Traffic Trace Info


DumpFile: 201106011400.dump
FileSize: 8153.24MB
Id: 201106011400
StartTime: Wed Jun 1 14:00:01 2011
EndTime: Wed Jun 1 14:15:01 2011
TotalTime: 900.61 seconds
TotalCapSize: 2046.68MB CapLen: 96 bytes
# of packets: 131763439 (37611.05MB)
AvgRate: 350.35Mbps stddev:42.48M

IP flow (unique src/dst pair) Information

# of flows: 1056455 (avg. 124.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.0% 4.9% 3.8% 3.2% 1.4% 1.1% 1.0% 0.8% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 532302
Top 10 bandwidth usage (bytes/total in %):
12.7% 7.0% 6.7% 5.6% 5.4% 5.1% 4.6% 3.8% 3.4% 3.3%
# of IPv6 addresses: 3554
Top 10 bandwidth usage (bytes/total in %):
69.0% 43.2% 25.7% 4.5% 2.1% 1.9% 1.6% 1.4% 1.2% 1.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   94220777
 [   64-  127]:   11734697
 [  128-  255]:    1958984
 [  256-  511]:    1088391
 [  512- 1023]:    1569201
 [ 1024- 2047]:   21191389


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total        131763439 (100.00%)      39438040566 (100.00%)    299.31
 ip           131618725 ( 99.89%)      39349644397 ( 99.78%)    298.97
  tcp          40538227 ( 30.77%)      31086684638 ( 78.82%)    766.85
   http(s)     18870273 ( 14.32%)      25621571106 ( 64.97%)   1357.77
   http(c)     11770698 (  8.93%)       1964504196 (  4.98%)    166.90
   squid         153823 (  0.12%)        145070828 (  0.37%)    943.10
   smtp          242993 (  0.18%)        145167946 (  0.37%)    597.42
   ftp             7886 (  0.01%)           778064 (  0.00%)     98.66
   pop3           37795 (  0.03%)         12220523 (  0.03%)    323.34
   imap            6675 (  0.01%)          3902844 (  0.01%)    584.70
   telnet           353 (  0.00%)            40340 (  0.00%)    114.28
   ssh            13138 (  0.01%)          2663622 (  0.01%)    202.74
   dns            23977 (  0.02%)          2468715 (  0.01%)    102.96
   bgp              541 (  0.00%)            92996 (  0.00%)    171.90
   napster          336 (  0.00%)            27298 (  0.00%)     81.24
   realaud           88 (  0.00%)             7730 (  0.00%)     87.84
   rtsp             107 (  0.00%)            17157 (  0.00%)    160.35
   icecast        32335 (  0.02%)         29284937 (  0.07%)    905.67
   hotline          112 (  0.00%)             8086 (  0.00%)     72.20
   other        9377096 (  7.12%)       3158858190 (  8.01%)    336.87
  udp          89036657 ( 67.57%)       7452356953 ( 18.90%)     83.70
   dns          5754556 (  4.37%)        475193098 (  1.20%)     82.58
   realaud           28 (  0.00%)             3085 (  0.00%)    110.18
   halflif          271 (  0.00%)            21718 (  0.00%)     80.14
   starcra           45 (  0.00%)             6032 (  0.00%)    134.04
   everque          361 (  0.00%)            75919 (  0.00%)    210.30
   unreal            36 (  0.00%)             5652 (  0.00%)    157.00
   quake             59 (  0.00%)             7111 (  0.00%)    120.53
   cuseeme           42 (  0.00%)             8280 (  0.00%)    197.14
   other       83281081 ( 63.20%)       6976929520 ( 17.69%)     83.78
  icmp           379170 (  0.29%)         62237685 (  0.16%)    164.14
  ipip              184 (  0.00%)            19172 (  0.00%)    104.20
  ipsec             162 (  0.00%)            30124 (  0.00%)    185.95
  ip6           1643351 (  1.25%)        742455436 (  1.88%)    451.79
  other           20974 (  0.02%)          5860389 (  0.01%)    279.41
  frag              805 (  0.00%)           830297 (  0.00%)   1031.42
 ip6             144714 (  0.11%)         88396169 (  0.22%)    610.83
  tcp6            80805 (  0.06%)         70331634 (  0.18%)    870.39
   http(s)         5556 (  0.00%)          5351108 (  0.01%)    963.12
   http(c)        27408 (  0.02%)          2410390 (  0.01%)     87.94
   smtp             794 (  0.00%)           479209 (  0.00%)    603.54
   ftp              256 (  0.00%)            26672 (  0.00%)    104.19
   ssh              914 (  0.00%)            82945 (  0.00%)     90.75
   dns              246 (  0.00%)            67130 (  0.00%)    272.89
   bgp               89 (  0.00%)            24245 (  0.00%)    272.42
   other          45542 (  0.03%)         61889935 (  0.16%)   1358.96
  udp6            43970 (  0.03%)         14492282 (  0.04%)    329.59
   dns            43370 (  0.03%)         14403678 (  0.04%)    332.11
   quake              2 (  0.00%)              208 (  0.00%)    104.00
   other            598 (  0.00%)            88396 (  0.00%)    147.82
  icmp6           19568 (  0.01%)          3236893 (  0.01%)    165.42
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            341 (  0.00%)           331280 (  0.00%)    971.50


tcpdump file: 201106011400.dump.gz (2119.60 MB)