Traffic Trace Info


DumpFile: 201204010930.dump
FileSize: 1715.76MB
Id: 201204010930
StartTime: Sun Apr 1 09:30:01 2012
EndTime: Sun Apr 1 09:45:00 2012
TotalTime: 899.23 seconds
TotalCapSize: 1357.11MB CapLen: 96 bytes
# of packets: 23504380 (18072.83MB)
AvgRate: 168.57Mbps stddev:28.19M

IP flow (unique src/dst pair) Information

# of flows: 1983912 (avg. 11.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 5.9% 4.0% 3.8% 3.0% 2.5% 2.4% 2.1% 1.9% 1.9%

IP address Information

# of IPv4 addresses: 1541473
Top 10 bandwidth usage (bytes/total in %):
20.4% 10.9% 9.7% 7.2% 7.0% 6.7% 6.7% 6.1% 5.6% 4.3%
# of IPv6 addresses: 4586
Top 10 bandwidth usage (bytes/total in %):
51.3% 26.6% 9.4% 6.6% 5.1% 4.6% 4.0% 3.4% 3.2% 3.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    4503802
 [   64-  127]:    5045880
 [  128-  255]:     785819
 [  256-  511]:     606168
 [  512- 1023]:     671564
 [ 1024- 2047]:   11891147


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         23504380 (100.00%)      18950735529 (100.00%)    806.26
 ip            23130910 ( 98.41%)      18653594942 ( 98.43%)    806.44
  tcp          17891539 ( 76.12%)      16795315345 ( 88.63%)    938.73
   http(s)      6960802 ( 29.61%)       9626933667 ( 50.80%)   1383.02
   http(c)      3091469 ( 13.15%)        957368280 (  5.05%)    309.68
   squid          22490 (  0.10%)         13826068 (  0.07%)    614.77
   smtp           35926 (  0.15%)          7506463 (  0.04%)    208.94
   ftp            11903 (  0.05%)          1071173 (  0.01%)     89.99
   pop3            3015 (  0.01%)          1409477 (  0.01%)    467.49
   imap            1531 (  0.01%)           430213 (  0.00%)    281.00
   telnet          4949 (  0.02%)           361051 (  0.00%)     72.95
   ssh          1359811 (  5.79%)       1253673066 (  6.62%)    921.95
   dns             3723 (  0.02%)           371290 (  0.00%)     99.73
   bgp              623 (  0.00%)           112045 (  0.00%)    179.85
   napster          809 (  0.00%)            50514 (  0.00%)     62.44
   realaud           13 (  0.00%)              852 (  0.00%)     65.54
   rtsp            2190 (  0.01%)          1580384 (  0.01%)    721.64
   icecast        14230 (  0.06%)         14125759 (  0.07%)    992.67
   hotline           26 (  0.00%)             1620 (  0.00%)     62.31
   other        6378029 ( 27.14%)       4916493423 ( 25.94%)    770.85
  udp           1981139 (  8.43%)        558670782 (  2.95%)    281.99
   dns           390132 (  1.66%)        113390066 (  0.60%)    290.65
   rip                1 (  0.00%)              227 (  0.00%)    227.00
   realaud            6 (  0.00%)              588 (  0.00%)     98.00
   halflif           39 (  0.00%)             3148 (  0.00%)     80.72
   starcra           51 (  0.00%)             4070 (  0.00%)     79.80
   everque         1647 (  0.01%)          1581265 (  0.01%)    960.09
   unreal           100 (  0.00%)            35160 (  0.00%)    351.60
   quake              9 (  0.00%)             1062 (  0.00%)    118.00
   cuseeme            1 (  0.00%)              105 (  0.00%)    105.00
   other        1588929 (  6.76%)        443535746 (  2.34%)    279.14
  icmp          1797697 (  7.65%)        201963129 (  1.07%)    112.35
  ipip              184 (  0.00%)            19160 (  0.00%)    104.13
  ipsec            2837 (  0.01%)           980030 (  0.01%)    345.45
  ip6           1367207 (  5.82%)       1059482443 (  5.59%)    774.92
  pim               323 (  0.00%)            19380 (  0.00%)     60.00
  other           89984 (  0.38%)         37144673 (  0.20%)    412.79
  frag             3797 (  0.02%)          4346305 (  0.02%)   1144.67
 ip6             373470 (  1.59%)        297140587 (  1.57%)    795.62
  tcp6           293169 (  1.25%)        271039813 (  1.43%)    924.52
   http(s)        12550 (  0.05%)         16088597 (  0.08%)   1281.96
   http(c)        11853 (  0.05%)          1280501 (  0.01%)    108.03
   smtp             392 (  0.00%)           144632 (  0.00%)    368.96
   dns              269 (  0.00%)            70761 (  0.00%)    263.05
   bgp               89 (  0.00%)            13681 (  0.00%)    153.72
   other         268016 (  1.14%)        253441641 (  1.34%)    945.62
  udp6            50001 (  0.21%)         21243104 (  0.11%)    424.85
   dns            34249 (  0.15%)          7622875 (  0.04%)    222.57
   halflif            1 (  0.00%)              106 (  0.00%)    106.00
   everque            1 (  0.00%)              107 (  0.00%)    107.00
   quake              2 (  0.00%)              229 (  0.00%)    114.50
   other          15748 (  0.07%)         13619787 (  0.07%)    864.86
  icmp6           29375 (  0.12%)          3946244 (  0.02%)    134.34
  ip6                85 (  0.00%)            11580 (  0.00%)    136.24
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            810 (  0.00%)           895766 (  0.00%)   1105.88


tcpdump file: 201204010930.dump.gz (533.34 MB)