Traffic Trace Info


DumpFile: 201106281400.dump
FileSize: 3831.18MB
Id: 201106281400
StartTime: Tue Jun 28 14:00:00 2011
EndTime: Tue Jun 28 14:15:01 2011
TotalTime: 900.59 seconds
TotalCapSize: -1077.19MB CapLen: 96 bytes
# of packets: 53237381 (29776.55MB)
AvgRate: 277.35Mbps stddev:41.06M

IP flow (unique src/dst pair) Information

# of flows: 1116873 (avg. 47.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 4.8% 1.8% 1.6% 1.5% 1.4% 1.2% 1.1% 0.9% 0.9%

IP address Information

# of IPv4 addresses: 492622
Top 10 bandwidth usage (bytes/total in %):
9.8% 8.5% 6.5% 5.5% 5.0% 3.2% 3.2% 2.9% 2.1% 1.9%
# of IPv6 addresses: 4134
Top 10 bandwidth usage (bytes/total in %):
57.1% 24.9% 16.7% 4.8% 4.7% 3.3% 3.3% 3.0% 3.0% 2.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   17836360
 [   64-  127]:   13028615
 [  128-  255]:    1358787
 [  256-  511]:     974678
 [  512- 1023]:    1105627
 [ 1024- 2047]:   18933314


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         53237381 (100.00%)      31222980783 (100.00%)    586.49
 ip            52938766 ( 99.44%)      31089044035 ( 99.57%)    587.26
  tcp          46569696 ( 87.48%)      27584036668 ( 88.35%)    592.32
   http(s)     16554717 ( 31.10%)      22340200460 ( 71.55%)   1349.48
   http(c)     11206965 ( 21.05%)       1801991755 (  5.77%)    160.79
   squid         162438 (  0.31%)        108658292 (  0.35%)    668.92
   smtp          185642 (  0.35%)         75126684 (  0.24%)    404.69
   nntp               4 (  0.00%)              244 (  0.00%)     61.00
   ftp            53262 (  0.10%)         39408155 (  0.13%)    739.89
   pop3           70436 (  0.13%)          8332401 (  0.03%)    118.30
   imap            8882 (  0.02%)          4036911 (  0.01%)    454.50
   telnet           457 (  0.00%)            66379 (  0.00%)    145.25
   ssh            88969 (  0.17%)         99848085 (  0.32%)   1122.28
   dns            21666 (  0.04%)          1996474 (  0.01%)     92.15
   bgp              588 (  0.00%)           117865 (  0.00%)    200.45
   napster          527 (  0.00%)            34939 (  0.00%)     66.30
   realaud          206 (  0.00%)            35711 (  0.00%)    173.35
   rtsp            4566 (  0.01%)          2524108 (  0.01%)    552.81
   icecast        33670 (  0.06%)         23647783 (  0.08%)    702.34
   hotline           82 (  0.00%)             5152 (  0.00%)     62.83
   other       18176618 ( 34.14%)       3078005210 (  9.86%)    169.34
  udp           4764280 (  8.95%)       2325466228 (  7.45%)    488.10
   dns           742451 (  1.39%)        165827287 (  0.53%)    223.35
   realaud            9 (  0.00%)             1516 (  0.00%)    168.44
   halflif          238 (  0.00%)            64285 (  0.00%)    270.11
   starcra          236 (  0.00%)            19275 (  0.00%)     81.67
   everque       131951 (  0.25%)         81358436 (  0.26%)    616.58
   unreal            40 (  0.00%)             7925 (  0.00%)    198.12
   quake           1208 (  0.00%)           100034 (  0.00%)     82.81
   cuseeme            6 (  0.00%)              806 (  0.00%)    134.33
   other        3852789 (  7.24%)       2075360466 (  6.65%)    538.66
  icmp           523883 (  0.98%)         87364526 (  0.28%)    166.76
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec           33771 (  0.06%)         27602386 (  0.09%)    817.34
  ip6           1027618 (  1.93%)       1060366864 (  3.40%)   1031.87
  other           19333 (  0.04%)          4188093 (  0.01%)    216.63
  frag            91847 (  0.17%)         71801194 (  0.23%)    781.75
 ip6             298615 (  0.56%)        133936748 (  0.43%)    448.53
  tcp6           226917 (  0.43%)        112681634 (  0.36%)    496.58
   http(s)        45716 (  0.09%)         55522724 (  0.18%)   1214.51
   http(c)       117751 (  0.22%)         10194082 (  0.03%)     86.57
   smtp             278 (  0.00%)           179351 (  0.00%)    645.15
   ftp               35 (  0.00%)             3153 (  0.00%)     90.09
   pop3              10 (  0.00%)              907 (  0.00%)     90.70
   dns              329 (  0.00%)            70997 (  0.00%)    215.80
   bgp               97 (  0.00%)            17229 (  0.00%)    177.62
   other          62701 (  0.12%)         46693191 (  0.15%)    744.70
  udp6            49979 (  0.09%)         16355683 (  0.05%)    327.25
   dns            45524 (  0.09%)         14330937 (  0.05%)    314.80
   other           4455 (  0.01%)          2024746 (  0.01%)    454.49
  icmp6           19512 (  0.04%)          3297374 (  0.01%)    168.99
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           2177 (  0.00%)          1597977 (  0.01%)    734.03


tcpdump file: 201106281400.dump.gz (1356.64 MB)