Traffic Trace Info


DumpFile: 201204251400.dump
FileSize: 3747.65MB
Id: 201204251400
StartTime: Wed Apr 25 14:00:01 2012
EndTime: Wed Apr 25 14:15:00 2012
TotalTime: 899.60 seconds
TotalCapSize: -1193.15MB CapLen: 96 bytes
# of packets: 55364568 (32548.71MB)
AvgRate: 303.54Mbps stddev:38.77M

IP flow (unique src/dst pair) Information

# of flows: 11450415 (avg. 4.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 3.2% 2.3% 2.0% 1.8% 1.6% 1.4% 1.1% 1.0% 1.0%

IP address Information

# of IPv4 addresses: 8769660
Top 10 bandwidth usage (bytes/total in %):
14.7% 8.6% 7.5% 5.3% 4.4% 4.3% 3.3% 3.2% 3.2% 2.8%
# of IPv6 addresses: 6667
Top 10 bandwidth usage (bytes/total in %):
63.1% 52.8% 18.6% 16.1% 2.9% 2.8% 2.1% 2.0% 1.5% 1.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   21677127
 [   64-  127]:    9530165
 [  128-  255]:    1096692
 [  256-  511]:     981794
 [  512- 1023]:     989109
 [ 1024- 2047]:   21089681


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         55364568 (100.00%)      34129798980 (100.00%)    616.46
 ip            54834798 ( 99.04%)      33799706172 ( 99.03%)    616.39
  tcp          33543064 ( 60.59%)      29098681790 ( 85.26%)    867.50
   http(s)     16665198 ( 30.10%)      22563382172 ( 66.11%)   1353.92
   http(c)      8853635 ( 15.99%)       1399199107 (  4.10%)    158.04
   squid          93907 (  0.17%)         74004495 (  0.22%)    788.06
   smtp           49265 (  0.09%)         12133773 (  0.04%)    246.30
   ftp            11561 (  0.02%)          1852502 (  0.01%)    160.24
   pop3            7707 (  0.01%)          3308254 (  0.01%)    429.25
   imap            2648 (  0.00%)           821630 (  0.00%)    310.28
   telnet         19883 (  0.04%)          1482502 (  0.00%)     74.56
   ssh            17777 (  0.03%)          3453356 (  0.01%)    194.26
   dns             2545 (  0.00%)           344652 (  0.00%)    135.42
   bgp              676 (  0.00%)           141376 (  0.00%)    209.14
   napster           76 (  0.00%)             5175 (  0.00%)     68.09
   realaud           33 (  0.00%)             2126 (  0.00%)     64.42
   rtsp            6783 (  0.01%)          7701388 (  0.02%)   1135.40
   icecast        37506 (  0.07%)         31402774 (  0.09%)    837.27
   hotline           20 (  0.00%)             1268 (  0.00%)     63.40
   other        7773844 ( 14.04%)       4999445240 ( 14.65%)    643.11
  udp           3752342 (  6.78%)       1821601317 (  5.34%)    485.46
   dns           603672 (  1.09%)        147096036 (  0.43%)    243.67
   realaud           25 (  0.00%)             3863 (  0.00%)    154.52
   halflif           95 (  0.00%)            19713 (  0.00%)    207.51
   starcra           71 (  0.00%)             7763 (  0.00%)    109.34
   everque         1319 (  0.00%)           918443 (  0.00%)    696.32
   unreal           125 (  0.00%)            49680 (  0.00%)    397.44
   quake              4 (  0.00%)              386 (  0.00%)     96.50
   cuseeme            5 (  0.00%)              675 (  0.00%)    135.00
   other        3146459 (  5.68%)       1673412114 (  4.90%)    531.84
  icmp         15721043 ( 28.40%)       1008694423 (  2.96%)     64.16
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec          220263 (  0.40%)        242060802 (  0.71%)   1098.96
  ip6           1579906 (  2.85%)       1624027102 (  4.76%)   1027.93
  pim               183 (  0.00%)            10980 (  0.00%)     60.00
  other           17812 (  0.03%)          4610488 (  0.01%)    258.84
  frag            64278 (  0.12%)         82508822 (  0.24%)   1283.62
 ip6             529770 (  0.96%)        330092808 (  0.97%)    623.09
  tcp6           423440 (  0.76%)        302047494 (  0.88%)    713.32
   http(s)       214994 (  0.39%)        260561977 (  0.76%)   1211.95
   http(c)       178614 (  0.32%)         14629392 (  0.04%)     81.91
   smtp             112 (  0.00%)            29476 (  0.00%)    263.18
   ftp               98 (  0.00%)            13201 (  0.00%)    134.70
   pop3              11 (  0.00%)              981 (  0.00%)     89.18
   dns              285 (  0.00%)            50811 (  0.00%)    178.28
   bgp               85 (  0.00%)            14716 (  0.00%)    173.13
   other          29241 (  0.05%)         26746940 (  0.08%)    914.71
  udp6            76923 (  0.14%)         20916888 (  0.06%)    271.92
   dns            70056 (  0.13%)         19383491 (  0.06%)    276.69
   realaud            3 (  0.00%)              320 (  0.00%)    106.67
   halflif            1 (  0.00%)              108 (  0.00%)    108.00
   everque            1 (  0.00%)              102 (  0.00%)    102.00
   quake              3 (  0.00%)              314 (  0.00%)    104.67
   other           6859 (  0.01%)          1532553 (  0.00%)    223.44
  icmp6           24311 (  0.04%)          3439825 (  0.01%)    141.49
  ip6                85 (  0.00%)            11580 (  0.00%)    136.24
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6           4980 (  0.01%)          3672805 (  0.01%)    737.51


tcpdump file: 201204251400.dump.gz (1224.90 MB)