Traffic Trace Info


DumpFile: 201010081400.dump
FileSize: 3159.54MB
Id: 201010081400
StartTime: Fri Oct 8 14:00:01 2010
EndTime: Fri Oct 8 14:15:01 2010
TotalTime: 900.63 seconds
TotalCapSize: -1594.35MB CapLen: 96 bytes
# of packets: 43114888 (26536.33MB)
AvgRate: 247.16Mbps stddev:23.36M

IP flow (unique src/dst pair) Information

# of flows: 1812930 (avg. 23.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 4.4% 1.5% 1.5% 1.4% 1.3% 1.2% 1.2% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 754865
Top 10 bandwidth usage (bytes/total in %):
11.3% 9.6% 9.1% 5.5% 4.6% 4.6% 3.1% 2.6% 2.0% 1.8%
# of IPv6 addresses: 3973
Top 10 bandwidth usage (bytes/total in %):
41.9% 12.5% 10.8% 9.4% 8.4% 5.7% 5.7% 5.2% 5.2% 5.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    7817563
 [   64-  127]:   13353256
 [  128-  255]:    2331393
 [  256-  511]:    1558831
 [  512- 1023]:     870914
 [ 1024- 2047]:   17182931


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         43114888 (100.00%)      27825357569 (100.00%)    645.38
 ip            42075711 ( 97.59%)      27646344705 ( 99.36%)    657.06
  tcp          28106471 ( 65.19%)      20447737201 ( 73.49%)    727.51
   http(s)     12706244 ( 29.47%)      15916200421 ( 57.20%)   1252.63
   http(c)     10355754 ( 24.02%)       1741424616 (  6.26%)    168.16
   squid         282825 (  0.66%)        105912475 (  0.38%)    374.48
   smtp          258441 (  0.60%)         90751994 (  0.33%)    351.15
   nntp               2 (  0.00%)              124 (  0.00%)     62.00
   ftp            27205 (  0.06%)          2346733 (  0.01%)     86.26
   pop3           14421 (  0.03%)          6951122 (  0.02%)    482.01
   imap            4719 (  0.01%)          1617012 (  0.01%)    342.66
   telnet           832 (  0.00%)            60932 (  0.00%)     73.24
   ssh            12290 (  0.03%)          1900940 (  0.01%)    154.67
   dns             7678 (  0.02%)           602602 (  0.00%)     78.48
   bgp              388 (  0.00%)           125001 (  0.00%)    322.17
   napster          750 (  0.00%)            58126 (  0.00%)     77.50
   realaud          108 (  0.00%)            20329 (  0.00%)    188.23
   rtsp           13182 (  0.03%)         15335230 (  0.06%)   1163.35
   icecast        34837 (  0.08%)         22359723 (  0.08%)    641.84
   hotline           73 (  0.00%)             4751 (  0.00%)     65.08
   other        4386721 ( 10.17%)       2542065010 (  9.14%)    579.49
  udp           8445839 ( 19.59%)       4239099182 ( 15.23%)    501.92
   dns          1250880 (  2.90%)        183645975 (  0.66%)    146.81
   realaud           89 (  0.00%)            12277 (  0.00%)    137.94
   halflif           39 (  0.00%)             3456 (  0.00%)     88.62
   starcra           54 (  0.00%)             5705 (  0.00%)    105.65
   everque          532 (  0.00%)           107266 (  0.00%)    201.63
   unreal             9 (  0.00%)             1256 (  0.00%)    139.56
   quake             64 (  0.00%)             5143 (  0.00%)     80.36
   cuseeme            8 (  0.00%)             1383 (  0.00%)    172.88
   other        7192309 ( 16.68%)       4055020069 ( 14.57%)    563.80
  icmp          1078937 (  2.50%)        169645935 (  0.61%)    157.23
  ipip              179 (  0.00%)            18610 (  0.00%)    103.97
  ipsec            1138 (  0.00%)           181020 (  0.00%)    159.07
  ip6           4434416 ( 10.29%)       2787653087 ( 10.02%)    628.64
  other            8731 (  0.02%)          2009670 (  0.01%)    230.18
  frag             9280 (  0.02%)          7185870 (  0.03%)    774.34
 ip6            1039175 (  2.41%)        179012744 (  0.64%)    172.26
  tcp6           971544 (  2.25%)        160205103 (  0.58%)    164.90
   http(s)        23331 (  0.05%)         24095276 (  0.09%)   1032.76
   http(c)        28631 (  0.07%)          2536913 (  0.01%)     88.61
   smtp             874 (  0.00%)           389568 (  0.00%)    445.73
   ftp               66 (  0.00%)             5814 (  0.00%)     88.09
   dns              108 (  0.00%)            25757 (  0.00%)    238.49
   bgp               88 (  0.00%)            15585 (  0.00%)    177.10
   other         918446 (  2.13%)        133136190 (  0.48%)    144.96
  udp6            54176 (  0.13%)         16550637 (  0.06%)    305.50
   dns            51202 (  0.12%)         16048803 (  0.06%)    313.44
   other           2974 (  0.01%)           501834 (  0.00%)    168.74
  icmp6           13125 (  0.03%)          1995799 (  0.01%)    152.06
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6            299 (  0.00%)           256989 (  0.00%)    859.49


tcpdump file: 201010081400.dump.gz (1117.71 MB)