Traffic Trace Info


DumpFile: 201105041400.dump
FileSize: 2324.49MB
Id: 201105041400
StartTime: Wed May 4 14:00:01 2011
EndTime: Wed May 4 14:15:00 2011
TotalTime: 899.63 seconds
TotalCapSize: 1831.66MB CapLen: 96 bytes
# of packets: 32297132 (23546.97MB)
AvgRate: 219.51Mbps stddev:40.09M

IP flow (unique src/dst pair) Information

# of flows: 939481 (avg. 34.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 3.3% 3.1% 2.7% 2.1% 2.0% 1.9% 1.7% 1.7% 1.6%

IP address Information

# of IPv4 addresses: 521245
Top 10 bandwidth usage (bytes/total in %):
21.5% 17.6% 6.9% 5.9% 4.2% 3.4% 3.3% 3.3% 3.2% 2.8%
# of IPv6 addresses: 4168
Top 10 bandwidth usage (bytes/total in %):
72.3% 53.7% 27.6% 3.9% 2.8% 2.8% 2.5% 2.4% 2.1% 2.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5913488
 [   64-  127]:    7439553
 [  128-  255]:    1807221
 [  256-  511]:     912547
 [  512- 1023]:     990745
 [ 1024- 2047]:   15233578


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         32297132 (100.00%)      24690792346 (100.00%)    764.49
 ip            31980297 ( 99.02%)      24490355648 ( 99.19%)    765.80
  tcp          24947144 ( 77.24%)      21946804601 ( 88.89%)    879.73
   http(s)     13089810 ( 40.53%)      17921325196 ( 72.58%)   1369.11
   http(c)      6167045 ( 19.09%)        907470369 (  3.68%)    147.15
   squid         106816 (  0.33%)         51622377 (  0.21%)    483.28
   smtp          110596 (  0.34%)         32618004 (  0.13%)    294.93
   nntp              18 (  0.00%)             1206 (  0.00%)     67.00
   ftp            13099 (  0.04%)          1168810 (  0.00%)     89.23
   pop3            9832 (  0.03%)          6197331 (  0.03%)    630.32
   imap            3402 (  0.01%)          2022032 (  0.01%)    594.37
   telnet         18263 (  0.06%)          2079997 (  0.01%)    113.89
   ssh            17296 (  0.05%)          3996773 (  0.02%)    231.08
   dns             7868 (  0.02%)           867222 (  0.00%)    110.22
   bgp              568 (  0.00%)           114379 (  0.00%)    201.37
   napster           65 (  0.00%)             4729 (  0.00%)     72.75
   realaud            6 (  0.00%)              366 (  0.00%)     61.00
   rtsp           19981 (  0.06%)          5893601 (  0.02%)    294.96
   icecast        28627 (  0.09%)         23652760 (  0.10%)    826.24
   hotline           17 (  0.00%)             1463 (  0.00%)     86.06
   other        5353828 ( 16.58%)       2987767566 ( 12.10%)    558.06
  udp           5168997 ( 16.00%)       2095909772 (  8.49%)    405.48
   dns           653931 (  2.02%)        142514404 (  0.58%)    217.93
   rip                1 (  0.00%)               99 (  0.00%)     99.00
   realaud          277 (  0.00%)            74874 (  0.00%)    270.30
   halflif           92 (  0.00%)             7287 (  0.00%)     79.21
   starcra          287 (  0.00%)            26926 (  0.00%)     93.82
   everque          562 (  0.00%)            62672 (  0.00%)    111.52
   unreal            28 (  0.00%)             4097 (  0.00%)    146.32
   quake           2169 (  0.01%)           169080 (  0.00%)     77.95
   cuseeme           24 (  0.00%)             2598 (  0.00%)    108.25
   other        4511502 ( 13.97%)       1952978764 (  7.91%)    432.89
  icmp           415660 (  1.29%)         63377213 (  0.26%)    152.47
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec            6342 (  0.02%)          1384824 (  0.01%)    218.36
  ip6           1420447 (  4.40%)        371988870 (  1.51%)    261.88
  other           21522 (  0.07%)         10871098 (  0.04%)    505.12
  frag              678 (  0.00%)           664803 (  0.00%)    980.54
 ip6             316835 (  0.98%)        200436698 (  0.81%)    632.62
  tcp6           257266 (  0.80%)        185277385 (  0.75%)    720.18
   http(s)         6671 (  0.02%)          9119092 (  0.04%)   1366.98
   http(c)       126405 (  0.39%)         10719856 (  0.04%)     84.81
   squid              6 (  0.00%)              508 (  0.00%)     84.67
   smtp              78 (  0.00%)            19458 (  0.00%)    249.46
   ssh               87 (  0.00%)            11371 (  0.00%)    130.70
   dns              109 (  0.00%)            24969 (  0.00%)    229.07
   bgp               90 (  0.00%)            23969 (  0.00%)    266.32
   icecast            5 (  0.00%)              450 (  0.00%)     90.00
   other         123815 (  0.38%)        165357712 (  0.67%)   1335.52
  udp6            38773 (  0.12%)          9895935 (  0.04%)    255.23
   dns            30302 (  0.09%)          8294901 (  0.03%)    273.74
   realaud            1 (  0.00%)              113 (  0.00%)    113.00
   everque            1 (  0.00%)              118 (  0.00%)    118.00
   unreal             1 (  0.00%)              104 (  0.00%)    104.00
   quake              1 (  0.00%)              106 (  0.00%)    106.00
   other           8467 (  0.03%)          1600593 (  0.01%)    189.04
  icmp6           17026 (  0.05%)          2662210 (  0.01%)    156.36
  ip6                83 (  0.00%)            11344 (  0.00%)    136.67
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           3657 (  0.01%)          2585744 (  0.01%)    707.07


tcpdump file: 201105041400.dump.gz (766.78 MB)