Traffic Trace Info


DumpFile: 201108061400.dump
FileSize: 3841.37MB
Id: 201108061400
StartTime: Sat Aug 6 14:00:01 2011
EndTime: Sat Aug 6 14:15:00 2011
TotalTime: 899.41 seconds
TotalCapSize: -1078.06MB CapLen: 96 bytes
# of packets: 53963982 (34622.49MB)
AvgRate: 322.90Mbps stddev:47.48M

IP flow (unique src/dst pair) Information

# of flows: 1131775 (avg. 47.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.5% 3.8% 1.8% 1.3% 1.3% 1.3% 1.2% 1.0% 1.0% 1.0%

IP address Information

# of IPv4 addresses: 548524
Top 10 bandwidth usage (bytes/total in %):
19.7% 10.3% 7.7% 7.3% 4.7% 4.1% 4.0% 3.2% 3.0% 3.0%
# of IPv6 addresses: 3902
Top 10 bandwidth usage (bytes/total in %):
43.1% 42.1% 41.8% 26.7% 15.0% 3.4% 2.7% 1.2% 1.2% 1.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   17039797
 [   64-  127]:   11767885
 [  128-  255]:    1022915
 [  256-  511]:     708890
 [  512- 1023]:     889597
 [ 1024- 2047]:   22534898


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         53963982 (100.00%)      36304315015 (100.00%)    672.75
 ip            53663902 ( 99.44%)      36021687976 ( 99.22%)    671.25
  tcp          48672304 ( 90.19%)      33518876185 ( 92.33%)    688.66
   http(s)     18564911 ( 34.40%)      25490349453 ( 70.21%)   1373.04
   http(c)      7657268 ( 14.19%)        947571775 (  2.61%)    123.75
   squid          93789 (  0.17%)         56892089 (  0.16%)    606.60
   smtp           95592 (  0.18%)         36906366 (  0.10%)    386.08
   ftp            54069 (  0.10%)         37264715 (  0.10%)    689.21
   pop3           17097 (  0.03%)         10613901 (  0.03%)    620.80
   imap            4411 (  0.01%)          2295956 (  0.01%)    520.51
   telnet           729 (  0.00%)            83243 (  0.00%)    114.19
   ssh           556369 (  1.03%)        170643461 (  0.47%)    306.71
   dns            36692 (  0.07%)          2520629 (  0.01%)     68.70
   bgp              561 (  0.00%)            93067 (  0.00%)    165.89
   napster         1827 (  0.00%)           114350 (  0.00%)     62.59
   realaud          161 (  0.00%)            10885 (  0.00%)     67.61
   rtsp           78947 (  0.15%)         82444175 (  0.23%)   1044.30
   icecast         4177 (  0.01%)           474579 (  0.00%)    113.62
   hotline          153 (  0.00%)            13939 (  0.00%)     91.10
   other       21505551 ( 39.85%)       6680583602 ( 18.40%)    310.64
  udp           3738494 (  6.93%)       1795930300 (  4.95%)    480.39
   dns           504616 (  0.94%)        115531051 (  0.32%)    228.95
   realaud           15 (  0.00%)             1417 (  0.00%)     94.47
   halflif          500 (  0.00%)            32811 (  0.00%)     65.62
   starcra           85 (  0.00%)             8891 (  0.00%)    104.60
   everque         1146 (  0.00%)           150159 (  0.00%)    131.03
   unreal            39 (  0.00%)             6193 (  0.00%)    158.79
   quake           1627 (  0.00%)           136059 (  0.00%)     83.63
   cuseeme            6 (  0.00%)              862 (  0.00%)    143.67
   other        3230372 (  5.99%)       1680023321 (  4.63%)    520.07
  icmp           528893 (  0.98%)        108185446 (  0.30%)    204.55
  ipip              184 (  0.00%)            19160 (  0.00%)    104.13
  ipsec              74 (  0.00%)            13660 (  0.00%)    184.59
  ip6            706726 (  1.31%)        592141705 (  1.63%)    837.87
  other           17227 (  0.03%)          6521520 (  0.02%)    378.56
  frag             1104 (  0.00%)           968058 (  0.00%)    876.86
 ip6             300080 (  0.56%)        282627039 (  0.78%)    941.84
  tcp6           233534 (  0.43%)        267162784 (  0.74%)   1144.00
   http(s)        92867 (  0.17%)        129073398 (  0.36%)   1389.87
   http(c)        36635 (  0.07%)          3266606 (  0.01%)     89.17
   smtp             189 (  0.00%)            32672 (  0.00%)    172.87
   ftp               43 (  0.00%)             3918 (  0.00%)     91.12
   dns              302 (  0.00%)            59273 (  0.00%)    196.27
   bgp               96 (  0.00%)            16304 (  0.00%)    169.83
   other         103402 (  0.19%)        134710613 (  0.37%)   1302.79
  udp6            43960 (  0.08%)         10664149 (  0.03%)    242.59
   dns            36007 (  0.07%)          9555464 (  0.03%)    265.38
   everque           17 (  0.00%)             1514 (  0.00%)     89.06
   other           7936 (  0.01%)          1107171 (  0.00%)    139.51
  icmp6           20346 (  0.04%)          3181203 (  0.01%)    156.36
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           2210 (  0.00%)          1614823 (  0.00%)    730.69


tcpdump file: 201108061400.dump.gz (1322.86 MB)