Traffic Trace Info


DumpFile: 201107151400.dump
FileSize: 4141.91MB
Id: 201107151400
StartTime: Fri Jul 15 14:00:00 2011
EndTime: Fri Jul 15 14:15:01 2011
TotalTime: 900.21 seconds
TotalCapSize: -837.79MB CapLen: 96 bytes
# of packets: 57912843 (33661.64MB)
AvgRate: 313.68Mbps stddev:44.56M

IP flow (unique src/dst pair) Information

# of flows: 1069342 (avg. 54.16 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 2.8% 2.4% 2.1% 1.7% 1.6% 1.5% 1.5% 1.5% 1.3%

IP address Information

# of IPv4 addresses: 477168
Top 10 bandwidth usage (bytes/total in %):
13.8% 10.6% 7.4% 5.6% 4.9% 4.1% 3.7% 3.2% 2.8% 2.4%
# of IPv6 addresses: 4120
Top 10 bandwidth usage (bytes/total in %):
70.8% 31.2% 26.2% 16.2% 8.6% 4.5% 2.2% 2.2% 1.7% 1.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   18487536
 [   64-  127]:   14159316
 [  128-  255]:    1631966
 [  256-  511]:     903152
 [  512- 1023]:    1139517
 [ 1024- 2047]:   21591356


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         57912843 (100.00%)      35296786147 (100.00%)    609.48
 ip            57348942 ( 99.03%)      34955763240 ( 99.03%)    609.53
  tcp          50386212 ( 87.00%)      31737229850 ( 89.92%)    629.88
   http(s)     15019784 ( 25.94%)      19983895580 ( 56.62%)   1330.50
   http(c)     10621510 ( 18.34%)       2358724540 (  6.68%)    222.07
   squid         140330 (  0.24%)         85551739 (  0.24%)    609.65
   smtp          180064 (  0.31%)         93494490 (  0.26%)    519.23
   ftp            71653 (  0.12%)         41768060 (  0.12%)    582.92
   pop3           16844 (  0.03%)          2628539 (  0.01%)    156.05
   imap            3580 (  0.01%)          1200721 (  0.00%)    335.40
   telnet           909 (  0.00%)           100847 (  0.00%)    110.94
   ssh           218629 (  0.38%)         45627366 (  0.13%)    208.70
   dns            27482 (  0.05%)          2516676 (  0.01%)     91.58
   bgp              574 (  0.00%)           114732 (  0.00%)    199.88
   napster         1712 (  0.00%)           121817 (  0.00%)     71.15
   realaud          175 (  0.00%)            12265 (  0.00%)     70.09
   rtsp           74740 (  0.13%)        105669972 (  0.30%)   1413.83
   icecast         9340 (  0.02%)           823409 (  0.00%)     88.16
   hotline          181 (  0.00%)            11783 (  0.00%)     65.10
   other       23998705 ( 41.44%)       9014967314 ( 25.54%)    375.64
  udp           5343422 (  9.23%)       2063106432 (  5.85%)    386.10
   dns           759519 (  1.31%)        174801888 (  0.50%)    230.15
   realaud           24 (  0.00%)             4399 (  0.00%)    183.29
   halflif           97 (  0.00%)             9875 (  0.00%)    101.80
   starcra           63 (  0.00%)             7459 (  0.00%)    118.40
   everque          738 (  0.00%)           251114 (  0.00%)    340.26
   unreal            37 (  0.00%)             5478 (  0.00%)    148.05
   quake           1745 (  0.00%)           138381 (  0.00%)     79.30
   cuseeme            8 (  0.00%)              796 (  0.00%)     99.50
   other        4581041 (  7.91%)       1887829316 (  5.35%)    412.10
  icmp           455457 (  0.79%)         80757000 (  0.23%)    177.31
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec            9071 (  0.02%)          2092922 (  0.01%)    230.73
  ip6           1118317 (  1.93%)       1064274065 (  3.02%)    951.67
  other           36278 (  0.06%)          8283701 (  0.02%)    228.34
  frag             1095 (  0.00%)          1015756 (  0.00%)    927.63
 ip6             563901 (  0.97%)        341022907 (  0.97%)    604.76
  tcp6           488371 (  0.84%)        319105869 (  0.90%)    653.41
   http(s)        28971 (  0.05%)         33921437 (  0.10%)   1170.88
   http(c)        89660 (  0.15%)          7809344 (  0.02%)     87.10
   squid             12 (  0.00%)             1016 (  0.00%)     84.67
   smtp             256 (  0.00%)            90195 (  0.00%)    352.32
   ftp               17 (  0.00%)             1605 (  0.00%)     94.41
   dns              564 (  0.00%)           158695 (  0.00%)    281.37
   bgp               89 (  0.00%)            15716 (  0.00%)    176.58
   other         368802 (  0.64%)        277107861 (  0.79%)    751.37
  udp6            49865 (  0.09%)         15634573 (  0.04%)    313.54
   dns            44593 (  0.08%)         14713526 (  0.04%)    329.95
   unreal             1 (  0.00%)              108 (  0.00%)    108.00
   other           5271 (  0.01%)           920939 (  0.00%)    174.72
  icmp6           21586 (  0.04%)          3281420 (  0.01%)    152.02
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           4049 (  0.01%)          2996965 (  0.01%)    740.17


tcpdump file: 201107151400.dump.gz (1457.47 MB)