Traffic Trace Info


DumpFile: 201206121400.dump
FileSize: 3800.60MB
Id: 201206121400
StartTime: Tue Jun 12 14:00:01 2012
EndTime: Tue Jun 12 14:15:00 2012
TotalTime: 899.83 seconds
TotalCapSize: -1132.32MB CapLen: 96 bytes
# of packets: 54848291 (33250.45MB)
AvgRate: 309.93Mbps stddev:54.81M

IP flow (unique src/dst pair) Information

# of flows: 11395526 (avg. 4.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 4.6% 2.3% 2.1% 1.8% 1.8% 1.8% 1.7% 1.5% 1.2%

IP address Information

# of IPv4 addresses: 8902486
Top 10 bandwidth usage (bytes/total in %):
7.2% 7.1% 6.6% 5.5% 5.1% 4.8% 4.7% 3.7% 3.5% 3.0%
# of IPv6 addresses: 8585
Top 10 bandwidth usage (bytes/total in %):
19.6% 10.1% 10.1% 8.5% 8.2% 4.5% 3.8% 3.7% 2.8% 2.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   19529808
 [   64-  127]:   10438501
 [  128-  255]:    1133477
 [  256-  511]:    1165788
 [  512- 1023]:    1091274
 [ 1024- 2047]:   21489443


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         54848291 (100.00%)      34865628660 (100.00%)    635.67
 ip            52804704 ( 96.27%)      33438669230 ( 95.91%)    633.25
  tcp          30966192 ( 56.46%)      28907485008 ( 82.91%)    933.52
   http(s)     18061790 ( 32.93%)      24192933703 ( 69.39%)   1339.45
   http(c)      8183539 ( 14.92%)       1223736486 (  3.51%)    149.54
   squid         113468 (  0.21%)        107299630 (  0.31%)    945.64
   smtp          103276 (  0.19%)         24637402 (  0.07%)    238.56
   ftp            25786 (  0.05%)          2893897 (  0.01%)    112.23
   pop3            4694 (  0.01%)          1896415 (  0.01%)    404.01
   imap            2185 (  0.00%)           273148 (  0.00%)    125.01
   telnet          9342 (  0.02%)           699632 (  0.00%)     74.89
   ssh           323469 (  0.59%)         55536580 (  0.16%)    171.69
   dns             1441 (  0.00%)           219745 (  0.00%)    152.49
   bgp              656 (  0.00%)           134549 (  0.00%)    205.11
   napster          186 (  0.00%)            12764 (  0.00%)     68.62
   realaud          113 (  0.00%)             9739 (  0.00%)     86.19
   rtsp           17014 (  0.03%)         19637041 (  0.06%)   1154.17
   icecast        25542 (  0.05%)         18498935 (  0.05%)    724.26
   hotline           33 (  0.00%)             2446 (  0.00%)     74.12
   other        4093656 (  7.46%)       3259062754 (  9.35%)    796.13
  udp           4135549 (  7.54%)       2151319181 (  6.17%)    520.20
   dns           668701 (  1.22%)        186803726 (  0.54%)    279.35
   rip                2 (  0.00%)              140 (  0.00%)     70.00
   realaud        12734 (  0.02%)          9117722 (  0.03%)    716.01
   halflif           36 (  0.00%)             4206 (  0.00%)    116.83
   starcra           39 (  0.00%)             6379 (  0.00%)    163.56
   everque        21901 (  0.04%)          2290631 (  0.01%)    104.59
   unreal            23 (  0.00%)             6847 (  0.00%)    297.70
   quake             38 (  0.00%)             4153 (  0.00%)    109.29
   cuseeme            6 (  0.00%)              486 (  0.00%)     81.00
   other        3358591 (  6.12%)       1948587407 (  5.59%)    580.18
  icmp         15837845 ( 28.88%)       1022013022 (  2.93%)     64.53
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec            8628 (  0.02%)          2557184 (  0.01%)    296.38
  ip6           1841937 (  3.36%)       1352706524 (  3.88%)    734.39
  pim                18 (  0.00%)             1080 (  0.00%)     60.00
  other           14350 (  0.03%)          2567961 (  0.01%)    178.95
  frag           173226 (  0.32%)        139834590 (  0.40%)    807.24
 ip6            2043587 (  3.73%)       1426959430 (  4.09%)    698.26
  tcp6          1887383 (  3.44%)       1363233929 (  3.91%)    722.29
   http(s)      1054168 (  1.92%)       1146377372 (  3.29%)   1087.47
   http(c)       328113 (  0.60%)         29933273 (  0.09%)     91.23
   squid              2 (  0.00%)              172 (  0.00%)     86.00
   smtp             432 (  0.00%)           189159 (  0.00%)    437.87
   ftp             1028 (  0.00%)           128927 (  0.00%)    125.42
   ssh               42 (  0.00%)             8289 (  0.00%)    197.36
   dns              241 (  0.00%)            49846 (  0.00%)    206.83
   bgp               94 (  0.00%)            27144 (  0.00%)    288.77
   other         503263 (  0.92%)        186519747 (  0.53%)    370.62
  udp6           129662 (  0.24%)         59438393 (  0.17%)    458.41
   dns            80936 (  0.15%)         20190847 (  0.06%)    249.47
   realaud            1 (  0.00%)              115 (  0.00%)    115.00
   halflif            1 (  0.00%)              117 (  0.00%)    117.00
   everque            1 (  0.00%)              110 (  0.00%)    110.00
   other          48723 (  0.09%)         39247204 (  0.11%)    805.52
  icmp6           25244 (  0.05%)          3125595 (  0.01%)    123.82
  ip6                83 (  0.00%)            11294 (  0.00%)    136.07
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           1185 (  0.00%)          1146139 (  0.00%)    967.21


tcpdump file: 201206121400.dump.gz (1245.08 MB)