Traffic Trace Info


DumpFile: 201107121400.dump
FileSize: 4318.51MB
Id: 201107121400
StartTime: Tue Jul 12 14:00:00 2011
EndTime: Tue Jul 12 14:15:00 2011
TotalTime: 899.96 seconds
TotalCapSize: -679.40MB CapLen: 96 bytes
# of packets: 59106806 (36159.42MB)
AvgRate: 337.03Mbps stddev:48.68M

IP flow (unique src/dst pair) Information

# of flows: 1127885 (avg. 52.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 2.5% 2.3% 2.2% 2.1% 1.8% 1.8% 1.7% 1.6% 1.6%

IP address Information

# of IPv4 addresses: 485101
Top 10 bandwidth usage (bytes/total in %):
17.9% 10.3% 4.8% 4.8% 4.6% 4.2% 3.7% 3.3% 2.8% 2.6%
# of IPv6 addresses: 4202
Top 10 bandwidth usage (bytes/total in %):
28.1% 22.7% 21.7% 15.4% 15.0% 13.9% 4.5% 4.5% 3.2% 2.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   14627250
 [   64-  127]:   17631193
 [  128-  255]:    1544137
 [  256-  511]:    1057978
 [  512- 1023]:    1150572
 [ 1024- 2047]:   23095676


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         59106806 (100.00%)      37915901148 (100.00%)    641.48
 ip            58768566 ( 99.43%)      37742420431 ( 99.54%)    642.22
  tcp          52946504 ( 89.58%)      35439736385 ( 93.47%)    669.35
   http(s)     15879850 ( 26.87%)      21567147823 ( 56.88%)   1358.15
   http(c)     12968233 ( 21.94%)       2508342819 (  6.62%)    193.42
   squid         133733 (  0.23%)         97570138 (  0.26%)    729.59
   smtp          150336 (  0.25%)         59477453 (  0.16%)    395.63
   ftp            51713 (  0.09%)         36941940 (  0.10%)    714.36
   pop3           16691 (  0.03%)          2334821 (  0.01%)    139.89
   imap            7369 (  0.01%)          6051153 (  0.02%)    821.16
   telnet           885 (  0.00%)            93088 (  0.00%)    105.18
   ssh          1824598 (  3.09%)        332604904 (  0.88%)    182.29
   dns            23491 (  0.04%)          2265281 (  0.01%)     96.43
   bgp              586 (  0.00%)           118588 (  0.00%)    202.37
   napster         2263 (  0.00%)           143428 (  0.00%)     63.38
   realaud          198 (  0.00%)            14293 (  0.00%)     72.19
   rtsp             181 (  0.00%)            69958 (  0.00%)    386.51
   icecast         9814 (  0.02%)          8073271 (  0.02%)    822.63
   hotline           98 (  0.00%)             6350 (  0.00%)     64.80
   other       21876465 ( 37.01%)      10818481077 ( 28.53%)    494.53
  udp           4461000 (  7.55%)       1525177106 (  4.02%)    341.89
   dns           726407 (  1.23%)        166792850 (  0.44%)    229.61
   realaud         1241 (  0.00%)            81635 (  0.00%)     65.78
   halflif          105 (  0.00%)             8305 (  0.00%)     79.10
   starcra           24 (  0.00%)             4562 (  0.00%)    190.08
   everque         1662 (  0.00%)           894180 (  0.00%)    538.01
   unreal            65 (  0.00%)            12858 (  0.00%)    197.82
   quake           1809 (  0.00%)           147457 (  0.00%)     81.51
   cuseeme            5 (  0.00%)              600 (  0.00%)    120.00
   other        3729586 (  6.31%)       1357181567 (  3.58%)    363.90
  icmp           468482 (  0.79%)         93442913 (  0.25%)    199.46
  ipip              184 (  0.00%)            19160 (  0.00%)    104.13
  ipsec            9234 (  0.02%)          2158828 (  0.01%)    233.79
  ip6            864719 (  1.46%)        675399260 (  1.78%)    781.06
  other           18443 (  0.03%)          6486779 (  0.02%)    351.72
  frag              705 (  0.00%)           740656 (  0.00%)   1050.58
 ip6             338240 (  0.57%)        173480717 (  0.46%)    512.89
  tcp6           267063 (  0.45%)        153777059 (  0.41%)    575.81
   http(s)        23775 (  0.04%)         22696920 (  0.06%)    954.65
   http(c)        80194 (  0.14%)          7039949 (  0.02%)     87.79
   smtp             233 (  0.00%)           100460 (  0.00%)    431.16
   ftp               70 (  0.00%)             9092 (  0.00%)    129.89
   dns              337 (  0.00%)            76286 (  0.00%)    226.37
   bgp               97 (  0.00%)            16401 (  0.00%)    169.08
   other         162357 (  0.27%)        123837951 (  0.33%)    762.75
  udp6            51394 (  0.09%)         16069488 (  0.04%)    312.67
   dns            48718 (  0.08%)         14887899 (  0.04%)    305.59
   realaud            1 (  0.00%)              112 (  0.00%)    112.00
   quake              1 (  0.00%)              110 (  0.00%)    110.00
   other           2674 (  0.00%)          1181367 (  0.00%)    441.80
  icmp6           19289 (  0.03%)          3187800 (  0.01%)    165.27
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            464 (  0.00%)           442290 (  0.00%)    953.21


tcpdump file: 201107121400.dump.gz (1466.65 MB)