Traffic Trace Info


DumpFile: 201202291400.dump
FileSize: 2452.96MB
Id: 201202291400
StartTime: Wed Feb 29 14:00:01 2012
EndTime: Wed Feb 29 14:15:01 2012
TotalTime: 899.69 seconds
TotalCapSize: 1938.05MB CapLen: 96 bytes
# of packets: 33745227 (23529.19MB)
AvgRate: 219.29Mbps stddev:49.47M

IP flow (unique src/dst pair) Information

# of flows: 912275 (avg. 36.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 2.4% 2.3% 2.3% 2.0% 1.5% 1.4% 1.4% 1.1% 1.1%

IP address Information

# of IPv4 addresses: 551891
Top 10 bandwidth usage (bytes/total in %):
18.6% 13.6% 9.2% 4.6% 4.5% 4.4% 4.2% 3.1% 2.5% 2.3%
# of IPv6 addresses: 5275
Top 10 bandwidth usage (bytes/total in %):
40.5% 36.1% 22.6% 11.3% 10.3% 6.7% 6.3% 5.8% 3.5% 3.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5418672
 [   64-  127]:    9561054
 [  128-  255]:    1907844
 [  256-  511]:     958082
 [  512- 1023]:     877737
 [ 1024- 2047]:   15021838


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         33745227 (100.00%)      24672144837 (100.00%)    731.13
 ip            33469345 ( 99.18%)      24521582391 ( 99.39%)    732.66
  tcp          25028002 ( 74.17%)      21889586948 ( 88.72%)    874.60
   http(s)     13473433 ( 39.93%)      18483088504 ( 74.91%)   1371.82
   http(c)      7464033 ( 22.12%)       1500272930 (  6.08%)    201.00
   squid          75505 (  0.22%)         30376055 (  0.12%)    402.31
   smtp           88277 (  0.26%)         24073370 (  0.10%)    272.70
   ftp             8982 (  0.03%)           916173 (  0.00%)    102.00
   pop3            8016 (  0.02%)          4622321 (  0.02%)    576.64
   imap            2480 (  0.01%)           738476 (  0.00%)    297.77
   telnet          1652 (  0.00%)           144676 (  0.00%)     87.58
   ssh            29604 (  0.09%)          7844983 (  0.03%)    265.00
   dns            15046 (  0.04%)          1364621 (  0.01%)     90.70
   bgp              640 (  0.00%)           119796 (  0.00%)    187.18
   napster          794 (  0.00%)            50508 (  0.00%)     63.61
   realaud           80 (  0.00%)             6132 (  0.00%)     76.65
   rtsp           16287 (  0.05%)         19376079 (  0.08%)   1189.67
   icecast        68259 (  0.20%)         71374566 (  0.29%)   1045.64
   hotline           17 (  0.00%)             1393 (  0.00%)     81.94
   other        3774896 ( 11.19%)       1745216283 (  7.07%)    462.32
  udp           4680428 ( 13.87%)       1311214285 (  5.31%)    280.15
   dns           600967 (  1.78%)        153428903 (  0.62%)    255.30
   realaud           47 (  0.00%)             3843 (  0.00%)     81.77
   halflif           31 (  0.00%)             4456 (  0.00%)    143.74
   starcra           36 (  0.00%)             3678 (  0.00%)    102.17
   everque         1404 (  0.00%)          1086754 (  0.00%)    774.04
   unreal           105 (  0.00%)            19985 (  0.00%)    190.33
   quake             40 (  0.00%)             3806 (  0.00%)     95.15
   cuseeme            3 (  0.00%)              240 (  0.00%)     80.00
   other        4062512 ( 12.04%)       1155636724 (  4.68%)    284.46
  icmp           792946 (  2.35%)        110361709 (  0.45%)    139.18
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec           27367 (  0.08%)         18069770 (  0.07%)    660.28
  ip6           2928284 (  8.68%)       1188948647 (  4.82%)    406.02
  other           12133 (  0.04%)          3381762 (  0.01%)    278.72
  frag            66502 (  0.20%)         50863016 (  0.21%)    764.83
 ip6             275882 (  0.82%)        150562446 (  0.61%)    545.75
  tcp6           120987 (  0.36%)         53816688 (  0.22%)    444.81
   http(s)        18082 (  0.05%)         23553301 (  0.10%)   1302.58
   http(c)        60278 (  0.18%)          5269209 (  0.02%)     87.42
   squid              7 (  0.00%)             1165 (  0.00%)    166.43
   smtp             165 (  0.00%)            80490 (  0.00%)    487.82
   ftp               72 (  0.00%)            10284 (  0.00%)    142.83
   pop3              88 (  0.00%)             7848 (  0.00%)     89.18
   dns              322 (  0.00%)            52966 (  0.00%)    164.49
   bgp               96 (  0.00%)            15695 (  0.00%)    163.49
   icecast            1 (  0.00%)               94 (  0.00%)     94.00
   other          41876 (  0.12%)         24825636 (  0.10%)    592.84
  udp6           134253 (  0.40%)         92271820 (  0.37%)    687.30
   dns            66654 (  0.20%)         18546197 (  0.08%)    278.25
   realaud            1 (  0.00%)              102 (  0.00%)    102.00
   starcra            2 (  0.00%)              224 (  0.00%)    112.00
   everque            1 (  0.00%)               98 (  0.00%)     98.00
   quake              2 (  0.00%)              214 (  0.00%)    107.00
   other          67593 (  0.20%)         73724985 (  0.30%)   1090.72
  icmp6           18792 (  0.06%)          3039146 (  0.01%)    161.73
  ip6                84 (  0.00%)            11412 (  0.00%)    135.86
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           1736 (  0.01%)          1419300 (  0.01%)    817.57


tcpdump file: 201202291400.dump.gz (844.31 MB)