Traffic Trace Info


DumpFile: 201107231400.dump
FileSize: 3224.71MB
Id: 201107231400
StartTime: Sat Jul 23 14:00:00 2011
EndTime: Sat Jul 23 14:15:00 2011
TotalTime: 899.39 seconds
TotalCapSize: -1565.03MB CapLen: 96 bytes
# of packets: 45464685 (28935.02MB)
AvgRate: 269.86Mbps stddev:41.73M

IP flow (unique src/dst pair) Information

# of flows: 1008565 (avg. 45.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.3% 2.5% 2.1% 2.0% 1.6% 1.4% 1.3% 1.2% 1.2% 1.2%

IP address Information

# of IPv4 addresses: 492779
Top 10 bandwidth usage (bytes/total in %):
12.3% 11.9% 11.2% 8.8% 6.6% 4.1% 3.3% 2.7% 2.2% 2.1%
# of IPv6 addresses: 3691
Top 10 bandwidth usage (bytes/total in %):
76.3% 72.4% 8.6% 4.8% 3.9% 3.7% 3.5% 2.1% 1.7% 1.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   13793603
 [   64-  127]:   10113801
 [  128-  255]:    1131259
 [  256-  511]:     721764
 [  512- 1023]:     878338
 [ 1024- 2047]:   18825920


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         45464685 (100.00%)      30340565737 (100.00%)    667.34
 ip            44925418 ( 98.81%)      29850077471 ( 98.38%)    664.44
  tcp          38935050 ( 85.64%)      27118218029 ( 89.38%)    696.50
   http(s)     14122810 ( 31.06%)      19062014040 ( 62.83%)   1349.73
   http(c)      8076449 ( 17.76%)       1194544774 (  3.94%)    147.90
   squid          91025 (  0.20%)         68266457 (  0.23%)    749.97
   smtp          109715 (  0.24%)         48567315 (  0.16%)    442.67
   ftp            62132 (  0.14%)         37169900 (  0.12%)    598.24
   pop3           18073 (  0.04%)          8216898 (  0.03%)    454.65
   imap            5659 (  0.01%)          5185978 (  0.02%)    916.41
   telnet           550 (  0.00%)            72283 (  0.00%)    131.42
   ssh            22291 (  0.05%)          3282122 (  0.01%)    147.24
   dns            25440 (  0.06%)          2044941 (  0.01%)     80.38
   bgp              555 (  0.00%)            99628 (  0.00%)    179.51
   napster         1329 (  0.00%)            84817 (  0.00%)     63.82
   realaud          136 (  0.00%)             9031 (  0.00%)     66.40
   rtsp           33753 (  0.07%)         34299292 (  0.11%)   1016.18
   icecast         1467 (  0.00%)           380487 (  0.00%)    259.36
   hotline           65 (  0.00%)             4420 (  0.00%)     68.00
   other       16363601 ( 35.99%)       6653975646 ( 21.93%)    406.63
  udp           4472440 (  9.84%)       1847130032 (  6.09%)    413.00
   dns           532221 (  1.17%)        122717484 (  0.40%)    230.58
   realaud           16 (  0.00%)             2590 (  0.00%)    161.88
   halflif          105 (  0.00%)             9588 (  0.00%)     91.31
   starcra           34 (  0.00%)             6022 (  0.00%)    177.12
   everque          459 (  0.00%)            71979 (  0.00%)    156.82
   unreal            40 (  0.00%)             5488 (  0.00%)    137.20
   quake           1392 (  0.00%)           118988 (  0.00%)     85.48
   cuseeme            7 (  0.00%)             1089 (  0.00%)    155.57
   other        3938100 (  8.66%)       1724158317 (  5.68%)    437.81
  icmp           453318 (  1.00%)         81508244 (  0.27%)    179.80
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec             202 (  0.00%)            29964 (  0.00%)    148.34
  ip6           1047001 (  2.30%)        797274661 (  2.63%)    761.48
  other           17222 (  0.04%)          5897271 (  0.02%)    342.43
  frag             3247 (  0.01%)          2548481 (  0.01%)    784.87
 ip6             539267 (  1.19%)        490488266 (  1.62%)    909.55
  tcp6           469378 (  1.03%)        464647823 (  1.53%)    989.92
   http(s)        10704 (  0.02%)         11460464 (  0.04%)   1070.67
   http(c)        63909 (  0.14%)          5648894 (  0.02%)     88.39
   smtp             248 (  0.00%)           144897 (  0.00%)    584.26
   ftp               17 (  0.00%)             1605 (  0.00%)     94.41
   dns              205 (  0.00%)            52910 (  0.00%)    258.10
   bgp               93 (  0.00%)            18309 (  0.00%)    196.87
   other         394202 (  0.87%)        447320744 (  1.47%)   1134.75
  udp6            43325 (  0.10%)         19479088 (  0.06%)    449.60
   dns            29217 (  0.06%)          9162655 (  0.03%)    313.61
   everque            2 (  0.00%)              612 (  0.00%)    306.00
   other          14106 (  0.03%)         10315821 (  0.03%)    731.31
  icmp6           22244 (  0.05%)          3312209 (  0.01%)    148.90
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           4290 (  0.01%)          3045066 (  0.01%)    709.81


tcpdump file: 201107231400.dump.gz (1106.39 MB)