Traffic Trace Info


DumpFile: 201206091400.dump
FileSize: 3152.79MB
Id: 201206091400
StartTime: Sat Jun 9 14:00:01 2012
EndTime: Sat Jun 9 14:15:00 2012
TotalTime: 899.58 seconds
TotalCapSize: -1665.43MB CapLen: 96 bytes
# of packets: 47330407 (27892.55MB)
AvgRate: 260.10Mbps stddev:47.82M

IP flow (unique src/dst pair) Information

# of flows: 11331320 (avg. 4.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 3.3% 2.6% 2.2% 2.0% 1.5% 1.2% 1.2% 1.2% 1.1%

IP address Information

# of IPv4 addresses: 8871204
Top 10 bandwidth usage (bytes/total in %):
23.1% 9.7% 7.9% 5.2% 4.5% 4.2% 3.9% 3.4% 3.2% 3.1%
# of IPv6 addresses: 6543
Top 10 bandwidth usage (bytes/total in %):
11.8% 9.4% 7.7% 4.3% 4.2% 4.2% 4.1% 4.1% 2.6% 2.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   20330092
 [   64-  127]:    6809369
 [  128-  255]:     690662
 [  256-  511]:     710907
 [  512- 1023]:     608728
 [ 1024- 2047]:   18180649


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         47330407 (100.00%)      29247454419 (100.00%)    617.94
 ip            46622071 ( 98.50%)      28804634434 ( 98.49%)    617.83
  tcp          24859550 ( 52.52%)      23692730455 ( 81.01%)    953.06
   http(s)     13411168 ( 28.34%)      17479299976 ( 59.76%)   1303.34
   http(c)      7948548 ( 16.79%)       3647944056 ( 12.47%)    458.94
   squid          29013 (  0.06%)         20515447 (  0.07%)    707.11
   smtp           44953 (  0.09%)         11034427 (  0.04%)    245.47
   nntp              14 (  0.00%)              868 (  0.00%)     62.00
   ftp            24942 (  0.05%)          2824003 (  0.01%)    113.22
   pop3            1355 (  0.00%)           367714 (  0.00%)    271.38
   imap            2013 (  0.00%)           262299 (  0.00%)    130.30
   telnet          7434 (  0.02%)           564970 (  0.00%)     76.00
   ssh            94037 (  0.20%)         15786464 (  0.05%)    167.88
   dns             3055 (  0.01%)          1985634 (  0.01%)    649.96
   bgp              661 (  0.00%)           137042 (  0.00%)    207.33
   napster          207 (  0.00%)            13295 (  0.00%)     64.23
   realaud           62 (  0.00%)             5186 (  0.00%)     83.65
   rtsp            6808 (  0.01%)          7711758 (  0.03%)   1132.75
   icecast        14168 (  0.03%)         11781130 (  0.04%)    831.53
   hotline           49 (  0.00%)             5790 (  0.00%)    118.16
   other        3271061 (  6.91%)       2492490232 (  8.52%)    761.98
  udp           4320249 (  9.13%)       2620057858 (  8.96%)    606.46
   dns           483245 (  1.02%)        107588815 (  0.37%)    222.64
   rip                1 (  0.00%)               72 (  0.00%)     72.00
   realaud            3 (  0.00%)              234 (  0.00%)     78.00
   halflif           48 (  0.00%)             6703 (  0.00%)    139.65
   starcra           15 (  0.00%)             1910 (  0.00%)    127.33
   everque          143 (  0.00%)            24946 (  0.00%)    174.45
   unreal            12 (  0.00%)             1891 (  0.00%)    157.58
   quake             14 (  0.00%)             1382 (  0.00%)     98.71
   cuseeme            8 (  0.00%)              614 (  0.00%)     76.75
   other        3836533 (  8.11%)       2512397330 (  8.59%)    654.86
  icmp         15832931 ( 33.45%)       1022867240 (  3.50%)     64.60
  ipip              184 (  0.00%)            19160 (  0.00%)    104.13
  ipsec            3463 (  0.01%)          1065594 (  0.00%)    307.71
  ip6           1591472 (  3.36%)       1464651130 (  5.01%)    920.31
  pim                10 (  0.00%)              600 (  0.00%)     60.00
  other           14212 (  0.03%)          3242397 (  0.01%)    228.15
  frag             2403 (  0.01%)          1841128 (  0.01%)    766.18
 ip6             708336 (  1.50%)        442819985 (  1.51%)    625.16
  tcp6           608713 (  1.29%)        417143585 (  1.43%)    685.29
   http(s)       347520 (  0.73%)        373480625 (  1.28%)   1074.70
   http(c)       145689 (  0.31%)         14395917 (  0.05%)     98.81
   smtp              61 (  0.00%)            26080 (  0.00%)    427.54
   ftp              205 (  0.00%)            23523 (  0.00%)    114.75
   dns              193 (  0.00%)            47939 (  0.00%)    248.39
   bgp               99 (  0.00%)            29950 (  0.00%)    302.53
   other         114946 (  0.24%)         29139551 (  0.10%)    253.51
  udp6            73885 (  0.16%)         19614869 (  0.07%)    265.48
   dns            55706 (  0.12%)         13181005 (  0.05%)    236.62
   everque            4 (  0.00%)              435 (  0.00%)    108.75
   quake              2 (  0.00%)              209 (  0.00%)    104.50
   other          18173 (  0.04%)          6433220 (  0.02%)    354.00
  icmp6           21273 (  0.04%)          2739705 (  0.01%)    128.79
  ip6                82 (  0.00%)            11176 (  0.00%)    136.29
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           4353 (  0.01%)          3306570 (  0.01%)    759.61


tcpdump file: 201206091400.dump.gz (1021.43 MB)