Traffic Trace Info


DumpFile: 201202191400.dump
FileSize: 2451.45MB
Id: 201202191400
StartTime: Sun Feb 19 14:00:01 2012
EndTime: Sun Feb 19 14:15:01 2012
TotalTime: 899.79 seconds
TotalCapSize: 1921.12MB CapLen: 96 bytes
# of packets: 34755243 (23217.41MB)
AvgRate: 216.43Mbps stddev:55.46M

IP flow (unique src/dst pair) Information

# of flows: 765273 (avg. 45.42 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.3% 3.2% 1.0% 0.9% 0.9% 0.9% 0.8% 0.8% 0.8% 0.7%

IP address Information

# of IPv4 addresses: 487772
Top 10 bandwidth usage (bytes/total in %):
24.0% 14.4% 13.8% 8.1% 5.1% 4.0% 3.6% 3.2% 3.1% 2.8%
# of IPv6 addresses: 4523
Top 10 bandwidth usage (bytes/total in %):
36.6% 18.4% 15.6% 9.1% 7.9% 7.4% 3.7% 3.4% 3.4% 3.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6956191
 [   64-  127]:    8749998
 [  128-  255]:    1493019
 [  256-  511]:     924090
 [  512- 1023]:    2244079
 [ 1024- 2047]:   14387866


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         34755243 (100.00%)      24345223606 (100.00%)    700.48
 ip            34547201 ( 99.40%)      24245280294 ( 99.59%)    701.80
  tcp          24976641 ( 71.86%)      20851572709 ( 85.65%)    834.84
   http(s)     12606762 ( 36.27%)      15050434956 ( 61.82%)   1193.84
   http(c)      8990592 ( 25.87%)       3786569896 ( 15.55%)    421.17
   squid          28835 (  0.08%)         11061320 (  0.05%)    383.61
   smtp           70464 (  0.20%)         30517026 (  0.13%)    433.09
   ftp           203057 (  0.58%)         14754613 (  0.06%)     72.66
   pop3            7062 (  0.02%)          5441556 (  0.02%)    770.54
   imap            3562 (  0.01%)           575483 (  0.00%)    161.56
   telnet         38235 (  0.11%)          2858958 (  0.01%)     74.77
   ssh            30167 (  0.09%)          4765594 (  0.02%)    157.97
   dns            18578 (  0.05%)          3101063 (  0.01%)    166.92
   bgp              640 (  0.00%)           118658 (  0.00%)    185.40
   napster           26 (  0.00%)             1833 (  0.00%)     70.50
   realaud            2 (  0.00%)              126 (  0.00%)     63.00
   icecast         5808 (  0.02%)           487027 (  0.00%)     83.85
   hotline           75 (  0.00%)             4854 (  0.00%)     64.72
   other        2972776 (  8.55%)       1940879746 (  7.97%)    652.88
  udp           5788591 ( 16.66%)       1978530418 (  8.13%)    341.80
   dns           321842 (  0.93%)         67778685 (  0.28%)    210.60
   realaud           10 (  0.00%)             1077 (  0.00%)    107.70
   halflif           13 (  0.00%)             1050 (  0.00%)     80.77
   starcra           25 (  0.00%)             3199 (  0.00%)    127.96
   everque          479 (  0.00%)           103957 (  0.00%)    217.03
   unreal            11 (  0.00%)             1351 (  0.00%)    122.82
   quake             16 (  0.00%)             1279 (  0.00%)     79.94
   cuseeme            1 (  0.00%)               92 (  0.00%)     92.00
   other        5466087 ( 15.73%)       1910571640 (  7.85%)    349.53
  icmp           567452 (  1.63%)        103238247 (  0.42%)    181.93
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec             539 (  0.00%)           178418 (  0.00%)    331.02
  ip6           3208766 (  9.23%)       1310828459 (  5.38%)    408.51
  other            5027 (  0.01%)           912773 (  0.00%)    181.57
  frag            12606 (  0.04%)          9468418 (  0.04%)    751.10
 ip6             208042 (  0.60%)         99943312 (  0.41%)    480.40
  tcp6           121142 (  0.35%)         74945486 (  0.31%)    618.66
   http(s)        13566 (  0.04%)         17338922 (  0.07%)   1278.12
   http(c)        35747 (  0.10%)          3163449 (  0.01%)     88.50
   smtp              51 (  0.00%)            26263 (  0.00%)    514.96
   ftp              107 (  0.00%)            13257 (  0.00%)    123.90
   dns              390 (  0.00%)            65097 (  0.00%)    166.92
   bgp               88 (  0.00%)            12549 (  0.00%)    142.60
   other          71193 (  0.20%)         54325949 (  0.22%)    763.08
  udp6            51606 (  0.15%)         16162740 (  0.07%)    313.19
   dns            39286 (  0.11%)          9415159 (  0.04%)    239.66
   realaud            1 (  0.00%)              111 (  0.00%)    111.00
   everque            1 (  0.00%)              107 (  0.00%)    107.00
   other          12318 (  0.04%)          6747363 (  0.03%)    547.76
  icmp6           28222 (  0.08%)          3866521 (  0.02%)    137.00
  ip6                84 (  0.00%)            11412 (  0.00%)    135.86
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           6958 (  0.02%)          4953073 (  0.02%)    711.85


tcpdump file: 201202191400.dump.gz (832.20 MB)