Traffic Trace Info


DumpFile: 201104191400.dump
FileSize: 6286.79MB
Id: 201104191400
StartTime: Tue Apr 19 14:00:01 2011
EndTime: Tue Apr 19 14:15:00 2011
TotalTime: 899.51 seconds
TotalCapSize: 607.18MB CapLen: 96 bytes
# of packets: 103782628 (26087.39MB)
AvgRate: 243.24Mbps stddev:44.59M

IP flow (unique src/dst pair) Information

# of flows: 975793 (avg. 106.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.7% 2.6% 2.4% 2.1% 2.0% 1.9% 1.6% 1.5% 1.5%

IP address Information

# of IPv4 addresses: 521489
Top 10 bandwidth usage (bytes/total in %):
15.3% 10.0% 7.9% 3.2% 3.1% 2.8% 2.8% 2.8% 2.6% 2.6%
# of IPv6 addresses: 5059
Top 10 bandwidth usage (bytes/total in %):
52.4% 52.4% 18.3% 14.7% 3.6% 2.9% 2.7% 2.4% 2.4% 2.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   78379484
 [   64-  127]:    7318311
 [  128-  255]:    2021609
 [  256-  511]:    1019177
 [  512- 1023]:     917370
 [ 1024- 2047]:   14126677


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total        103782628 (100.00%)      27354614298 (100.00%)    263.58
 ip           103376821 ( 99.61%)      27178902830 ( 99.36%)    262.91
  tcp          28302753 ( 27.27%)      20509235426 ( 74.98%)    724.64
   http(s)     11909731 ( 11.48%)      16161909028 ( 59.08%)   1357.03
   http(c)      8234887 (  7.93%)       1296725252 (  4.74%)    157.47
   squid         364429 (  0.35%)        131165180 (  0.48%)    359.92
   smtp          247557 (  0.24%)        195777316 (  0.72%)    790.84
   nntp              12 (  0.00%)              748 (  0.00%)     62.33
   ftp            17079 (  0.02%)          1460333 (  0.01%)     85.50
   pop3           34156 (  0.03%)          4438393 (  0.02%)    129.94
   imap            7361 (  0.01%)          3183056 (  0.01%)    432.42
   telnet          2866 (  0.00%)           493849 (  0.00%)    172.31
   ssh           125710 (  0.12%)         25502846 (  0.09%)    202.87
   dns            15338 (  0.01%)          1568923 (  0.01%)    102.29
   bgp              582 (  0.00%)           127109 (  0.00%)    218.40
   napster           91 (  0.00%)             7136 (  0.00%)     78.42
   realaud           69 (  0.00%)            25780 (  0.00%)    373.62
   rtsp           35752 (  0.03%)         36548009 (  0.13%)   1022.26
   icecast        30840 (  0.03%)         23577161 (  0.09%)    764.50
   hotline           26 (  0.00%)             2078 (  0.00%)     79.92
   other        7276238 (  7.01%)       2626721489 (  9.60%)    361.00
  udp          73279851 ( 70.61%)       5977838563 ( 21.85%)     81.58
   dns           807501 (  0.78%)        174645151 (  0.64%)    216.28
   realaud         1826 (  0.00%)           111847 (  0.00%)     61.25
   halflif           31 (  0.00%)             2672 (  0.00%)     86.19
   starcra           46 (  0.00%)             6554 (  0.00%)    142.48
   everque          482 (  0.00%)           148619 (  0.00%)    308.34
   unreal            59 (  0.00%)             6414 (  0.00%)    108.71
   quake             22 (  0.00%)             1867 (  0.00%)     84.86
   cuseeme            1 (  0.00%)              140 (  0.00%)    140.00
   other       72469550 ( 69.83%)       5802763007 ( 21.21%)     80.07
  icmp           427863 (  0.41%)         78071532 (  0.29%)    182.47
  ipip              184 (  0.00%)            19172 (  0.00%)    104.20
  ipsec           32395 (  0.03%)         30309454 (  0.11%)    935.62
  ip6           1241618 (  1.20%)        464208931 (  1.70%)    373.87
  other           92157 (  0.09%)        119219752 (  0.44%)   1293.66
  frag             1520 (  0.00%)          1390842 (  0.01%)    915.03
 ip6             405807 (  0.39%)        175711468 (  0.64%)    432.99
  tcp6           326369 (  0.31%)        154771559 (  0.57%)    474.22
   http(s)         6318 (  0.01%)          7393721 (  0.03%)   1170.26
   http(c)       185529 (  0.18%)         16493966 (  0.06%)     88.90
   squid             33 (  0.00%)             2778 (  0.00%)     84.18
   smtp             122 (  0.00%)            19598 (  0.00%)    160.64
   ftp              127 (  0.00%)            12697 (  0.00%)     99.98
   dns              511 (  0.00%)           125611 (  0.00%)    245.81
   bgp               91 (  0.00%)            19601 (  0.00%)    215.40
   other         133638 (  0.13%)        130703587 (  0.48%)    978.04
  udp6            48347 (  0.05%)         14506410 (  0.05%)    300.05
   dns            44709 (  0.04%)         13788347 (  0.05%)    308.40
   realaud            1 (  0.00%)              107 (  0.00%)    107.00
   halflif            2 (  0.00%)              216 (  0.00%)    108.00
   starcra            2 (  0.00%)              184 (  0.00%)     92.00
   everque            2 (  0.00%)              174 (  0.00%)     87.00
   unreal             1 (  0.00%)               89 (  0.00%)     89.00
   other           3630 (  0.00%)           717293 (  0.00%)    197.60
  icmp6           26705 (  0.03%)          3375804 (  0.01%)    126.41
  ip6                82 (  0.00%)            11176 (  0.00%)    136.29
  pim6               29 (  0.00%)             3944 (  0.00%)    136.00
  other6           4275 (  0.00%)          3042575 (  0.01%)    711.71


tcpdump file: 201104191400.dump.gz (1224.73 MB)