Traffic Trace Info


DumpFile: 201206071400.dump
FileSize: 4385.68MB
Id: 201206071400
StartTime: Thu Jun 7 14:00:01 2012
EndTime: Thu Jun 7 14:15:01 2012
TotalTime: 899.97 seconds
TotalCapSize: -671.52MB CapLen: 96 bytes
# of packets: 62992323 (39321.24MB)
AvgRate: 366.55Mbps stddev:53.23M

IP flow (unique src/dst pair) Information

# of flows: 11308310 (avg. 5.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.8% 4.2% 1.9% 1.7% 1.6% 1.6% 1.5% 1.0% 1.0% 1.0%

IP address Information

# of IPv4 addresses: 8748461
Top 10 bandwidth usage (bytes/total in %):
21.9% 11.5% 6.5% 5.5% 4.4% 4.4% 4.4% 3.5% 3.2% 3.0%
# of IPv6 addresses: 8549
Top 10 bandwidth usage (bytes/total in %):
50.0% 38.7% 6.5% 3.6% 3.3% 2.4% 2.4% 2.4% 1.5% 1.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   22439189
 [   64-  127]:   11601990
 [  128-  255]:    1080072
 [  256-  511]:     939369
 [  512- 1023]:    1184945
 [ 1024- 2047]:   25746758


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         62992323 (100.00%)      41231312867 (100.00%)    654.55
 ip            61084749 ( 96.97%)      39558445091 ( 95.94%)    647.60
  tcp          39927996 ( 63.39%)      34919581005 ( 84.69%)    874.56
   http(s)     19178036 ( 30.45%)      25785416026 ( 62.54%)   1344.53
   http(c)      9808488 ( 15.57%)       1342006027 (  3.25%)    136.82
   squid         232314 (  0.37%)        164836408 (  0.40%)    709.54
   smtp           55220 (  0.09%)         15230001 (  0.04%)    275.81
   ftp            24361 (  0.04%)          2694459 (  0.01%)    110.61
   pop3            8265 (  0.01%)          5829561 (  0.01%)    705.33
   imap            1588 (  0.00%)           226367 (  0.00%)    142.55
   telnet          2325 (  0.00%)           197077 (  0.00%)     84.76
   ssh           252132 (  0.40%)         43589499 (  0.11%)    172.88
   dns             4164 (  0.01%)           397306 (  0.00%)     95.41
   bgp              639 (  0.00%)           137594 (  0.00%)    215.33
   napster          216 (  0.00%)            21405 (  0.00%)     99.10
   realaud          497 (  0.00%)            33237 (  0.00%)     66.88
   rtsp            3314 (  0.01%)          3069928 (  0.01%)    926.35
   icecast        53382 (  0.08%)         42057047 (  0.10%)    787.85
   hotline           31 (  0.00%)             3161 (  0.00%)    101.97
   other       10303024 ( 16.36%)       7513835902 ( 18.22%)    729.28
  udp           3559886 (  5.65%)       1669129254 (  4.05%)    468.87
   dns           625676 (  0.99%)        156634015 (  0.38%)    250.34
   rip                2 (  0.00%)              160 (  0.00%)     80.00
   realaud           26 (  0.00%)             3534 (  0.00%)    135.92
   halflif           88 (  0.00%)            14141 (  0.00%)    160.69
   starcra           22 (  0.00%)             4236 (  0.00%)    192.55
   everque          345 (  0.00%)           109231 (  0.00%)    316.61
   unreal            62 (  0.00%)            15447 (  0.00%)    249.15
   quake             21 (  0.00%)             2718 (  0.00%)    129.43
   cuseeme            6 (  0.00%)              508 (  0.00%)     84.67
   other        2932409 (  4.66%)       1512254053 (  3.67%)    515.70
  icmp         15433986 ( 24.50%)        997755816 (  2.42%)     64.65
  ipip              184 (  0.00%)            19160 (  0.00%)    104.13
  ipsec            6485 (  0.01%)          1852718 (  0.00%)    285.69
  ip6           2140967 (  3.40%)       1965708983 (  4.77%)    918.14
  pim                63 (  0.00%)             3780 (  0.00%)     60.00
  other           15182 (  0.02%)          4394375 (  0.01%)    289.45
  frag             2747 (  0.00%)          2187299 (  0.01%)    796.25
 ip6            1907574 (  3.03%)       1672867776 (  4.06%)    876.96
  tcp6          1788629 (  2.84%)       1640898827 (  3.98%)    917.41
   http(s)      1304915 (  2.07%)       1563239256 (  3.79%)   1197.96
   http(c)       225596 (  0.36%)         20462898 (  0.05%)     90.71
   squid             28 (  0.00%)             2392 (  0.00%)     85.43
   smtp             207 (  0.00%)           118099 (  0.00%)    570.53
   ftp              139 (  0.00%)            21016 (  0.00%)    151.19
   pop3              16 (  0.00%)             1395 (  0.00%)     87.19
   imap              89 (  0.00%)            26626 (  0.00%)    299.17
   ssh            26946 (  0.04%)         14597708 (  0.04%)    541.74
   dns              288 (  0.00%)            71269 (  0.00%)    247.46
   bgp              104 (  0.00%)            31508 (  0.00%)    302.96
   other         230301 (  0.37%)         42326660 (  0.10%)    183.79
  udp6            95029 (  0.15%)         28036143 (  0.07%)    295.03
   dns            81908 (  0.13%)         19939631 (  0.05%)    243.44
   realaud            2 (  0.00%)              236 (  0.00%)    118.00
   halflif            1 (  0.00%)              165 (  0.00%)    165.00
   starcra            1 (  0.00%)              103 (  0.00%)    103.00
   everque            6 (  0.00%)              570 (  0.00%)     95.00
   other          13111 (  0.02%)          8095438 (  0.02%)    617.45
  icmp6           22763 (  0.04%)          2851788 (  0.01%)    125.28
  ip6                84 (  0.00%)            11462 (  0.00%)    136.45
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           1039 (  0.00%)          1065476 (  0.00%)   1025.48


tcpdump file: 201206071400.dump.gz (1421.39 MB)