Traffic Trace Info


DumpFile: 201107011400.dump
FileSize: 3474.23MB
Id: 201107011400
StartTime: Fri Jul 1 14:00:01 2011
EndTime: Fri Jul 1 14:15:00 2011
TotalTime: 899.27 seconds
TotalCapSize: -1370.85MB CapLen: 96 bytes
# of packets: 49089777 (31201.29MB)
AvgRate: 291.00Mbps stddev:41.91M

IP flow (unique src/dst pair) Information

# of flows: 1162662 (avg. 42.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.9% 6.0% 1.8% 1.6% 1.5% 1.4% 1.1% 1.1% 1.1% 0.9%

IP address Information

# of IPv4 addresses: 554991
Top 10 bandwidth usage (bytes/total in %):
15.1% 9.1% 7.7% 6.9% 6.1% 3.6% 3.4% 2.8% 2.6% 2.3%
# of IPv6 addresses: 4079
Top 10 bandwidth usage (bytes/total in %):
36.2% 31.6% 20.6% 14.1% 14.1% 10.8% 9.7% 4.0% 4.0% 4.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   15245464
 [   64-  127]:   10635476
 [  128-  255]:    1079724
 [  256-  511]:     853045
 [  512- 1023]:     967414
 [ 1024- 2047]:   20308654


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         49089777 (100.00%)      32716918796 (100.00%)    666.47
 ip            48699939 ( 99.21%)      32513511590 ( 99.38%)    667.63
  tcp          43043264 ( 87.68%)      29869917909 ( 91.30%)    693.95
   http(s)     15281044 ( 31.13%)      18831736607 ( 57.56%)   1232.36
   http(c)     13340971 ( 27.18%)       4515930930 ( 13.80%)    338.50
   squid         184959 (  0.38%)        118594109 (  0.36%)    641.19
   smtp          194426 (  0.40%)         87124897 (  0.27%)    448.11
   ftp            72586 (  0.15%)         41025850 (  0.13%)    565.20
   pop3           14158 (  0.03%)          2803418 (  0.01%)    198.01
   imap            6891 (  0.01%)          3260903 (  0.01%)    473.21
   telnet           408 (  0.00%)            63795 (  0.00%)    156.36
   ssh            73817 (  0.15%)         19893097 (  0.06%)    269.49
   dns            25719 (  0.05%)          2429325 (  0.01%)     94.46
   bgp              537 (  0.00%)            83988 (  0.00%)    156.40
   napster          233 (  0.00%)            20359 (  0.00%)     87.38
   realaud          311 (  0.00%)            37217 (  0.00%)    119.67
   rtsp           15371 (  0.03%)         12436335 (  0.04%)    809.08
   icecast        25418 (  0.05%)          5512181 (  0.02%)    216.86
   hotline           74 (  0.00%)             4718 (  0.00%)     63.76
   other       13806341 ( 28.12%)       6228960180 ( 19.04%)    451.17
  udp           4614576 (  9.40%)       2230896214 (  6.82%)    483.45
   dns           722758 (  1.47%)        167961268 (  0.51%)    232.39
   realaud           37 (  0.00%)             7411 (  0.00%)    200.30
   halflif          448 (  0.00%)            28774 (  0.00%)     64.23
   starcra           40 (  0.00%)             5569 (  0.00%)    139.22
   everque          223 (  0.00%)            40211 (  0.00%)    180.32
   unreal            35 (  0.00%)             5309 (  0.00%)    151.69
   quake           1772 (  0.00%)           141212 (  0.00%)     79.69
   cuseeme            7 (  0.00%)             1170 (  0.00%)    167.14
   other        3889001 (  7.92%)       2062639601 (  6.30%)    530.38
  icmp           450399 (  0.92%)         78957357 (  0.24%)    175.31
  ipip              184 (  0.00%)            19160 (  0.00%)    104.13
  ipsec            9055 (  0.02%)          2093818 (  0.01%)    231.23
  ip6            560151 (  1.14%)        324284748 (  0.99%)    578.92
  other           22310 (  0.05%)          7342384 (  0.02%)    329.11
  frag             1379 (  0.00%)          1257927 (  0.00%)    912.20
 ip6             389836 (  0.79%)        203407086 (  0.62%)    521.78
  tcp6           304312 (  0.62%)        175648030 (  0.54%)    577.20
   http(s)        57176 (  0.12%)         69928542 (  0.21%)   1223.04
   http(c)       167343 (  0.34%)         14586410 (  0.04%)     87.16
   squid            113 (  0.00%)             9494 (  0.00%)     84.02
   smtp             365 (  0.00%)            93693 (  0.00%)    256.69
   ftp              146 (  0.00%)            15487 (  0.00%)    106.08
   dns              384 (  0.00%)            88655 (  0.00%)    230.87
   bgp               94 (  0.00%)            22480 (  0.00%)    239.15
   other          78691 (  0.16%)         90903269 (  0.28%)   1155.19
  udp6            52634 (  0.11%)         16989549 (  0.05%)    322.79
   dns            46010 (  0.09%)         14602203 (  0.04%)    317.37
   halflif            2 (  0.00%)              214 (  0.00%)    107.00
   starcra            1 (  0.00%)              107 (  0.00%)    107.00
   everque            1 (  0.00%)              123 (  0.00%)    123.00
   other           6620 (  0.01%)          2386902 (  0.01%)    360.56
  icmp6           22832 (  0.05%)          3498836 (  0.01%)    153.24
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6          10028 (  0.02%)          7266591 (  0.02%)    724.63


tcpdump file: 201107011400.dump.gz (1189.07 MB)