Traffic Trace Info


DumpFile: 201108241400.dump
FileSize: 3049.09MB
Id: 201108241400
StartTime: Wed Aug 24 14:00:00 2011
EndTime: Wed Aug 24 14:15:00 2011
TotalTime: 900.54 seconds
TotalCapSize: -1693.64MB CapLen: 96 bytes
# of packets: 42384052 (28612.32MB)
AvgRate: 266.51Mbps stddev:61.51M

IP flow (unique src/dst pair) Information

# of flows: 822002 (avg. 51.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.8% 9.4% 2.5% 1.8% 1.8% 1.6% 1.4% 1.4% 1.2% 1.2%

IP address Information

# of IPv4 addresses: 463166
Top 10 bandwidth usage (bytes/total in %):
15.5% 13.3% 9.7% 9.6% 9.0% 5.9% 4.9% 4.5% 3.7% 3.2%
# of IPv6 addresses: 3591
Top 10 bandwidth usage (bytes/total in %):
54.3% 52.9% 17.2% 14.9% 7.9% 6.7% 6.4% 3.6% 3.5% 3.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   11020580
 [   64-  127]:    9691742
 [  128-  255]:    1489739
 [  256-  511]:     703236
 [  512- 1023]:     801563
 [ 1024- 2047]:   18677192


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         42384052 (100.00%)      30002195454 (100.00%)    707.87
 ip            41840003 ( 98.72%)      29410406591 ( 98.03%)    702.93
  tcp          35985533 ( 84.90%)      27168074490 ( 90.55%)    754.97
   http(s)     15566810 ( 36.73%)      21194735408 ( 70.64%)   1361.53
   http(c)      8044654 ( 18.98%)       1218009247 (  4.06%)    151.41
   squid          59704 (  0.14%)         39947518 (  0.13%)    669.09
   smtp          130898 (  0.31%)         49088107 (  0.16%)    375.01
   ftp           182180 (  0.43%)         24466272 (  0.08%)    134.30
   pop3           40397 (  0.10%)         11620361 (  0.04%)    287.65
   imap            6909 (  0.02%)          6105587 (  0.02%)    883.72
   telnet           583 (  0.00%)            73220 (  0.00%)    125.59
   ssh           169483 (  0.40%)         20756005 (  0.07%)    122.47
   dns            15458 (  0.04%)          1332249 (  0.00%)     86.19
   bgp              596 (  0.00%)           127486 (  0.00%)    213.90
   napster          248 (  0.00%)            16382 (  0.00%)     66.06
   realaud           59 (  0.00%)             4833 (  0.00%)     81.92
   rtsp            6231 (  0.01%)          7673592 (  0.03%)   1231.52
   icecast         3931 (  0.01%)          1894297 (  0.01%)    481.89
   hotline           92 (  0.00%)             5792 (  0.00%)     62.96
   other       11757299 ( 27.74%)       4592218074 ( 15.31%)    390.58
  udp           3688083 (  8.70%)       1371796358 (  4.57%)    371.95
   dns           609861 (  1.44%)        163776966 (  0.55%)    268.55
   realaud           21 (  0.00%)             2534 (  0.00%)    120.67
   halflif          113 (  0.00%)             7818 (  0.00%)     69.19
   starcra           40 (  0.00%)             5651 (  0.00%)    141.28
   everque          501 (  0.00%)            89248 (  0.00%)    178.14
   unreal            27 (  0.00%)             3603 (  0.00%)    133.44
   quake            207 (  0.00%)            58302 (  0.00%)    281.65
   cuseeme            6 (  0.00%)             1059 (  0.00%)    176.50
   other        3077071 (  7.26%)       1207676410 (  4.03%)    392.48
  icmp           393607 (  0.93%)         77000529 (  0.26%)    195.63
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec              56 (  0.00%)            10688 (  0.00%)    190.86
  ip6           1748285 (  4.12%)        788094012 (  2.63%)    450.78
  other           24254 (  0.06%)          5411244 (  0.02%)    223.11
  frag             1449 (  0.00%)          1599613 (  0.01%)   1103.94
 ip6             544049 (  1.28%)        591788863 (  1.97%)   1087.75
  tcp6           427666 (  1.01%)        542112933 (  1.81%)   1267.61
   http(s)        15001 (  0.04%)         19367351 (  0.06%)   1291.07
   http(c)        29938 (  0.07%)          3374963 (  0.01%)    112.73
   squid             20 (  0.00%)             3653 (  0.00%)    182.65
   smtp             362 (  0.00%)           145604 (  0.00%)    402.22
   ftp               43 (  0.00%)             3918 (  0.00%)     91.12
   dns              304 (  0.00%)            56733 (  0.00%)    186.62
   bgp               94 (  0.00%)            17494 (  0.00%)    186.11
   other         381904 (  0.90%)        519143217 (  1.73%)   1359.36
  udp6            88627 (  0.21%)         40556698 (  0.14%)    457.61
   dns            50538 (  0.12%)         16261182 (  0.05%)    321.76
   other          38089 (  0.09%)         24295516 (  0.08%)    637.86
  icmp6           18552 (  0.04%)          2527289 (  0.01%)    136.23
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6           9173 (  0.02%)          6587727 (  0.02%)    718.16


tcpdump file: 201108241400.dump.gz (1005.66 MB)