Traffic Trace Info


DumpFile: 201101191400.dump
FileSize: 3321.94MB
Id: 201101191400
StartTime: Wed Jan 19 14:00:00 2011
EndTime: Wed Jan 19 14:15:00 2011
TotalTime: 900.13 seconds
TotalCapSize: -1489.87MB CapLen: 96 bytes
# of packets: 46910615 (31710.79MB)
AvgRate: 295.49Mbps stddev:46.67M

IP flow (unique src/dst pair) Information

# of flows: 1159050 (avg. 40.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.9% 1.7% 1.5% 1.3% 1.1% 1.0% 0.8% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 598438
Top 10 bandwidth usage (bytes/total in %):
14.6% 3.5% 3.3% 3.0% 2.9% 2.6% 2.4% 2.3% 2.0% 2.0%
# of IPv6 addresses: 4098
Top 10 bandwidth usage (bytes/total in %):
19.7% 19.7% 14.6% 14.6% 6.2% 6.1% 6.0% 4.3% 3.8% 3.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   11264281
 [   64-  127]:   10953795
 [  128-  255]:    1585971
 [  256-  511]:    1316306
 [  512- 1023]:    1168954
 [ 1024- 2047]:   20621308


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         46910615 (100.00%)      33251172853 (100.00%)    708.82
 ip            46779605 ( 99.72%)      33204856574 ( 99.86%)    709.81
  tcp          38972591 ( 83.08%)      28881942102 ( 86.86%)    741.08
   http(s)     17714797 ( 37.76%)      23464644237 ( 70.57%)   1324.58
   http(c)     10722982 ( 22.86%)       1773314917 (  5.33%)    165.38
   squid         407175 (  0.87%)        157419455 (  0.47%)    386.61
   smtp          275792 (  0.59%)        138079573 (  0.42%)    500.67
   nntp              20 (  0.00%)             1825 (  0.00%)     91.25
   ftp           134029 (  0.29%)         17123754 (  0.05%)    127.76
   pop3           21569 (  0.05%)          7188892 (  0.02%)    333.30
   imap            8572 (  0.02%)          5603686 (  0.02%)    653.72
   telnet           857 (  0.00%)            63634 (  0.00%)     74.25
   ssh            53679 (  0.11%)         11189311 (  0.03%)    208.45
   dns             9436 (  0.02%)           898683 (  0.00%)     95.24
   bgp              587 (  0.00%)           111616 (  0.00%)    190.15
   napster          835 (  0.00%)           246532 (  0.00%)    295.25
   realaud          347 (  0.00%)            25448 (  0.00%)     73.34
   rtsp           32221 (  0.07%)         43184696 (  0.13%)   1340.27
   icecast       103491 (  0.22%)         92306769 (  0.28%)    891.93
   hotline           41 (  0.00%)             2682 (  0.00%)     65.41
   other        9486146 ( 20.22%)       3170535492 (  9.54%)    334.23
  udp           6674070 ( 14.23%)       3908013008 ( 11.75%)    585.55
   dns          1003486 (  2.14%)        166418211 (  0.50%)    165.84
   realaud         1905 (  0.00%)           126864 (  0.00%)     66.60
   halflif           39 (  0.00%)             6214 (  0.00%)    159.33
   starcra          114 (  0.00%)            17084 (  0.00%)    149.86
   everque         1524 (  0.00%)           266940 (  0.00%)    175.16
   unreal            50 (  0.00%)             6340 (  0.00%)    126.80
   quake             40 (  0.00%)             5137 (  0.00%)    128.43
   cuseeme            7 (  0.00%)              894 (  0.00%)    127.71
   other        5666262 ( 12.08%)       3740521706 ( 11.25%)    660.14
  icmp           370835 (  0.79%)         32000846 (  0.10%)     86.29
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec            5925 (  0.01%)          3636798 (  0.01%)    613.81
  ip6            743120 (  1.58%)        377061968 (  1.13%)    507.40
  other           12879 (  0.03%)          2182582 (  0.01%)    169.47
  frag             3003 (  0.01%)          3410021 (  0.01%)   1135.54
 ip6             131008 (  0.28%)         46316159 (  0.14%)    353.54
  tcp6            47477 (  0.10%)         17572492 (  0.05%)    370.13
   http(s)         4580 (  0.01%)          5669280 (  0.02%)   1237.83
   http(c)        26232 (  0.06%)          2266112 (  0.01%)     86.39
   smtp             421 (  0.00%)           109445 (  0.00%)    259.96
   ftp              125 (  0.00%)            11250 (  0.00%)     90.00
   dns              786 (  0.00%)           204515 (  0.00%)    260.20
   bgp               96 (  0.00%)            24003 (  0.00%)    250.03
   other          15237 (  0.03%)          9287887 (  0.03%)    609.56
  udp6            52786 (  0.11%)         17577640 (  0.05%)    333.00
   dns            49977 (  0.11%)         17027843 (  0.05%)    340.71
   unreal             1 (  0.00%)              168 (  0.00%)    168.00
   other           2808 (  0.01%)           549629 (  0.00%)    195.74
  icmp6           17425 (  0.04%)          1869121 (  0.01%)    107.27
  ip6                81 (  0.00%)            11108 (  0.00%)    137.14
  pim6               80 (  0.00%)             8880 (  0.00%)    111.00
  other6          13159 (  0.03%)          9276918 (  0.03%)    704.99


tcpdump file: 201101191400.dump.gz (1165.04 MB)