Traffic Trace Info


DumpFile: 201111111400.dump
FileSize: 3957.03MB
Id: 201111111400
StartTime: Fri Nov 11 14:00:00 2011
EndTime: Fri Nov 11 14:15:00 2011
TotalTime: 900.10 seconds
TotalCapSize: -1090.75MB CapLen: 96 bytes
# of packets: 62375602 (25777.48MB)
AvgRate: 240.26Mbps stddev:69.07M

IP flow (unique src/dst pair) Information

# of flows: 1942781 (avg. 32.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.4% 1.1% 1.0% 0.9% 0.9% 0.9% 0.9% 0.8% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 1423851
Top 10 bandwidth usage (bytes/total in %):
7.2% 6.9% 6.0% 5.2% 4.9% 4.3% 4.1% 3.5% 3.2% 3.0%
# of IPv6 addresses: 4706
Top 10 bandwidth usage (bytes/total in %):
16.1% 14.9% 14.9% 11.2% 10.9% 10.2% 9.3% 8.3% 7.7% 7.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   31381779
 [   64-  127]:   12179515
 [  128-  255]:    1442011
 [  256-  511]:     740370
 [  512- 1023]:     782037
 [ 1024- 2047]:   15849890


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         62375602 (100.00%)      27029648215 (100.00%)    433.34
 ip            61943272 ( 99.31%)      26709242850 ( 98.81%)    431.19
  tcp          32514325 ( 52.13%)      22177544895 ( 82.05%)    682.09
   http(s)     13917596 ( 22.31%)      18611743976 ( 68.86%)   1337.28
   http(c)     10374679 ( 16.63%)       1605970241 (  5.94%)    154.80
   squid          50284 (  0.08%)         38928870 (  0.14%)    774.18
   smtp          126552 (  0.20%)         32941589 (  0.12%)    260.30
   ftp           424486 (  0.68%)         57936348 (  0.21%)    136.49
   pop3          122193 (  0.20%)         70623135 (  0.26%)    577.96
   imap            2504 (  0.00%)           351894 (  0.00%)    140.53
   telnet           662 (  0.00%)            79468 (  0.00%)    120.04
   ssh            13563 (  0.02%)          3978817 (  0.01%)    293.36
   dns            50750 (  0.08%)          4374834 (  0.02%)     86.20
   bgp              671 (  0.00%)           128937 (  0.00%)    192.16
   napster          240 (  0.00%)            19217 (  0.00%)     80.07
   realaud          277 (  0.00%)            20716 (  0.00%)     74.79
   rtsp            5862 (  0.01%)          6981762 (  0.03%)   1191.02
   icecast        17128 (  0.03%)         12248711 (  0.05%)    715.13
   hotline           61 (  0.00%)             5694 (  0.00%)     93.34
   other        7406816 ( 11.87%)       1731210604 (  6.40%)    233.73
  udp           4166260 (  6.68%)       1631922038 (  6.04%)    391.70
   dns           616402 (  0.99%)        157760668 (  0.58%)    255.94
   realaud           87 (  0.00%)            16505 (  0.00%)    189.71
   halflif          165 (  0.00%)            10583 (  0.00%)     64.14
   starcra          272 (  0.00%)            23178 (  0.00%)     85.21
   everque          441 (  0.00%)            97287 (  0.00%)    220.61
   unreal            40 (  0.00%)             6175 (  0.00%)    154.38
   quake             12 (  0.00%)             1130 (  0.00%)     94.17
   cuseeme            2 (  0.00%)              152 (  0.00%)     76.00
   other        3500161 (  5.61%)       1470858854 (  5.44%)    420.23
  icmp          1691045 (  2.71%)        193501266 (  0.72%)    114.43
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec           12022 (  0.02%)          1961236 (  0.01%)    163.14
  ip6           1367970 (  2.19%)        844501479 (  3.12%)    617.34
  other        22191465 ( 35.58%)       1859792666 (  6.88%)     83.81
  frag           104050 (  0.17%)         79748369 (  0.30%)    766.44
 ip6             432330 (  0.69%)        320405365 (  1.19%)    741.11
  tcp6           167891 (  0.27%)        164711111 (  0.61%)    981.06
   http(s)        32965 (  0.05%)         42908795 (  0.16%)   1301.65
   http(c)        23421 (  0.04%)          3349188 (  0.01%)    143.00
   squid              6 (  0.00%)              468 (  0.00%)     78.00
   smtp              76 (  0.00%)            15624 (  0.00%)    205.58
   dns              632 (  0.00%)           113792 (  0.00%)    180.05
   bgp               93 (  0.00%)            23313 (  0.00%)    250.68
   hotline          134 (  0.00%)            23214 (  0.00%)    173.24
   other         110564 (  0.18%)        118276717 (  0.44%)   1069.76
  udp6           104044 (  0.17%)         52023445 (  0.19%)    500.01
   dns            50233 (  0.08%)         14934314 (  0.06%)    297.30
   everque            1 (  0.00%)              105 (  0.00%)    105.00
   other          53810 (  0.09%)         37089026 (  0.14%)    689.26
  icmp6           16823 (  0.03%)          2839360 (  0.01%)    168.78
  ip6                84 (  0.00%)            11412 (  0.00%)    135.86
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6         143458 (  0.23%)        100815957 (  0.37%)    702.76


tcpdump file: 201111111400.dump.gz (1168.17 MB)