Traffic Trace Info


DumpFile: 201206051400.dump
FileSize: 3285.48MB
Id: 201206051400
StartTime: Tue Jun 5 14:00:01 2012
EndTime: Tue Jun 5 14:15:00 2012
TotalTime: 899.31 seconds
TotalCapSize: -1547.63MB CapLen: 96 bytes
# of packets: 48306570 (24503.89MB)
AvgRate: 228.58Mbps stddev:39.05M

IP flow (unique src/dst pair) Information

# of flows: 11371310 (avg. 4.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 1.7% 1.6% 1.6% 1.5% 1.4% 1.1% 1.1% 0.8% 0.7%

IP address Information

# of IPv4 addresses: 8757679
Top 10 bandwidth usage (bytes/total in %):
15.2% 8.4% 7.4% 5.4% 3.9% 3.7% 3.4% 3.4% 3.2% 2.3%
# of IPv6 addresses: 8304
Top 10 bandwidth usage (bytes/total in %):
10.7% 6.9% 5.4% 3.2% 2.8% 2.7% 2.7% 2.7% 2.7% 2.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   20829041
 [   64-  127]:    9530303
 [  128-  255]:     950026
 [  256-  511]:     770477
 [  512- 1023]:     710103
 [ 1024- 2047]:   15516620


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         48306570 (100.00%)      25694188286 (100.00%)    531.90
 ip            46598227 ( 96.46%)      24283385901 ( 94.51%)    521.12
  tcp          25485524 ( 52.76%)      20413422036 ( 79.45%)    800.98
   http(s)     13344888 ( 27.63%)      17733160518 ( 69.02%)   1328.84
   http(c)      8257073 ( 17.09%)       1443630104 (  5.62%)    174.84
   squid          35037 (  0.07%)         18102874 (  0.07%)    516.68
   smtp           51252 (  0.11%)         17559166 (  0.07%)    342.60
   ftp            23525 (  0.05%)          2532666 (  0.01%)    107.66
   pop3            6310 (  0.01%)          3230956 (  0.01%)    512.04
   imap           58529 (  0.12%)         55744286 (  0.22%)    952.42
   telnet           744 (  0.00%)            77774 (  0.00%)    104.53
   ssh           156245 (  0.32%)         24273355 (  0.09%)    155.35
   dns             3568 (  0.01%)          1202463 (  0.00%)    337.01
   bgp              650 (  0.00%)           130212 (  0.00%)    200.33
   napster          720 (  0.00%)            47751 (  0.00%)     66.32
   realaud           28 (  0.00%)             2034 (  0.00%)     72.64
   icecast         7879 (  0.02%)          5885601 (  0.02%)    747.00
   hotline           10 (  0.00%)              610 (  0.00%)     61.00
   other        3539065 (  7.33%)       1107841606 (  4.31%)    313.03
  udp           3408921 (  7.06%)       1817843835 (  7.07%)    533.26
   dns           564470 (  1.17%)        140052775 (  0.55%)    248.11
   rip                1 (  0.00%)               70 (  0.00%)     70.00
   realaud           19 (  0.00%)             6375 (  0.00%)    335.53
   halflif           62 (  0.00%)             7969 (  0.00%)    128.53
   starcra           25 (  0.00%)             4124 (  0.00%)    164.96
   everque          420 (  0.00%)           151926 (  0.00%)    361.73
   unreal            25 (  0.00%)             7476 (  0.00%)    299.04
   quake             27 (  0.00%)             2917 (  0.00%)    108.04
   cuseeme           14 (  0.00%)             1158 (  0.00%)     82.71
   other        2843718 (  5.89%)       1677535566 (  6.53%)    589.91
  icmp         16148718 ( 33.43%)       1039419251 (  4.05%)     64.37
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec           83068 (  0.17%)         38799688 (  0.15%)    467.08
  ip6           1456248 (  3.01%)        969031410 (  3.77%)    665.43
  pim                 9 (  0.00%)              540 (  0.00%)     60.00
  other           15554 (  0.03%)          4849871 (  0.02%)    311.81
  frag              807 (  0.00%)           792552 (  0.00%)    982.10
 ip6            1708343 (  3.54%)       1410802385 (  5.49%)    825.83
  tcp6          1590344 (  3.29%)       1385369579 (  5.39%)    871.11
   http(s)      1161179 (  2.40%)       1236528935 (  4.81%)   1064.89
   http(c)       179236 (  0.37%)         19100103 (  0.07%)    106.56
   squid              6 (  0.00%)              476 (  0.00%)     79.33
   smtp              99 (  0.00%)            54278 (  0.00%)    548.26
   ftp              129 (  0.00%)            14096 (  0.00%)    109.27
   imap             285 (  0.00%)           286793 (  0.00%)   1006.29
   dns              374 (  0.00%)            85911 (  0.00%)    229.71
   bgp               90 (  0.00%)            21887 (  0.00%)    243.19
   other         248946 (  0.52%)        129277100 (  0.50%)    519.30
  udp6            87582 (  0.18%)         20681158 (  0.08%)    236.13
   dns            81827 (  0.17%)         20077849 (  0.08%)    245.37
   starcra            1 (  0.00%)               96 (  0.00%)     96.00
   everque            1 (  0.00%)               96 (  0.00%)     96.00
   quake              1 (  0.00%)              107 (  0.00%)    107.00
   other           5752 (  0.01%)           603010 (  0.00%)    104.83
  icmp6           29377 (  0.06%)          3821025 (  0.01%)    130.07
  ip6                85 (  0.00%)            11580 (  0.00%)    136.24
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            925 (  0.00%)           914963 (  0.00%)    989.15


tcpdump file: 201206051400.dump.gz (1109.25 MB)