Traffic Trace Info


DumpFile: 201106061400.dump
FileSize: 7263.50MB
Id: 201106061400
StartTime: Mon Jun 6 14:00:01 2011
EndTime: Mon Jun 6 14:12:04 2011
TotalTime: 723.07 seconds
TotalCapSize: 1366.58MB CapLen: 96 bytes
# of packets: 118024919 (31989.09MB)
AvgRate: 372.60Mbps stddev:44.57M

IP flow (unique src/dst pair) Information

# of flows: 882527 (avg. 133.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 5.3% 4.1% 3.3% 2.1% 1.9% 1.4% 1.1% 1.1% 1.1%

IP address Information

# of IPv4 addresses: 477272
Top 10 bandwidth usage (bytes/total in %):
21.5% 13.8% 8.2% 5.3% 5.3% 4.6% 4.6% 4.3% 4.2% 3.4%
# of IPv6 addresses: 3247
Top 10 bandwidth usage (bytes/total in %):
83.6% 83.6% 1.5% 1.5% 1.3% 1.0% 1.0% 1.0% 0.9% 0.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   86178957
 [   64-  127]:   10166896
 [  128-  255]:    2039488
 [  256-  511]:     868857
 [  512- 1023]:     983426
 [ 1024- 2047]:   17787295


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total        118024919 (100.00%)      33542995564 (100.00%)    284.20
 ip           117879841 ( 99.88%)      33405682482 ( 99.59%)    283.39
  tcp          33358262 ( 28.26%)      25732438985 ( 76.71%)    771.40
   http(s)     15321496 ( 12.98%)      20596377516 ( 61.40%)   1344.28
   http(c)     10296956 (  8.72%)       2548021151 (  7.60%)    247.45
   squid          73976 (  0.06%)         53071591 (  0.16%)    717.42
   smtp          202243 (  0.17%)        141907395 (  0.42%)    701.67
   ftp            29408 (  0.02%)         16558732 (  0.05%)    563.07
   pop3          433965 (  0.37%)         31480402 (  0.09%)     72.54
   imap            3063 (  0.00%)           804732 (  0.00%)    262.73
   telnet           183 (  0.00%)            27583 (  0.00%)    150.73
   ssh           406568 (  0.34%)        106968226 (  0.32%)    263.10
   dns            27428 (  0.02%)          2218737 (  0.01%)     80.89
   bgp              517 (  0.00%)            92519 (  0.00%)    178.95
   napster         1489 (  0.00%)           131667 (  0.00%)     88.43
   realaud          114 (  0.00%)             8089 (  0.00%)     70.96
   rtsp            6977 (  0.01%)          8326192 (  0.02%)   1193.38
   icecast        14492 (  0.01%)          4861113 (  0.01%)    335.43
   hotline           24 (  0.00%)             1520 (  0.00%)     63.33
   other        6539362 (  5.54%)       2221581760 (  6.62%)    339.72
  udp          82150685 ( 69.60%)       6918771790 ( 20.63%)     84.22
   dns          6537445 (  5.54%)        478729257 (  1.43%)     73.23
   realaud          178 (  0.00%)            82801 (  0.00%)    465.17
   halflif           76 (  0.00%)             5780 (  0.00%)     76.05
   starcra           32 (  0.00%)             5214 (  0.00%)    162.94
   everque          481 (  0.00%)            71215 (  0.00%)    148.06
   unreal            34 (  0.00%)             5643 (  0.00%)    165.97
   quake           1749 (  0.00%)           140749 (  0.00%)     80.47
   cuseeme            6 (  0.00%)              587 (  0.00%)     97.83
   other       75610159 ( 64.06%)       6439594052 ( 19.20%)     85.17
  icmp           515470 (  0.44%)         75058619 (  0.22%)    145.61
  ipip              147 (  0.00%)            15306 (  0.00%)    104.12
  ipsec             373 (  0.00%)            85246 (  0.00%)    228.54
  ip6           1828083 (  1.55%)        673659608 (  2.01%)    368.51
  other           26821 (  0.02%)          5652928 (  0.02%)    210.76
  frag             1307 (  0.00%)           981074 (  0.00%)    750.63
 ip6             145078 (  0.12%)        137313082 (  0.41%)    946.48
  tcp6            96448 (  0.08%)        124139371 (  0.37%)   1287.11
   http(s)         8023 (  0.01%)          7782785 (  0.02%)    970.06
   http(c)         8969 (  0.01%)           980088 (  0.00%)    109.28
   smtp             178 (  0.00%)            46636 (  0.00%)    262.00
   ftp               64 (  0.00%)             5671 (  0.00%)     88.61
   dns              238 (  0.00%)            66796 (  0.00%)    280.66
   bgp               72 (  0.00%)            13217 (  0.00%)    183.57
   other          78904 (  0.07%)        115244178 (  0.34%)   1460.56
  udp6            32443 (  0.03%)         10153573 (  0.03%)    312.97
   dns            31877 (  0.03%)         10059961 (  0.03%)    315.59
   everque            1 (  0.00%)               98 (  0.00%)     98.00
   other            565 (  0.00%)            93514 (  0.00%)    165.51
  icmp6           15731 (  0.01%)          2595599 (  0.01%)    165.00
  pim6               24 (  0.00%)             3264 (  0.00%)    136.00
  other6            432 (  0.00%)           421275 (  0.00%)    975.17


tcpdump file: 201106061400.dump.gz (1854.89 MB)