Traffic Trace Info


DumpFile: 201206081400.dump
FileSize: 3194.85MB
Id: 201206081400
StartTime: Fri Jun 8 14:00:00 2012
EndTime: Fri Jun 8 14:15:00 2012
TotalTime: 899.45 seconds
TotalCapSize: -1618.83MB CapLen: 96 bytes
# of packets: 47033626 (26990.91MB)
AvgRate: 251.73Mbps stddev:57.17M

IP flow (unique src/dst pair) Information

# of flows: 11247352 (avg. 4.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.6% 4.3% 2.8% 2.1% 2.0% 1.2% 1.2% 1.0% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 8747496
Top 10 bandwidth usage (bytes/total in %):
13.0% 12.3% 9.9% 7.8% 7.7% 4.7% 4.5% 3.3% 3.0% 2.9%
# of IPv6 addresses: 8496
Top 10 bandwidth usage (bytes/total in %):
29.0% 13.0% 5.5% 4.0% 3.9% 3.6% 3.4% 3.0% 2.3% 2.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   19437608
 [   64-  127]:    7712045
 [  128-  255]:     958518
 [  256-  511]:     839242
 [  512- 1023]:     835067
 [ 1024- 2047]:   17251146


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         47033626 (100.00%)      28302019275 (100.00%)    601.74
 ip            45438305 ( 96.61%)      27081492114 ( 95.69%)    596.01
  tcp          25406675 ( 54.02%)      23636898186 ( 83.52%)    930.34
   http(s)     15871443 ( 33.74%)      20991584795 ( 74.17%)   1322.60
   http(c)      7603435 ( 16.17%)       1466153180 (  5.18%)    192.83
   squid          75985 (  0.16%)         63181752 (  0.22%)    831.50
   smtp           57390 (  0.12%)         20457343 (  0.07%)    356.46
   ftp            31565 (  0.07%)          3249493 (  0.01%)    102.95
   pop3           14032 (  0.03%)         14572180 (  0.05%)   1038.50
   imap             951 (  0.00%)           132136 (  0.00%)    138.94
   telnet          9221 (  0.02%)           683879 (  0.00%)     74.17
   ssh            23109 (  0.05%)          5488202 (  0.02%)    237.49
   dns             2014 (  0.00%)           291348 (  0.00%)    144.66
   bgp              643 (  0.00%)           124926 (  0.00%)    194.29
   napster          937 (  0.00%)            63154 (  0.00%)     67.40
   realaud           17 (  0.00%)             8541 (  0.00%)    502.41
   rtsp           25120 (  0.05%)          8847682 (  0.03%)    352.22
   icecast        18419 (  0.04%)         13654420 (  0.05%)    741.32
   hotline            3 (  0.00%)              194 (  0.00%)     64.67
   other        1672391 (  3.56%)       1048404961 (  3.70%)    626.89
  udp           2702904 (  5.75%)        960366555 (  3.39%)    355.31
   dns           689023 (  1.46%)        237265961 (  0.84%)    344.35
   rip               17 (  0.00%)             1224 (  0.00%)     72.00
   realaud            9 (  0.00%)              716 (  0.00%)     79.56
   halflif           63 (  0.00%)             9053 (  0.00%)    143.70
   starcra           20 (  0.00%)             1740 (  0.00%)     87.00
   everque         8502 (  0.02%)          7699986 (  0.03%)    905.67
   unreal            16 (  0.00%)             1397 (  0.00%)     87.31
   quake             38 (  0.00%)             3307 (  0.00%)     87.03
   cuseeme            3 (  0.00%)              267 (  0.00%)     89.00
   other        2005133 (  4.26%)        715337072 (  2.53%)    356.75
  icmp         15408767 ( 32.76%)       1005704091 (  3.55%)     65.27
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec           38981 (  0.08%)         10889102 (  0.04%)    279.34
  ip6           1821304 (  3.87%)       1396119286 (  4.93%)    766.55
  pim                14 (  0.00%)              840 (  0.00%)     60.00
  other           59475 (  0.13%)         71494784 (  0.25%)   1202.10
  frag            79476 (  0.17%)         99903089 (  0.35%)   1257.02
 ip6            1595321 (  3.39%)       1220527161 (  4.31%)    765.07
  tcp6          1470722 (  3.13%)       1190493498 (  4.21%)    809.46
   http(s)      1039313 (  2.21%)       1130059075 (  3.99%)   1087.31
   http(c)       220831 (  0.47%)         21068837 (  0.07%)     95.41
   smtp            1304 (  0.00%)           510614 (  0.00%)    391.58
   ftp               35 (  0.00%)             3217 (  0.00%)     91.91
   dns              220 (  0.00%)            40289 (  0.00%)    183.13
   bgp              101 (  0.00%)            34342 (  0.00%)    340.02
   other         208918 (  0.44%)         38777124 (  0.14%)    185.61
  udp6            94743 (  0.20%)         25480721 (  0.09%)    268.95
   dns            83984 (  0.18%)         21997441 (  0.08%)    261.92
   realaud            1 (  0.00%)              104 (  0.00%)    104.00
   starcra            1 (  0.00%)              114 (  0.00%)    114.00
   quake              1 (  0.00%)              103 (  0.00%)    103.00
   cuseeme            1 (  0.00%)              109 (  0.00%)    109.00
   other          10755 (  0.02%)          3482850 (  0.01%)    323.84
  icmp6           28569 (  0.06%)          3342153 (  0.01%)    116.99
  ip6                82 (  0.00%)            11176 (  0.00%)    136.29
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           1175 (  0.00%)          1195533 (  0.00%)   1017.47


tcpdump file: 201206081400.dump.gz (1041.18 MB)