Traffic Trace Info


DumpFile: 201205161400.dump
FileSize: 3050.92MB
Id: 201205161400
StartTime: Wed May 16 14:00:00 2012
EndTime: Wed May 16 14:15:00 2012
TotalTime: 899.77 seconds
TotalCapSize: -1688.75MB CapLen: 96 bytes
# of packets: 42182823 (33340.97MB)
AvgRate: 310.84Mbps stddev:43.85M

IP flow (unique src/dst pair) Information

# of flows: 1884665 (avg. 22.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.7% 1.5% 1.5% 1.4% 1.4% 1.4% 1.3% 1.2% 1.1%

IP address Information

# of IPv4 addresses: 1421892
Top 10 bandwidth usage (bytes/total in %):
11.3% 9.8% 7.6% 7.4% 3.2% 2.7% 2.6% 2.6% 2.5% 2.2%
# of IPv6 addresses: 6236
Top 10 bandwidth usage (bytes/total in %):
26.1% 21.9% 19.0% 18.7% 18.7% 16.7% 16.3% 7.9% 3.8% 3.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    7826966
 [   64-  127]:    9230247
 [  128-  255]:     903806
 [  256-  511]:    1010464
 [  512- 1023]:    1069408
 [ 1024- 2047]:   22141932


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         42182823 (100.00%)      34960538529 (100.00%)    828.79
 ip            41415876 ( 98.18%)      34657664047 ( 99.13%)    836.82
  tcp          35258198 ( 83.58%)      31342661900 ( 89.65%)    888.95
   http(s)     16580995 ( 39.31%)      22053764394 ( 63.08%)   1330.06
   http(c)      9555605 ( 22.65%)       2112756744 (  6.04%)    221.10
   squid         194784 (  0.46%)        150820364 (  0.43%)    774.30
   smtp           63504 (  0.15%)         20029565 (  0.06%)    315.41
   ftp            16610 (  0.04%)          1976440 (  0.01%)    118.99
   pop3            6045 (  0.01%)          2039350 (  0.01%)    337.36
   imap            2110 (  0.01%)           238925 (  0.00%)    113.23
   telnet          1011 (  0.00%)            98200 (  0.00%)     97.13
   ssh            27116 (  0.06%)          6167639 (  0.02%)    227.45
   dns             2725 (  0.01%)           316073 (  0.00%)    115.99
   bgp              650 (  0.00%)           136404 (  0.00%)    209.85
   napster          119 (  0.00%)             8476 (  0.00%)     71.23
   realaud            9 (  0.00%)              997 (  0.00%)    110.78
   rtsp            7004 (  0.02%)          7796413 (  0.02%)   1113.14
   icecast        47185 (  0.11%)         36945122 (  0.11%)    782.98
   hotline           71 (  0.00%)             4655 (  0.00%)     65.56
   other        8752655 ( 20.75%)       6949562139 ( 19.88%)    793.99
  udp           3378228 (  8.01%)       1924184562 (  5.50%)    569.58
   dns           696885 (  1.65%)        167016571 (  0.48%)    239.66
   realaud         1748 (  0.00%)           212673 (  0.00%)    121.67
   halflif           88 (  0.00%)            13608 (  0.00%)    154.64
   starcra           45 (  0.00%)             6649 (  0.00%)    147.76
   everque          189 (  0.00%)            37862 (  0.00%)    200.33
   unreal            14 (  0.00%)             2124 (  0.00%)    151.71
   quake             31 (  0.00%)             6630 (  0.00%)    213.87
   cuseeme            3 (  0.00%)              232 (  0.00%)     77.33
   other        2556744 (  6.06%)       1749305915 (  5.00%)    684.19
  icmp          1450048 (  3.44%)        149513844 (  0.43%)    103.11
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec           54541 (  0.13%)         12423866 (  0.04%)    227.79
  ip6           1237556 (  2.93%)       1223124245 (  3.50%)    988.34
  pim                31 (  0.00%)             1860 (  0.00%)     60.00
  other           37089 (  0.09%)          5734500 (  0.02%)    154.61
  frag           460125 (  1.09%)        350560949 (  1.00%)    761.88
 ip6             766947 (  1.82%)        302874482 (  0.87%)    394.91
  tcp6           668321 (  1.58%)        277063664 (  0.79%)    414.57
   http(s)       152374 (  0.36%)        160443225 (  0.46%)   1052.96
   http(c)       121551 (  0.29%)         11226759 (  0.03%)     92.36
   smtp             127 (  0.00%)            66559 (  0.00%)    524.09
   ftp               17 (  0.00%)             1605 (  0.00%)     94.41
   dns              278 (  0.00%)            68034 (  0.00%)    244.73
   bgp              100 (  0.00%)            19847 (  0.00%)    198.47
   other         393874 (  0.93%)        105237635 (  0.30%)    267.19
  udp6            78780 (  0.19%)         22746035 (  0.07%)    288.73
   dns            71285 (  0.17%)         17837804 (  0.05%)    250.23
   realaud            2 (  0.00%)              210 (  0.00%)    105.00
   halflif            1 (  0.00%)              107 (  0.00%)    107.00
   starcra            1 (  0.00%)               91 (  0.00%)     91.00
   unreal             1 (  0.00%)              112 (  0.00%)    112.00
   quake              1 (  0.00%)              119 (  0.00%)    119.00
   other           7489 (  0.02%)          4907592 (  0.01%)    655.31
  icmp6           18978 (  0.04%)          2272439 (  0.01%)    119.74
  ip6                84 (  0.00%)            11412 (  0.00%)    135.86
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            754 (  0.00%)           776852 (  0.00%)   1030.31


tcpdump file: 201205161400.dump.gz (957.13 MB)