Traffic Trace Info


DumpFile: 201102061400.dump
FileSize: 2109.67MB
Id: 201102061400
StartTime: Sun Feb 6 14:00:01 2011
EndTime: Sun Feb 6 14:15:00 2011
TotalTime: 899.21 seconds
TotalCapSize: 1648.38MB CapLen: 96 bytes
# of packets: 30230424 (23672.63MB)
AvgRate: 220.83Mbps stddev:48.27M

IP flow (unique src/dst pair) Information

# of flows: 665266 (avg. 45.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.6% 1.1% 1.0% 1.0% 1.0% 0.9% 0.9% 0.9% 0.9%

IP address Information

# of IPv4 addresses: 357939
Top 10 bandwidth usage (bytes/total in %):
26.7% 5.7% 5.1% 3.5% 2.3% 2.1% 2.0% 1.7% 1.7% 1.7%
# of IPv6 addresses: 3370
Top 10 bandwidth usage (bytes/total in %):
29.8% 19.4% 16.2% 16.2% 11.1% 11.1% 9.4% 9.0% 9.0% 7.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5788743
 [   64-  127]:    6085969
 [  128-  255]:    1183395
 [  256-  511]:     807789
 [  512- 1023]:     750745
 [ 1024- 2047]:   15613783


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         30230424 (100.00%)      24822554989 (100.00%)    821.11
 ip            30024505 ( 99.32%)      24684872352 ( 99.45%)    822.16
  tcp          24206599 ( 80.07%)      21737228557 ( 87.57%)    897.99
   http(s)     13966621 ( 46.20%)      19098578311 ( 76.94%)   1367.44
   http(c)      5799006 ( 19.18%)       1052170669 (  4.24%)    181.44
   squid         231593 (  0.77%)         95989468 (  0.39%)    414.47
   smtp          246545 (  0.82%)        151003391 (  0.61%)    612.48
   ftp            34394 (  0.11%)          3871623 (  0.02%)    112.57
   pop3            6035 (  0.02%)          3536405 (  0.01%)    585.98
   imap            3025 (  0.01%)           913434 (  0.00%)    301.96
   telnet          1133 (  0.00%)            83510 (  0.00%)     73.71
   ssh            24152 (  0.08%)          3308046 (  0.01%)    136.97
   dns             9498 (  0.03%)           761308 (  0.00%)     80.15
   bgp              572 (  0.00%)            95532 (  0.00%)    167.01
   napster           27 (  0.00%)             1718 (  0.00%)     63.63
   realaud           58 (  0.00%)             6179 (  0.00%)    106.53
   rtsp            6952 (  0.02%)          7756620 (  0.03%)   1115.74
   icecast          882 (  0.00%)            87044 (  0.00%)     98.69
   hotline           13 (  0.00%)              790 (  0.00%)     60.77
   other        3876093 ( 12.82%)       1319064509 (  5.31%)    340.31
  udp           4988514 ( 16.50%)       2660243151 ( 10.72%)    533.27
   dns           634119 (  2.10%)         89607015 (  0.36%)    141.31
   rip                1 (  0.00%)              323 (  0.00%)    323.00
   realaud         1799 (  0.01%)           108428 (  0.00%)     60.27
   halflif          216 (  0.00%)            16950 (  0.00%)     78.47
   starcra           34 (  0.00%)             4714 (  0.00%)    138.65
   everque          617 (  0.00%)            81983 (  0.00%)    132.87
   unreal            43 (  0.00%)             6827 (  0.00%)    158.77
   quake             14 (  0.00%)             1216 (  0.00%)     86.86
   other        4351559 ( 14.39%)       2570330347 ( 10.35%)    590.67
  icmp           336748 (  1.11%)         73724393 (  0.30%)    218.93
  ipip              181 (  0.00%)            18878 (  0.00%)    104.30
  ipsec            1025 (  0.00%)           317270 (  0.00%)    309.53
  ip6            458031 (  1.52%)        206486338 (  0.83%)    450.81
  other           33407 (  0.11%)          6853765 (  0.03%)    205.16
  frag              491 (  0.00%)           528693 (  0.00%)   1076.77
 ip6             205919 (  0.68%)        137682637 (  0.55%)    668.63
  tcp6           156872 (  0.52%)        125244606 (  0.50%)    798.39
   http(s)        15428 (  0.05%)         15430340 (  0.06%)   1000.15
   http(c)        23162 (  0.08%)          2141060 (  0.01%)     92.44
   squid            104 (  0.00%)             8788 (  0.00%)     84.50
   smtp             153 (  0.00%)            30079 (  0.00%)    196.59
   ftp               35 (  0.00%)             3144 (  0.00%)     89.83
   ssh            10728 (  0.04%)         15336408 (  0.06%)   1429.57
   dns              425 (  0.00%)           117086 (  0.00%)    275.50
   bgp               91 (  0.00%)            14594 (  0.00%)    160.37
   other         106746 (  0.35%)         92163107 (  0.37%)    863.39
  udp6            32473 (  0.11%)          9818566 (  0.04%)    302.36
   dns            30620 (  0.10%)          9466072 (  0.04%)    309.15
   other           1853 (  0.01%)           352494 (  0.00%)    190.23
  icmp6           15084 (  0.05%)          1632475 (  0.01%)    108.23
  ip6                83 (  0.00%)            11294 (  0.00%)    136.07
  pim6               46 (  0.00%)             5616 (  0.00%)    122.09
  other6           1361 (  0.00%)           970080 (  0.00%)    712.77


tcpdump file: 201102061400.dump.gz (708.25 MB)