Traffic Trace Info


DumpFile: 201106051400.dump
FileSize: 7496.35MB
Id: 201106051400
StartTime: Sun Jun 5 14:00:01 2011
EndTime: Sun Jun 5 14:15:01 2011
TotalTime: 900.70 seconds
TotalCapSize: 1480.69MB CapLen: 96 bytes
# of packets: 125806724 (30880.56MB)
AvgRate: 287.59Mbps stddev:41.67M

IP flow (unique src/dst pair) Information

# of flows: 729109 (avg. 172.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.3% 8.3% 2.5% 1.4% 1.1% 1.0% 0.9% 0.7% 0.7% 0.6%

IP address Information

# of IPv4 addresses: 414054
Top 10 bandwidth usage (bytes/total in %):
34.7% 16.7% 8.3% 8.3% 4.7% 3.7% 2.9% 2.5% 1.6% 1.5%
# of IPv6 addresses: 2941
Top 10 bandwidth usage (bytes/total in %):
57.7% 57.6% 6.7% 6.7% 4.3% 3.9% 3.9% 3.5% 2.3% 1.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   98189286
 [   64-  127]:    7532155
 [  128-  255]:    1652126
 [  256-  511]:     782033
 [  512- 1023]:     917497
 [ 1024- 2047]:   16733627


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total        125806724 (100.00%)      32380613585 (100.00%)    257.38
 ip           125706757 ( 99.92%)      32332434151 ( 99.85%)    257.21
  tcp          27949352 ( 22.22%)      23401666509 ( 72.27%)    837.29
   http(s)     14977355 ( 11.91%)      20750052951 ( 64.08%)   1385.43
   http(c)      5753179 (  4.57%)        693572314 (  2.14%)    120.55
   squid         122193 (  0.10%)         63699003 (  0.20%)    521.30
   smtp          141480 (  0.11%)        102541779 (  0.32%)    724.78
   ftp            97187 (  0.08%)         28147949 (  0.09%)    289.63
   pop3            3690 (  0.00%)           769394 (  0.00%)    208.51
   imap            4367 (  0.00%)          1433298 (  0.00%)    328.21
   telnet           566 (  0.00%)            59897 (  0.00%)    105.83
   ssh           179109 (  0.14%)         20608757 (  0.06%)    115.06
   dns            11549 (  0.01%)           906310 (  0.00%)     78.48
   bgp              604 (  0.00%)            85143 (  0.00%)    140.97
   napster           73 (  0.00%)             5269 (  0.00%)     72.18
   realaud          154 (  0.00%)            18130 (  0.00%)    117.73
   rtsp            7985 (  0.01%)          7796673 (  0.02%)    976.41
   icecast         8555 (  0.01%)           584603 (  0.00%)     68.33
   hotline           31 (  0.00%)             2261 (  0.00%)     72.94
   other        6641275 (  5.28%)       1731382778 (  5.35%)    260.70
  udp          95304606 ( 75.75%)       7894357335 ( 24.38%)     82.83
   dns           521531 (  0.41%)        104333520 (  0.32%)    200.05
   realaud            7 (  0.00%)              917 (  0.00%)    131.00
   halflif          359 (  0.00%)            24030 (  0.00%)     66.94
   starcra           24 (  0.00%)             4168 (  0.00%)    173.67
   everque          497 (  0.00%)           224085 (  0.00%)    450.88
   unreal            26 (  0.00%)             4913 (  0.00%)    188.96
   quake           1880 (  0.00%)           147220 (  0.00%)     78.31
   cuseeme            4 (  0.00%)              607 (  0.00%)    151.75
   other       94780132 ( 75.34%)       7789531455 ( 24.06%)     82.19
  icmp           384531 (  0.31%)         59251089 (  0.18%)    154.09
  ipip              184 (  0.00%)            19160 (  0.00%)    104.13
  ipsec             284 (  0.00%)            45720 (  0.00%)    160.99
  ip6           2052758 (  1.63%)        973277129 (  3.01%)    474.13
  other           15042 (  0.01%)          3817209 (  0.01%)    253.77
  frag              622 (  0.00%)           626981 (  0.00%)   1008.01
 ip6              99967 (  0.08%)         48179434 (  0.15%)    481.95
  tcp6            51681 (  0.04%)         37536923 (  0.12%)    726.32
   http(s)         2068 (  0.00%)          1812143 (  0.01%)    876.28
   http(c)        18285 (  0.01%)          1606254 (  0.00%)     87.85
   squid              3 (  0.00%)              222 (  0.00%)     74.00
   smtp             148 (  0.00%)            28217 (  0.00%)    190.66
   ftp               67 (  0.00%)             5945 (  0.00%)     88.73
   dns              202 (  0.00%)            56709 (  0.00%)    280.74
   bgp               89 (  0.00%)            15852 (  0.00%)    178.11
   other          30819 (  0.02%)         34011581 (  0.11%)   1103.59
  udp6            27867 (  0.02%)          7308513 (  0.02%)    262.26
   dns            26644 (  0.02%)          7139037 (  0.02%)    267.94
   realaud            1 (  0.00%)              105 (  0.00%)    105.00
   other           1222 (  0.00%)           169371 (  0.00%)    138.60
  icmp6           20205 (  0.02%)          3161285 (  0.01%)    156.46
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6            183 (  0.00%)           168497 (  0.00%)    920.75


tcpdump file: 201106051400.dump.gz (1815.70 MB)