Traffic Trace Info


DumpFile: 201201111400.dump
FileSize: 3066.52MB
Id: 201201111400
StartTime: Wed Jan 11 14:00:00 2012
EndTime: Wed Jan 11 14:15:00 2012
TotalTime: 899.90 seconds
TotalCapSize: -1690.99MB CapLen: 96 bytes
# of packets: 43352126 (27143.42MB)
AvgRate: 253.02Mbps stddev:39.62M

IP flow (unique src/dst pair) Information

# of flows: 1963281 (avg. 22.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.8% 5.7% 1.5% 1.2% 1.1% 1.0% 0.9% 0.9% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 1456586
Top 10 bandwidth usage (bytes/total in %):
13.1% 11.1% 10.2% 9.1% 5.7% 4.3% 4.1% 2.8% 2.1% 2.0%
# of IPv6 addresses: 5461
Top 10 bandwidth usage (bytes/total in %):
13.3% 13.3% 11.5% 9.1% 8.6% 8.6% 7.4% 7.3% 7.3% 7.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   10427420
 [   64-  127]:   11949067
 [  128-  255]:    1490835
 [  256-  511]:     844344
 [  512- 1023]:     894257
 [ 1024- 2047]:   17746203


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         43352126 (100.00%)      28461940515 (100.00%)    656.53
 ip            43157435 ( 99.55%)      28367854296 ( 99.67%)    657.31
  tcp          35447709 ( 81.77%)      24865894940 ( 87.37%)    701.48
   http(s)     14413174 ( 33.25%)      18943492576 ( 66.56%)   1314.32
   http(c)     12196402 ( 28.13%)       1509304069 (  5.30%)    123.75
   squid         236337 (  0.55%)        234805581 (  0.82%)    993.52
   smtp          120169 (  0.28%)         86490980 (  0.30%)    719.74
   ftp            55962 (  0.13%)          4619383 (  0.02%)     82.54
   pop3            8437 (  0.02%)          6045148 (  0.02%)    716.50
   imap            2489 (  0.01%)           663216 (  0.00%)    266.46
   telnet           528 (  0.00%)            68014 (  0.00%)    128.81
   ssh           807370 (  1.86%)        130779042 (  0.46%)    161.98
   dns            25619 (  0.06%)          2753373 (  0.01%)    107.47
   bgp              637 (  0.00%)           116169 (  0.00%)    182.37
   napster          222 (  0.00%)            14309 (  0.00%)     64.45
   realaud           25 (  0.00%)             1578 (  0.00%)     63.12
   rtsp           55076 (  0.13%)         81599201 (  0.29%)   1481.57
   icecast        37461 (  0.09%)         31496081 (  0.11%)    840.77
   hotline           51 (  0.00%)             3588 (  0.00%)     70.35
   other        7487749 ( 17.27%)       3833642550 ( 13.47%)    511.99
  udp           5304399 ( 12.24%)       2920211885 ( 10.26%)    550.53
   dns           600860 (  1.39%)        138236172 (  0.49%)    230.06
   realaud            9 (  0.00%)              988 (  0.00%)    109.78
   halflif           59 (  0.00%)             7011 (  0.00%)    118.83
   starcra          231 (  0.00%)            33073 (  0.00%)    143.17
   everque          491 (  0.00%)           115110 (  0.00%)    234.44
   unreal             8 (  0.00%)             1209 (  0.00%)    151.12
   quake             34 (  0.00%)             4689 (  0.00%)    137.91
   cuseeme            6 (  0.00%)              928 (  0.00%)    154.67
   other        4590481 ( 10.59%)       2774883743 (  9.75%)    604.49
  icmp          1561736 (  3.60%)        142836846 (  0.50%)     91.46
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec           14413 (  0.03%)          3405422 (  0.01%)    236.27
  ip6            820055 (  1.89%)        432595363 (  1.52%)    527.52
  other            8938 (  0.02%)          2890570 (  0.01%)    323.40
  frag           233557 (  0.54%)        178468686 (  0.63%)    764.13
 ip6             194691 (  0.45%)         94086219 (  0.33%)    483.26
  tcp6            88501 (  0.20%)         57411252 (  0.20%)    648.71
   http(s)        42328 (  0.10%)         48880710 (  0.17%)   1154.81
   http(c)        25931 (  0.06%)          2190484 (  0.01%)     84.47
   squid             10 (  0.00%)             1348 (  0.00%)    134.80
   smtp             271 (  0.00%)           211264 (  0.00%)    779.57
   ftp                6 (  0.00%)              500 (  0.00%)     83.33
   pop3             113 (  0.00%)            18916 (  0.00%)    167.40
   dns              328 (  0.00%)            70304 (  0.00%)    214.34
   bgp              104 (  0.00%)            31015 (  0.00%)    298.22
   other          19410 (  0.04%)          6006711 (  0.02%)    309.46
  udp6            62400 (  0.14%)         19694370 (  0.07%)    315.61
   dns            58366 (  0.13%)         18012240 (  0.06%)    308.61
   halflif            1 (  0.00%)              113 (  0.00%)    113.00
   everque            2 (  0.00%)              205 (  0.00%)    102.50
   cuseeme            1 (  0.00%)              108 (  0.00%)    108.00
   other           4030 (  0.01%)          1681704 (  0.01%)    417.30
  icmp6           25152 (  0.06%)          3765889 (  0.01%)    149.73
  ip6                84 (  0.00%)            11412 (  0.00%)    135.86
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6          18524 (  0.04%)         13199216 (  0.05%)    712.55


tcpdump file: 201201111400.dump.gz (1043.48 MB)