Traffic Trace Info


DumpFile: 201106141400.dump
FileSize: 3245.77MB
Id: 201106141400
StartTime: Tue Jun 14 14:00:01 2011
EndTime: Tue Jun 14 14:15:00 2011
TotalTime: 899.90 seconds
TotalCapSize: -1535.86MB CapLen: 96 bytes
# of packets: 44932122 (26081.68MB)
AvgRate: 243.13Mbps stddev:37.43M

IP flow (unique src/dst pair) Information

# of flows: 1155760 (avg. 38.88 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.4% 1.3% 1.3% 1.2% 1.2% 0.9% 0.8% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 613044
Top 10 bandwidth usage (bytes/total in %):
10.5% 10.5% 6.9% 4.7% 4.7% 2.8% 2.2% 1.9% 1.6% 1.6%
# of IPv6 addresses: 4133
Top 10 bandwidth usage (bytes/total in %):
59.7% 27.9% 16.3% 15.7% 6.2% 4.7% 4.7% 4.4% 4.4% 3.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   12070419
 [   64-  127]:   12142269
 [  128-  255]:    2204667
 [  256-  511]:     947872
 [  512- 1023]:    1015875
 [ 1024- 2047]:   16551020


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         44932122 (100.00%)      27348627534 (100.00%)    608.67
 ip            44553210 ( 99.16%)      27006040103 ( 98.75%)    606.15
  tcp          36656361 ( 81.58%)      23312007529 ( 85.24%)    635.96
   http(s)     13036747 ( 29.01%)      17284817084 ( 63.20%)   1325.85
   http(c)     11301810 ( 25.15%)       3332508716 ( 12.19%)    294.87
   squid         159643 (  0.36%)         74916325 (  0.27%)    469.27
   smtp          386082 (  0.86%)        364390894 (  1.33%)    943.82
   nntp              20 (  0.00%)             1218 (  0.00%)     60.90
   ftp             9633 (  0.02%)           910688 (  0.00%)     94.54
   pop3           51414 (  0.11%)          4406800 (  0.02%)     85.71
   imap            6635 (  0.01%)          4940734 (  0.02%)    744.65
   telnet          2087 (  0.00%)           152422 (  0.00%)     73.03
   ssh           764090 (  1.70%)        116991919 (  0.43%)    153.11
   dns            22468 (  0.05%)          2093107 (  0.01%)     93.16
   bgp              569 (  0.00%)           104390 (  0.00%)    183.46
   napster          613 (  0.00%)            41298 (  0.00%)     67.37
   realaud          237 (  0.00%)            19835 (  0.00%)     83.69
   rtsp           13133 (  0.03%)         14364906 (  0.05%)   1093.80
   icecast         2251 (  0.01%)           491472 (  0.00%)    218.33
   hotline          151 (  0.00%)            10167 (  0.00%)     67.33
   other       10898777 ( 24.26%)       2110845494 (  7.72%)    193.68
  udp           5168672 ( 11.50%)       2690647434 (  9.84%)    520.57
   dns           813999 (  1.81%)        169593931 (  0.62%)    208.35
   realaud            7 (  0.00%)              935 (  0.00%)    133.57
   halflif          151 (  0.00%)            10679 (  0.00%)     70.72
   starcra           35 (  0.00%)             4978 (  0.00%)    142.23
   everque          486 (  0.00%)            94659 (  0.00%)    194.77
   unreal            12 (  0.00%)             1402 (  0.00%)    116.83
   quake           1280 (  0.00%)           104253 (  0.00%)     81.45
   cuseeme            3 (  0.00%)              233 (  0.00%)     77.67
   other        4352504 (  9.69%)       2520728456 (  9.22%)    579.14
  icmp           664649 (  1.48%)         84430470 (  0.31%)    127.03
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec             889 (  0.00%)           358558 (  0.00%)    403.33
  ip6           1886460 (  4.20%)        840589322 (  3.07%)    445.59
  other          175994 (  0.39%)         77987520 (  0.29%)    443.13
  frag              907 (  0.00%)           920716 (  0.00%)   1015.12
 ip6             378912 (  0.84%)        342587431 (  1.25%)    904.13
  tcp6           265050 (  0.59%)        299154120 (  1.09%)   1128.67
   http(s)        29168 (  0.06%)         34133636 (  0.12%)   1170.24
   http(c)        32138 (  0.07%)          2908508 (  0.01%)     90.50
   squid             11 (  0.00%)             4054 (  0.00%)    368.55
   smtp             123 (  0.00%)            35636 (  0.00%)    289.72
   ftp               93 (  0.00%)             8258 (  0.00%)     88.80
   dns              299 (  0.00%)            61980 (  0.00%)    207.29
   bgp               95 (  0.00%)            20766 (  0.00%)    218.59
   other         203123 (  0.45%)        261981282 (  0.96%)   1289.77
  udp6            51044 (  0.11%)         17920626 (  0.07%)    351.08
   dns            46035 (  0.10%)         15258006 (  0.06%)    331.44
   realaud            1 (  0.00%)              108 (  0.00%)    108.00
   starcra            1 (  0.00%)              118 (  0.00%)    118.00
   unreal             1 (  0.00%)              110 (  0.00%)    110.00
   quake              1 (  0.00%)              101 (  0.00%)    101.00
   cuseeme            1 (  0.00%)               94 (  0.00%)     94.00
   other           5004 (  0.01%)          2662089 (  0.01%)    531.99
  icmp6           33338 (  0.07%)          4696397 (  0.02%)    140.87
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6          29450 (  0.07%)         20812208 (  0.08%)    706.70


tcpdump file: 201106141400.dump.gz (1147.83 MB)