Traffic Trace Info


DumpFile: 201203310615.dump
FileSize: 1276.69MB
Id: 201203310615
StartTime: Sat Mar 31 06:15:00 2012
EndTime: Sat Mar 31 06:30:00 2012
TotalTime: 899.98 seconds
TotalCapSize: 998.93MB CapLen: 96 bytes
# of packets: 18202630 (12426.36MB)
AvgRate: 115.78Mbps stddev:35.06M

IP flow (unique src/dst pair) Information

# of flows: 1912428 (avg. 9.52 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.1% 3.9% 3.3% 2.0% 1.9% 1.9% 1.9% 1.7% 1.6% 1.5%

IP address Information

# of IPv4 addresses: 1461509
Top 10 bandwidth usage (bytes/total in %):
14.6% 11.6% 8.7% 7.8% 7.3% 6.8% 5.5% 5.1% 4.0% 4.0%
# of IPv6 addresses: 4668
Top 10 bandwidth usage (bytes/total in %):
58.4% 58.4% 10.9% 8.4% 8.4% 7.7% 4.5% 4.5% 3.7% 3.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4073436
 [   64-  127]:    4101569
 [  128-  255]:    1026186
 [  256-  511]:     481229
 [  512- 1023]:     402224
 [ 1024- 2047]:    8117986


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         18202630 (100.00%)      13029978359 (100.00%)    715.83
 ip            18072865 ( 99.29%)      12947256469 ( 99.37%)    716.39
  tcp          11522900 ( 63.30%)       9947408762 ( 76.34%)    863.27
   http(s)      4072619 ( 22.37%)       5364036307 ( 41.17%)   1317.10
   http(c)      1699223 (  9.34%)        170617075 (  1.31%)    100.41
   squid          49226 (  0.27%)         32946571 (  0.25%)    669.29
   smtp           33225 (  0.18%)          6211028 (  0.05%)    186.94
   ftp             5839 (  0.03%)           565363 (  0.00%)     96.83
   pop3            1438 (  0.01%)           346319 (  0.00%)    240.83
   imap            2507 (  0.01%)          1147058 (  0.01%)    457.54
   telnet          9113 (  0.05%)          4797428 (  0.04%)    526.44
   ssh           225160 (  1.24%)         34544452 (  0.27%)    153.42
   dns             2209 (  0.01%)           279486 (  0.00%)    126.52
   bgp              631 (  0.00%)           113105 (  0.00%)    179.25
   napster           37 (  0.00%)             2530 (  0.00%)     68.38
   realaud            1 (  0.00%)               60 (  0.00%)     60.00
   rtsp               8 (  0.00%)              480 (  0.00%)     60.00
   icecast         1394 (  0.01%)           800825 (  0.01%)    574.48
   hotline          390 (  0.00%)            26265 (  0.00%)     67.35
   other        5419877 ( 29.78%)       4330974230 ( 33.24%)    799.09
  udp           3505421 ( 19.26%)       1611293630 ( 12.37%)    459.66
   dns           260707 (  1.43%)         53588605 (  0.41%)    205.55
   realaud           10 (  0.00%)              799 (  0.00%)     79.90
   halflif           36 (  0.00%)             4665 (  0.00%)    129.58
   starcra            7 (  0.00%)             1071 (  0.00%)    153.00
   everque          213 (  0.00%)            60495 (  0.00%)    284.01
   unreal           171 (  0.00%)            93852 (  0.00%)    548.84
   quake              9 (  0.00%)             1600 (  0.00%)    177.78
   other        2916800 ( 16.02%)       1537834401 ( 11.80%)    527.23
  icmp          1748052 (  9.60%)        200144164 (  1.54%)    114.50
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec            4905 (  0.03%)          1859334 (  0.01%)    379.07
  ip6           1271228 (  6.98%)       1180597566 (  9.06%)    928.71
  pim               318 (  0.00%)            19080 (  0.00%)     60.00
  other           19856 (  0.11%)          5914663 (  0.05%)    297.88
  frag           810148 (  4.45%)        618122974 (  4.74%)    762.98
 ip6             129765 (  0.71%)         82721890 (  0.63%)    637.47
  tcp6            66981 (  0.37%)         68491593 (  0.53%)   1022.55
   http(s)         6179 (  0.03%)          7925847 (  0.06%)   1282.71
   http(c)        16658 (  0.09%)          1457463 (  0.01%)     87.49
   smtp             513 (  0.00%)           244084 (  0.00%)    475.80
   dns              127 (  0.00%)            21422 (  0.00%)    168.68
   bgp               92 (  0.00%)            15485 (  0.00%)    168.32
   other          43412 (  0.24%)         58827292 (  0.45%)   1355.09
  udp6            34780 (  0.19%)          7599051 (  0.06%)    218.49
   dns            33187 (  0.18%)          7360537 (  0.06%)    221.79
   halflif            1 (  0.00%)              101 (  0.00%)    101.00
   quake              1 (  0.00%)              117 (  0.00%)    117.00
   cuseeme            1 (  0.00%)              118 (  0.00%)    118.00
   other           1590 (  0.01%)           238178 (  0.00%)    149.80
  icmp6           22805 (  0.13%)          2964977 (  0.02%)    130.01
  ip6                85 (  0.00%)            11580 (  0.00%)    136.24
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           5084 (  0.03%)          3650609 (  0.03%)    718.06


tcpdump file: 201203310615.dump.gz (405.39 MB)