Traffic Trace Info


DumpFile: 201107111400.dump
FileSize: 3497.08MB
Id: 201107111400
StartTime: Mon Jul 11 14:00:00 2011
EndTime: Mon Jul 11 14:15:00 2011
TotalTime: 900.38 seconds
TotalCapSize: -1346.16MB CapLen: 96 bytes
# of packets: 48969334 (28724.86MB)
AvgRate: 267.62Mbps stddev:27.27M

IP flow (unique src/dst pair) Information

# of flows: 1315490 (avg. 37.23 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.7% 1.8% 1.6% 1.5% 1.3% 1.2% 1.1% 1.0% 0.9%

IP address Information

# of IPv4 addresses: 621279
Top 10 bandwidth usage (bytes/total in %):
9.5% 5.6% 5.2% 5.1% 4.0% 3.6% 3.3% 3.1% 2.9% 2.9%
# of IPv6 addresses: 3959
Top 10 bandwidth usage (bytes/total in %):
33.4% 14.2% 13.9% 11.0% 10.5% 9.7% 9.1% 7.3% 6.4% 6.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   13493872
 [   64-  127]:   13215593
 [  128-  255]:    1768138
 [  256-  511]:    1115268
 [  512- 1023]:    1074449
 [ 1024- 2047]:   18302014


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         48969334 (100.00%)      30120203671 (100.00%)    615.08
 ip            48543629 ( 99.13%)      29932925797 ( 99.38%)    616.62
  tcp          40703486 ( 83.12%)      25817210645 ( 85.71%)    634.28
   http(s)     14834574 ( 30.29%)      19699483720 ( 65.40%)   1327.94
   http(c)     12069947 ( 24.65%)       2124894058 (  7.05%)    176.05
   squid         148961 (  0.30%)        122022197 (  0.41%)    819.16
   smtp          199940 (  0.41%)        116448364 (  0.39%)    582.42
   ftp            65499 (  0.13%)         42569635 (  0.14%)    649.93
   pop3           15064 (  0.03%)          5563213 (  0.02%)    369.31
   imap            6683 (  0.01%)          3581469 (  0.01%)    535.91
   telnet           933 (  0.00%)            98262 (  0.00%)    105.32
   ssh            69080 (  0.14%)         16797813 (  0.06%)    243.16
   dns            25406 (  0.05%)          2287869 (  0.01%)     90.05
   bgp              557 (  0.00%)           116913 (  0.00%)    209.90
   napster         2989 (  0.01%)           194455 (  0.00%)     65.06
   realaud         1732 (  0.00%)           110597 (  0.00%)     63.86
   rtsp            8042 (  0.02%)          9678327 (  0.03%)   1203.47
   icecast        23837 (  0.05%)         15918181 (  0.05%)    667.79
   hotline          100 (  0.00%)             6256 (  0.00%)     62.56
   other       13230139 ( 27.02%)       3657439136 ( 12.14%)    276.45
  udp           6308568 ( 12.88%)       3201676076 ( 10.63%)    507.51
   dns           736809 (  1.50%)        170717937 (  0.57%)    231.70
   realaud           19 (  0.00%)             2525 (  0.00%)    132.89
   halflif          886 (  0.00%)            54654 (  0.00%)     61.69
   starcra           47 (  0.00%)             7206 (  0.00%)    153.32
   everque          303 (  0.00%)            55538 (  0.00%)    183.29
   unreal            45 (  0.00%)             7932 (  0.00%)    176.27
   quake           1759 (  0.00%)           145755 (  0.00%)     82.86
   cuseeme            6 (  0.00%)             1148 (  0.00%)    191.33
   other        5568592 ( 11.37%)       3030628847 ( 10.06%)    544.24
  icmp           402451 (  0.82%)         61709350 (  0.20%)    153.33
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec            9368 (  0.02%)          2310048 (  0.01%)    246.59
  ip6           1102865 (  2.25%)        844486933 (  2.80%)    765.72
  other           16706 (  0.03%)          5513475 (  0.02%)    330.03
  frag             2462 (  0.01%)          2106285 (  0.01%)    855.52
 ip6             425705 (  0.87%)        187277874 (  0.62%)    439.92
  tcp6           331375 (  0.68%)        153082242 (  0.51%)    461.96
   http(s)        45526 (  0.09%)         52800825 (  0.18%)   1159.79
   http(c)       226411 (  0.46%)         19700210 (  0.07%)     87.01
   smtp             269 (  0.00%)            89108 (  0.00%)    331.26
   ftp               17 (  0.00%)             1605 (  0.00%)     94.41
   dns              338 (  0.00%)            75314 (  0.00%)    222.82
   bgp               93 (  0.00%)            15472 (  0.00%)    166.37
   other          58721 (  0.12%)         80399708 (  0.27%)   1369.18
  udp6            55903 (  0.11%)         17346055 (  0.06%)    310.29
   dns            49739 (  0.10%)         15367842 (  0.05%)    308.97
   realaud            1 (  0.00%)              110 (  0.00%)    110.00
   everque            1 (  0.00%)              107 (  0.00%)    107.00
   quake              1 (  0.00%)              105 (  0.00%)    105.00
   other           6161 (  0.01%)          1977891 (  0.01%)    321.03
  icmp6           19175 (  0.04%)          3263492 (  0.01%)    170.20
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6          19221 (  0.04%)         13581869 (  0.05%)    706.62


tcpdump file: 201107111400.dump.gz (1236.12 MB)