Traffic Trace Info


DumpFile: 201203302130.dump
FileSize: 2226.83MB
Id: 201203302130
StartTime: Fri Mar 30 21:30:00 2012
EndTime: Fri Mar 30 21:45:01 2012
TotalTime: 900.64 seconds
TotalCapSize: 1745.81MB CapLen: 96 bytes
# of packets: 31523914 (24088.70MB)
AvgRate: 224.35Mbps stddev:55.23M

IP flow (unique src/dst pair) Information

# of flows: 2022646 (avg. 15.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.7% 2.3% 2.0% 1.3% 1.3% 1.2% 1.1% 1.0% 1.0%

IP address Information

# of IPv4 addresses: 1540811
Top 10 bandwidth usage (bytes/total in %):
26.7% 10.0% 5.0% 4.8% 4.5% 4.0% 3.9% 3.6% 3.2% 3.0%
# of IPv6 addresses: 6132
Top 10 bandwidth usage (bytes/total in %):
64.4% 64.4% 19.7% 17.6% 4.8% 2.4% 1.9% 1.4% 0.8% 0.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6375624
 [   64-  127]:    6530723
 [  128-  255]:    1210648
 [  256-  511]:     815502
 [  512- 1023]:     754739
 [ 1024- 2047]:   15836678


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         31523914 (100.00%)      25258833971 (100.00%)    801.26
 ip            31235854 ( 99.09%)      25015802595 ( 99.04%)    800.87
  tcp          23619940 ( 74.93%)      22008027574 ( 87.13%)    931.76
   http(s)     11879657 ( 37.68%)      16142662228 ( 63.91%)   1358.85
   http(c)      5815157 ( 18.45%)        694666489 (  2.75%)    119.46
   squid          94794 (  0.30%)         66848934 (  0.26%)    705.20
   smtp           39727 (  0.13%)          8643759 (  0.03%)    217.58
   nntp               6 (  0.00%)              374 (  0.00%)     62.33
   ftp            10765 (  0.03%)           979144 (  0.00%)     90.96
   pop3            1514 (  0.00%)           316670 (  0.00%)    209.16
   imap           10503 (  0.03%)          1228717 (  0.00%)    116.99
   telnet          4185 (  0.01%)           303042 (  0.00%)     72.41
   ssh            34816 (  0.11%)          8155755 (  0.03%)    234.25
   dns             1662 (  0.01%)           122817 (  0.00%)     73.90
   bgp              625 (  0.00%)           117279 (  0.00%)    187.65
   napster          244 (  0.00%)            16970 (  0.00%)     69.55
   realaud           38 (  0.00%)             5120 (  0.00%)    134.74
   rtsp           19514 (  0.06%)         29071136 (  0.12%)   1489.76
   icecast          410 (  0.00%)            87375 (  0.00%)    213.11
   hotline            1 (  0.00%)               60 (  0.00%)     60.00
   other        5706318 ( 18.10%)       5054801465 ( 20.01%)    885.83
  udp           3939865 ( 12.50%)       1742599655 (  6.90%)    442.30
   dns           419795 (  1.33%)         88366645 (  0.35%)    210.50
   realaud         1259 (  0.00%)           849425 (  0.00%)    674.68
   halflif           36 (  0.00%)             5513 (  0.00%)    153.14
   starcra           21 (  0.00%)             1760 (  0.00%)     83.81
   everque          548 (  0.00%)           268666 (  0.00%)    490.27
   unreal            18 (  0.00%)             2540 (  0.00%)    141.11
   quake             11 (  0.00%)             1222 (  0.00%)    111.09
   cuseeme            6 (  0.00%)              971 (  0.00%)    161.83
   other        3517529 ( 11.16%)       1652965748 (  6.54%)    469.92
  icmp          2197030 (  6.97%)        230416297 (  0.91%)    104.88
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec            2030 (  0.01%)           700628 (  0.00%)    345.14
  ip6           1454334 (  4.61%)       1028923094 (  4.07%)    707.49
  pim               316 (  0.00%)            18960 (  0.00%)     60.00
  other           22154 (  0.07%)          5097117 (  0.02%)    230.08
  frag             2414 (  0.01%)          1899439 (  0.01%)    786.84
 ip6             288060 (  0.91%)        243031376 (  0.96%)    843.68
  tcp6           196870 (  0.62%)        215541332 (  0.85%)   1094.84
   http(s)        38938 (  0.12%)         50141524 (  0.20%)   1287.73
   http(c)        44702 (  0.14%)          3974438 (  0.02%)     88.91
   smtp             221 (  0.00%)            93348 (  0.00%)    422.39
   ftp              116 (  0.00%)            13192 (  0.00%)    113.72
   dns              272 (  0.00%)            60533 (  0.00%)    222.55
   bgp               92 (  0.00%)            16493 (  0.00%)    179.27
   other         112529 (  0.36%)        161241804 (  0.64%)   1432.89
  udp6            62925 (  0.20%)         23399353 (  0.09%)    371.86
   dns            49903 (  0.16%)         12672515 (  0.05%)    253.94
   halflif            1 (  0.00%)              107 (  0.00%)    107.00
   other          13021 (  0.04%)         10726731 (  0.04%)    823.80
  icmp6           27752 (  0.09%)          3693728 (  0.01%)    133.10
  ip6                85 (  0.00%)            11580 (  0.00%)    136.24
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6            397 (  0.00%)           381167 (  0.00%)    960.12


tcpdump file: 201203302130.dump.gz (717.85 MB)