Traffic Trace Info


DumpFile: 201205191400.dump
FileSize: 2473.17MB
Id: 201205191400
StartTime: Sat May 19 14:00:01 2012
EndTime: Sat May 19 14:15:00 2012
TotalTime: 899.66 seconds
TotalCapSize: 1951.20MB CapLen: 96 bytes
# of packets: 34207509 (27114.27MB)
AvgRate: 252.77Mbps stddev:48.46M

IP flow (unique src/dst pair) Information

# of flows: 1913137 (avg. 17.88 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 4.0% 2.3% 2.2% 1.9% 1.6% 1.4% 1.4% 1.3% 1.2%

IP address Information

# of IPv4 addresses: 1508755
Top 10 bandwidth usage (bytes/total in %):
20.2% 16.7% 5.9% 5.1% 5.1% 4.2% 4.2% 3.6% 3.2% 3.0%
# of IPv6 addresses: 5887
Top 10 bandwidth usage (bytes/total in %):
52.2% 49.7% 11.6% 7.9% 6.9% 6.9% 5.7% 5.1% 4.6% 3.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    5825684
 [   64-  127]:    8018787
 [  128-  255]:     812486
 [  256-  511]:     802612
 [  512- 1023]:     665884
 [ 1024- 2047]:   18082056


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         34207509 (100.00%)      28431367743 (100.00%)    831.14
 ip            33514127 ( 97.97%)      27746416644 ( 97.59%)    827.90
  tcp          26968849 ( 78.84%)      24834271901 ( 87.35%)    920.85
   http(s)     13043583 ( 38.13%)      17559091156 ( 61.76%)   1346.19
   http(c)      6891287 ( 20.15%)       1319162129 (  4.64%)    191.42
   squid        1315706 (  3.85%)       1241935072 (  4.37%)    943.93
   smtp           39198 (  0.11%)         11931391 (  0.04%)    304.39
   nntp               3 (  0.00%)              180 (  0.00%)     60.00
   ftp            14780 (  0.04%)          1745971 (  0.01%)    118.13
   pop3           14356 (  0.04%)          1586799 (  0.01%)    110.53
   imap            3266 (  0.01%)           880297 (  0.00%)    269.53
   telnet          4046 (  0.01%)           317540 (  0.00%)     78.48
   ssh            80927 (  0.24%)         11886978 (  0.04%)    146.89
   dns             1184 (  0.00%)           207426 (  0.00%)    175.19
   bgp              651 (  0.00%)           124451 (  0.00%)    191.17
   napster           21 (  0.00%)             2011 (  0.00%)     95.76
   realaud           80 (  0.00%)             9646 (  0.00%)    120.58
   rtsp            3912 (  0.01%)           242509 (  0.00%)     61.99
   icecast          342 (  0.00%)            59719 (  0.00%)    174.62
   hotline            8 (  0.00%)             1919 (  0.00%)    239.88
   other        5555479 ( 16.24%)       4685083947 ( 16.48%)    843.33
  udp           3675708 ( 10.75%)       1836692092 (  6.46%)    499.68
   dns           551446 (  1.61%)        125219509 (  0.44%)    227.07
   rip                3 (  0.00%)              206 (  0.00%)     68.67
   realaud           25 (  0.00%)             2312 (  0.00%)     92.48
   halflif          136 (  0.00%)            37023 (  0.00%)    272.23
   starcra           32 (  0.00%)             4469 (  0.00%)    139.66
   everque          313 (  0.00%)            46120 (  0.00%)    147.35
   unreal           120 (  0.00%)            29021 (  0.00%)    241.84
   quake             22 (  0.00%)             2786 (  0.00%)    126.64
   cuseeme           11 (  0.00%)             1099 (  0.00%)     99.91
   other        3005707 (  8.79%)       1703918699 (  5.99%)    566.89
  icmp          1397360 (  4.08%)        134711473 (  0.47%)     96.40
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec           26637 (  0.08%)         16330526 (  0.06%)    613.08
  ip6           1430584 (  4.18%)        920312441 (  3.24%)    643.31
  pim                27 (  0.00%)             1620 (  0.00%)     60.00
  other           14777 (  0.04%)          4077321 (  0.01%)    275.92
  frag           593143 (  1.73%)        451935393 (  1.59%)    761.93
 ip6             693382 (  2.03%)        684951099 (  2.41%)    987.84
  tcp6           559905 (  1.64%)        620598813 (  2.18%)   1108.40
   http(s)        84476 (  0.25%)        107069363 (  0.38%)   1267.45
   http(c)        36874 (  0.11%)          3377056 (  0.01%)     91.58
   smtp             162 (  0.00%)           140132 (  0.00%)    865.01
   ftp               17 (  0.00%)             1605 (  0.00%)     94.41
   ssh               73 (  0.00%)             8534 (  0.00%)    116.90
   dns              349 (  0.00%)            73984 (  0.00%)    211.99
   bgp              208 (  0.00%)            32523 (  0.00%)    156.36
   napster            3 (  0.00%)              230 (  0.00%)     76.67
   other         437743 (  1.28%)        509895386 (  1.79%)   1164.83
  udp6            90300 (  0.26%)         49519161 (  0.17%)    548.38
   dns            49607 (  0.15%)         11752278 (  0.04%)    236.91
   halflif            2 (  0.00%)              209 (  0.00%)    104.50
   starcra            2 (  0.00%)              213 (  0.00%)    106.50
   quake              1 (  0.00%)              105 (  0.00%)    105.00
   other          40688 (  0.12%)         37766356 (  0.13%)    928.19
  icmp6           26593 (  0.08%)          3096556 (  0.01%)    116.44
  ip6                87 (  0.00%)            11816 (  0.00%)    135.82
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6          16467 (  0.05%)         11720673 (  0.04%)    711.77


tcpdump file: 201205191400.dump.gz (771.46 MB)