Traffic Trace Info


DumpFile: 201202081400.dump
FileSize: 3495.64MB
Id: 201202081400
StartTime: Wed Feb 8 14:00:01 2012
EndTime: Wed Feb 8 14:15:00 2012
TotalTime: 899.38 seconds
TotalCapSize: -1401.17MB CapLen: 96 bytes
# of packets: 52481410 (21916.76MB)
AvgRate: 204.40Mbps stddev:53.62M

IP flow (unique src/dst pair) Information

# of flows: 12533892 (avg. 4.19 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 1.5% 1.3% 1.2% 1.1% 1.1% 1.1% 1.0% 1.0% 1.0%

IP address Information

# of IPv4 addresses: 9319544
Top 10 bandwidth usage (bytes/total in %):
21.3% 10.9% 4.5% 4.3% 3.8% 3.8% 3.2% 2.6% 2.4% 1.8%
# of IPv6 addresses: 5647
Top 10 bandwidth usage (bytes/total in %):
85.7% 82.9% 6.0% 4.6% 2.4% 2.0% 1.4% 1.4% 1.4% 0.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   23419863
 [   64-  127]:   12386853
 [  128-  255]:    1674128
 [  256-  511]:     850468
 [  512- 1023]:     768334
 [ 1024- 2047]:   13381764


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         52481410 (100.00%)      22981393194 (100.00%)    437.90
 ip            51832132 ( 98.76%)      22224715307 ( 96.71%)    428.78
  tcp          26831705 ( 51.13%)      17740150761 ( 77.19%)    661.16
   http(s)     11047166 ( 21.05%)      14499950463 ( 63.09%)   1312.55
   http(c)      8950553 ( 17.05%)       1419544043 (  6.18%)    158.60
   squid          54182 (  0.10%)         16561784 (  0.07%)    305.67
   smtp           74230 (  0.14%)         35466936 (  0.15%)    477.80
   nntp               2 (  0.00%)              120 (  0.00%)     60.00
   ftp             6679 (  0.01%)          1378318 (  0.01%)    206.37
   pop3            8224 (  0.02%)          1084138 (  0.00%)    131.83
   imap            8221 (  0.02%)          8215237 (  0.04%)    999.30
   telnet           569 (  0.00%)            74173 (  0.00%)    130.36
   ssh           359857 (  0.69%)         42661108 (  0.19%)    118.55
   dns            21426 (  0.04%)          4823098 (  0.02%)    225.10
   bgp              645 (  0.00%)           121951 (  0.00%)    189.07
   napster          717 (  0.00%)            45311 (  0.00%)     63.20
   realaud           53 (  0.00%)             5205 (  0.00%)     98.21
   rtsp           16320 (  0.03%)         19387525 (  0.08%)   1187.96
   icecast         7443 (  0.01%)          5908058 (  0.03%)    793.77
   hotline           91 (  0.00%)             6466 (  0.00%)     71.05
   other        6275326 ( 11.96%)       1684916767 (  7.33%)    268.50
  udp           6054946 ( 11.54%)       2996161830 ( 13.04%)    494.83
   dns           517488 (  0.99%)        127857127 (  0.56%)    247.07
   realaud           19 (  0.00%)             3084 (  0.00%)    162.32
   halflif           33 (  0.00%)             3695 (  0.00%)    111.97
   starcra          117 (  0.00%)            17665 (  0.00%)    150.98
   everque         4501 (  0.01%)          4318002 (  0.02%)    959.34
   unreal            85 (  0.00%)            18215 (  0.00%)    214.29
   quake             59 (  0.00%)             7987 (  0.00%)    135.37
   cuseeme           18 (  0.00%)             1865 (  0.00%)    103.61
   other        5532561 ( 10.54%)       2863886659 ( 12.46%)    517.64
  icmp         17951411 ( 34.21%)       1170887521 (  5.09%)     65.23
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec           19164 (  0.04%)          5345304 (  0.02%)    278.92
  ip6            969028 (  1.85%)        311214144 (  1.35%)    321.16
  other            5693 (  0.01%)           936477 (  0.00%)    164.50
  frag              443 (  0.00%)           526012 (  0.00%)   1187.39
 ip6             649278 (  1.24%)        756677887 (  3.29%)   1165.41
  tcp6           531421 (  1.01%)        710494651 (  3.09%)   1336.97
   http(s)        24413 (  0.05%)         30884734 (  0.13%)   1265.09
   http(c)        36719 (  0.07%)          3234717 (  0.01%)     88.09
   squid             12 (  0.00%)              976 (  0.00%)     81.33
   smtp             142 (  0.00%)            33367 (  0.00%)    234.98
   pop3              92 (  0.00%)            10261 (  0.00%)    111.53
   dns              458 (  0.00%)            74113 (  0.00%)    161.82
   bgp               90 (  0.00%)            19039 (  0.00%)    211.54
   other         469495 (  0.89%)        676237444 (  2.94%)   1440.35
  udp6            82086 (  0.16%)         31823930 (  0.14%)    387.69
   dns            62045 (  0.12%)         17373741 (  0.08%)    280.02
   halflif            2 (  0.00%)              197 (  0.00%)     98.50
   starcra            3 (  0.00%)              281 (  0.00%)     93.67
   everque            3 (  0.00%)              295 (  0.00%)     98.33
   quake              1 (  0.00%)              107 (  0.00%)    107.00
   other          20032 (  0.04%)         14449309 (  0.06%)    721.31
  icmp6           19951 (  0.04%)          3104963 (  0.01%)    155.63
  ip6                86 (  0.00%)            11648 (  0.00%)    135.44
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6          15704 (  0.03%)         11238615 (  0.05%)    715.65


tcpdump file: 201202081400.dump.gz (1208.30 MB)