Traffic Trace Info


DumpFile: 201107051400.dump
FileSize: 3305.82MB
Id: 201107051400
StartTime: Tue Jul 5 14:00:01 2011
EndTime: Tue Jul 5 14:15:01 2011
TotalTime: 899.74 seconds
TotalCapSize: -1497.85MB CapLen: 96 bytes
# of packets: 46375109 (26504.65MB)
AvgRate: 247.14Mbps stddev:46.39M

IP flow (unique src/dst pair) Information

# of flows: 1031119 (avg. 44.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.6% 1.3% 1.2% 1.1% 1.0% 0.9% 0.8% 0.8% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 469805
Top 10 bandwidth usage (bytes/total in %):
22.2% 8.9% 3.0% 2.6% 2.6% 2.2% 2.1% 2.0% 1.9% 1.7%
# of IPv6 addresses: 4152
Top 10 bandwidth usage (bytes/total in %):
31.5% 20.6% 17.2% 15.0% 12.1% 11.8% 8.2% 6.6% 6.3% 5.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   14914649
 [   64-  127]:   11345783
 [  128-  255]:    1122001
 [  256-  511]:     956268
 [  512- 1023]:    1441261
 [ 1024- 2047]:   16595147


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         46375109 (100.00%)      27792137086 (100.00%)    599.29
 ip            46025089 ( 99.25%)      27568812404 ( 99.20%)    599.00
  tcp          40801830 ( 87.98%)      25496032874 ( 91.74%)    624.87
   http(s)     14517411 ( 31.30%)      19256060900 ( 69.29%)   1326.41
   http(c)     14238257 ( 30.70%)       2606021114 (  9.38%)    183.03
   squid         241374 (  0.52%)        202630105 (  0.73%)    839.49
   smtp          183561 (  0.40%)        102730868 (  0.37%)    559.66
   ftp            40254 (  0.09%)         24870935 (  0.09%)    617.85
   pop3           22858 (  0.05%)          2041453 (  0.01%)     89.31
   imap            3987 (  0.01%)          1761306 (  0.01%)    441.76
   telnet           580 (  0.00%)            74508 (  0.00%)    128.46
   ssh            16643 (  0.04%)          2756520 (  0.01%)    165.63
   dns            60208 (  0.13%)          4502643 (  0.02%)     74.78
   bgp              555 (  0.00%)           105382 (  0.00%)    189.88
   napster          293 (  0.00%)            21796 (  0.00%)     74.39
   realaud         1007 (  0.00%)            65835 (  0.00%)     65.38
   rtsp           28639 (  0.06%)         15097158 (  0.05%)    527.15
   icecast         3495 (  0.01%)           250323 (  0.00%)     71.62
   hotline           52 (  0.00%)             3282 (  0.00%)     63.12
   other       11442656 ( 24.67%)       3277038746 ( 11.79%)    286.39
  udp           4154943 (  8.96%)       1632245924 (  5.87%)    392.84
   dns           734470 (  1.58%)        169653931 (  0.61%)    230.99
   realaud         1820 (  0.00%)           110390 (  0.00%)     60.65
   halflif          511 (  0.00%)            31975 (  0.00%)     62.57
   starcra          188 (  0.00%)            22414 (  0.00%)    119.22
   everque          792 (  0.00%)           298309 (  0.00%)    376.65
   unreal            32 (  0.00%)             5431 (  0.00%)    169.72
   quake           1809 (  0.00%)           144935 (  0.00%)     80.12
   cuseeme            7 (  0.00%)              612 (  0.00%)     87.43
   other        3415223 (  7.36%)       1461935613 (  5.26%)    428.06
  icmp           478871 (  1.03%)         94580797 (  0.34%)    197.51
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec            9074 (  0.02%)          2093836 (  0.01%)    230.75
  ip6            566296 (  1.22%)        340214059 (  1.22%)    600.77
  other           13890 (  0.03%)          3625644 (  0.01%)    261.03
  frag              582 (  0.00%)           600311 (  0.00%)   1031.46
 ip6             350020 (  0.75%)        223324682 (  0.80%)    638.03
  tcp6           273953 (  0.59%)        201626347 (  0.73%)    735.99
   http(s)        22295 (  0.05%)         24736517 (  0.09%)   1109.51
   http(c)        93634 (  0.20%)          8019355 (  0.03%)     85.65
   squid             11 (  0.00%)             1050 (  0.00%)     95.45
   smtp             180 (  0.00%)            44593 (  0.00%)    247.74
   ftp               44 (  0.00%)             4031 (  0.00%)     91.61
   dns              326 (  0.00%)            74081 (  0.00%)    227.24
   bgp               86 (  0.00%)            18879 (  0.00%)    219.52
   icecast            1 (  0.00%)               94 (  0.00%)     94.00
   other         157376 (  0.34%)        168727747 (  0.61%)   1072.13
  udp6            53293 (  0.11%)         17081628 (  0.06%)    320.52
   dns            49753 (  0.11%)         15908689 (  0.06%)    319.75
   everque            3 (  0.00%)              330 (  0.00%)    110.00
   unreal             1 (  0.00%)              133 (  0.00%)    133.00
   quake             21 (  0.00%)             1932 (  0.00%)     92.00
   cuseeme            1 (  0.00%)              104 (  0.00%)    104.00
   other           3514 (  0.01%)          1170440 (  0.00%)    333.08
  icmp6           21136 (  0.05%)          3351688 (  0.01%)    158.58
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           1608 (  0.00%)          1260939 (  0.00%)    784.17


tcpdump file: 201107051400.dump.gz (1157.74 MB)