Traffic Trace Info


DumpFile: 201105271400.dump
FileSize: 8458.54MB
Id: 201105271400
StartTime: Fri May 27 14:00:01 2011
EndTime: Fri May 27 14:15:01 2011
TotalTime: 899.70 seconds
TotalCapSize: -1827.90MB CapLen: 96 bytes
# of packets: 137260633 (38345.01MB)
AvgRate: 357.50Mbps stddev:54.43M

IP flow (unique src/dst pair) Information

# of flows: 1181038 (avg. 116.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 3.4% 2.7% 2.2% 2.2% 2.1% 1.8% 1.6% 1.5% 1.2%

IP address Information

# of IPv4 addresses: 611424
Top 10 bandwidth usage (bytes/total in %):
13.8% 11.4% 10.0% 8.0% 6.6% 3.4% 3.1% 3.0% 2.9% 2.7%
# of IPv6 addresses: 4231
Top 10 bandwidth usage (bytes/total in %):
16.9% 15.0% 14.9% 11.3% 10.3% 9.9% 9.8% 7.2% 6.9% 5.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:  100631445
 [   64-  127]:   11132818
 [  128-  255]:    1730666
 [  256-  511]:    1000360
 [  512- 1023]:    1003945
 [ 1024- 2047]:   21761399


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total        137260633 (100.00%)      40207659696 (100.00%)    292.93
 ip           136864484 ( 99.71%)      40054872224 ( 99.62%)    292.66
  tcp          37505675 ( 27.32%)      30874102532 ( 76.79%)    823.18
   http(s)     19304980 ( 14.06%)      26553072132 ( 66.04%)   1375.45
   http(c)     10654624 (  7.76%)       1325556873 (  3.30%)    124.41
   squid         210194 (  0.15%)        169482324 (  0.42%)    806.31
   smtp          372381 (  0.27%)        201411497 (  0.50%)    540.87
   ftp            67418 (  0.05%)          5720709 (  0.01%)     84.85
   pop3           33619 (  0.02%)          8406950 (  0.02%)    250.07
   imap            4698 (  0.00%)          2005892 (  0.00%)    426.97
   telnet           394 (  0.00%)            39736 (  0.00%)    100.85
   ssh           158098 (  0.12%)         14711320 (  0.04%)     93.05
   dns            19124 (  0.01%)          1832325 (  0.00%)     95.81
   bgp              585 (  0.00%)           121655 (  0.00%)    207.96
   napster          434 (  0.00%)            27249 (  0.00%)     62.79
   realaud          270 (  0.00%)            21946 (  0.00%)     81.28
   rtsp            6238 (  0.00%)          7647359 (  0.02%)   1225.93
   icecast         1387 (  0.00%)           137594 (  0.00%)     99.20
   hotline           44 (  0.00%)             3920 (  0.00%)     89.09
   other        6671186 (  4.86%)       2583902991 (  6.43%)    387.32
  udp          97094358 ( 70.74%)       7917426060 ( 19.69%)     81.54
   dns          6853055 (  4.99%)        535278987 (  1.33%)     78.11
   realaud           17 (  0.00%)             1420 (  0.00%)     83.53
   halflif           75 (  0.00%)             5918 (  0.00%)     78.91
   starcra          133 (  0.00%)            15308 (  0.00%)    115.10
   everque         2430 (  0.00%)          1489639 (  0.00%)    613.02
   unreal            24 (  0.00%)             3728 (  0.00%)    155.33
   quake           1923 (  0.00%)           157271 (  0.00%)     81.78
   cuseeme            4 (  0.00%)              633 (  0.00%)    158.25
   other       90234737 ( 65.74%)       7380231928 ( 18.36%)     81.79
  icmp           380325 (  0.28%)         65492918 (  0.16%)    172.20
  ipip              182 (  0.00%)            18952 (  0.00%)    104.13
  ipsec             335 (  0.00%)            63990 (  0.00%)    191.01
  ip6           1863833 (  1.36%)       1192103515 (  2.96%)    639.60
  other           19776 (  0.01%)          5664257 (  0.01%)    286.42
  frag            10497 (  0.01%)          8312718 (  0.02%)    791.91
 ip6             396149 (  0.29%)        152787472 (  0.38%)    385.68
  tcp6           311208 (  0.23%)        127200323 (  0.32%)    408.73
   http(s)        21073 (  0.02%)         18117629 (  0.05%)    859.76
   http(c)       203519 (  0.15%)         17900724 (  0.04%)     87.96
   smtp             616 (  0.00%)           114916 (  0.00%)    186.55
   ftp              135 (  0.00%)            12384 (  0.00%)     91.73
   dns              228 (  0.00%)            50393 (  0.00%)    221.02
   bgp               89 (  0.00%)            15039 (  0.00%)    168.98
   other          85548 (  0.06%)         90989238 (  0.23%)   1063.60
  udp6            42428 (  0.03%)         12928155 (  0.03%)    304.71
   dns            40303 (  0.03%)         12586014 (  0.03%)    312.28
   cuseeme            1 (  0.00%)              103 (  0.00%)    103.00
   other           2124 (  0.00%)           342038 (  0.00%)    161.03
  icmp6           30165 (  0.02%)          3955590 (  0.01%)    131.13
  pim6               29 (  0.00%)             3944 (  0.00%)    136.00
  other6          12319 (  0.01%)          8699460 (  0.02%)    706.18


tcpdump file: 201105271400.dump.gz (2095.51 MB)