)       3238732330 (  9.47%)    494.85
  icmp          1082182 (  2.34%)        147191896 (  0.43%)    136.01
  ipip              180 (  0.00%)            18720 (  0.00%)    104.00
  ipsec            1173 (  0.00%)           185854 (  0.00%)    158.44
  ip6           3555825 (  7.69%)       2624170062 (  7.67%)    737.99
  other           12508 (  0.03%)          7224617 (  0.02%)    577.60
  frag             1404 (  0.00%)          1537227 (  0.00%)   1094.89
 ip6             217027 (  0.47%)         56595650 (  0.17%)    260.78
  tcp6           155155 (  0.34%)         39589304 (  0.12%)    255.16
   http(s)        11967 (  0.03%)         11920084 (  0.03%)    996.08
   http(c)        47120 (  0.10%)          4169549 (  0.01%)     88.49
   smtp            1516 (  0.00%)           145920 (  0.00%)     96.25
   ftp               66 (  0.00%)             5814 (  0.00%)     88.09
   ssh               61 (  0.00%)            11486 (  0.00%)    188.30
   dns              110 (  0.00%)            28149 (  0.00%)    255.90
   bgp               91 (  0.00%)            16737 (  0.00%)    183.92
   other          94224 (  0.20%)         23291565 (  0.07%)    247.19
  udp6            45921 (  0.10%)         14127470 (  0.04%)    307.65
   dns            40887 (  0.09%)         12921460 (  0.04%)    316.03
   other           5034 (  0.01%)          1206010 (  0.00%)    239.57
  icmp6           15059 (  0.03%)          2236810 (  0.01%)    148.54
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            862 (  0.00%)           637986 (  0.00%)    740.12


tcpdump file: 201010091400.dump.gz (1160.90 MB)