Traffic Trace Info


DumpFile: 201101301400.dump
FileSize: 3382.25MB
Id: 201101301400
StartTime: Sun Jan 30 14:00:01 2011
EndTime: Sun Jan 30 14:15:00 2011
TotalTime: 899.33 seconds
TotalCapSize: -1453.40MB CapLen: 96 bytes
# of packets: 48473506 (39135.13MB)
AvgRate: 364.97Mbps stddev:58.46M

IP flow (unique src/dst pair) Information

# of flows: 961233 (avg. 50.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
19.4% 4.3% 3.7% 3.4% 3.3% 2.7% 1.9% 1.7% 1.1% 1.0%

IP address Information

# of IPv4 addresses: 495406
Top 10 bandwidth usage (bytes/total in %):
20.3% 19.9% 16.0% 12.3% 4.4% 4.4% 4.2% 3.9% 3.7% 3.5%
# of IPv6 addresses: 3181
Top 10 bandwidth usage (bytes/total in %):
52.4% 48.5% 13.6% 13.6% 5.0% 2.5% 2.5% 2.0% 1.8% 1.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    8072007
 [   64-  127]:   10862240
 [  128-  255]:    1262304
 [  256-  511]:     921708
 [  512- 1023]:    1594098
 [ 1024- 2047]:   25761149


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         48473506 (100.00%)      41036159000 (100.00%)    846.57
 ip            48380427 ( 99.81%)      40987216847 ( 99.88%)    847.19
  tcp          37360772 ( 77.07%)      31204173071 ( 76.04%)    835.21
   http(s)     19364243 ( 39.95%)      26500843117 ( 64.58%)   1368.55
   http(c)      9945610 ( 20.52%)       2504198482 (  6.10%)    251.79
   squid         264786 (  0.55%)        127681210 (  0.31%)    482.21
   smtp          214183 (  0.44%)        111810550 (  0.27%)    522.03
   ftp            48331 (  0.10%)         12349575 (  0.03%)    255.52
   pop3           14619 (  0.03%)         13909460 (  0.03%)    951.46
   imap            3993 (  0.01%)          3034299 (  0.01%)    759.90
   telnet          1229 (  0.00%)            79714 (  0.00%)     64.86
   ssh           546554 (  1.13%)         78456792 (  0.19%)    143.55
   dns             7374 (  0.02%)           688696 (  0.00%)     93.40
   bgp              530 (  0.00%)            77110 (  0.00%)    145.49
   napster          106 (  0.00%)             7368 (  0.00%)     69.51
   realaud          257 (  0.00%)            15854 (  0.00%)     61.69
   rtsp           20192 (  0.04%)         21578480 (  0.05%)   1068.66
   icecast         2520 (  0.01%)           187712 (  0.00%)     74.49
   hotline           48 (  0.00%)             3096 (  0.00%)     64.50
   other        6926197 ( 14.29%)       1829251556 (  4.46%)    264.11
  udp          10060944 ( 20.76%)       9478308370 ( 23.10%)    942.09
   dns           679155 (  1.40%)        103229192 (  0.25%)    152.00
   rip               32 (  0.00%)            48448 (  0.00%)   1514.00
   realaud           30 (  0.00%)            25378 (  0.00%)    845.93
   halflif           77 (  0.00%)             6022 (  0.00%)     78.21
   starcra           99 (  0.00%)            48242 (  0.00%)    487.29
   everque          662 (  0.00%)           117691 (  0.00%)    177.78
   unreal            18 (  0.00%)             3184 (  0.00%)    176.89
   quake            117 (  0.00%)            89565 (  0.00%)    765.51
   cuseeme            6 (  0.00%)             2155 (  0.00%)    359.17
   other        5717174 ( 11.79%)       4390892972 ( 10.70%)    768.02
  icmp           519180 (  1.07%)        117009400 (  0.29%)    225.37
  ipip              179 (  0.00%)            18670 (  0.00%)    104.30
  ipsec            2393 (  0.00%)           794630 (  0.00%)    332.06
  ip6            423389 (  0.87%)        183204105 (  0.45%)    432.71
  other           13570 (  0.03%)          3708601 (  0.01%)    273.29
  frag          4721750 (  9.74%)       6577458829 ( 16.03%)   1393.01
 ip6              93079 (  0.19%)         48942153 (  0.12%)    525.81
  tcp6            46187 (  0.10%)         37807645 (  0.09%)    818.58
   http(s)         2597 (  0.01%)          1958552 (  0.00%)    754.16
   http(c)        10344 (  0.02%)          1103830 (  0.00%)    106.71
   smtp             281 (  0.00%)            72877 (  0.00%)    259.35
   ftp               99 (  0.00%)             8847 (  0.00%)     89.36
   dns              388 (  0.00%)            95846 (  0.00%)    247.03
   bgp              101 (  0.00%)            20808 (  0.00%)    206.02
   other          32377 (  0.07%)         34546885 (  0.08%)   1067.02
  udp6            30544 (  0.06%)          9307638 (  0.02%)    304.73
   dns            29173 (  0.06%)          8997072 (  0.02%)    308.40
   halflif            1 (  0.00%)              114 (  0.00%)    114.00
   quake              1 (  0.00%)               96 (  0.00%)     96.00
   other           1369 (  0.00%)           310356 (  0.00%)    226.70
  icmp6           16091 (  0.03%)          1691752 (  0.00%)    105.14
  ip6                81 (  0.00%)            11058 (  0.00%)    136.52
  pim6               47 (  0.00%)             5752 (  0.00%)    122.38
  other6            129 (  0.00%)           118308 (  0.00%)    917.12


tcpdump file: 201101301400.dump.gz (1068.90 MB)