Traffic Trace Info


DumpFile: 201206191400.dump
FileSize: 2320.35MB
Id: 201206191400
StartTime: Tue Jun 19 14:00:01 2012
EndTime: Tue Jun 19 14:15:00 2012
TotalTime: 899.72 seconds
TotalCapSize: 1842.14MB CapLen: 96 bytes
# of packets: 31339264 (22195.54MB)
AvgRate: 206.88Mbps stddev:36.61M

IP flow (unique src/dst pair) Information

# of flows: 1728983 (avg. 18.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 1.7% 1.4% 1.1% 1.0% 0.8% 0.8% 0.8% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 1348435
Top 10 bandwidth usage (bytes/total in %):
9.8% 9.7% 7.2% 4.8% 4.1% 3.5% 3.5% 3.4% 2.5% 2.5%
# of IPv6 addresses: 8775
Top 10 bandwidth usage (bytes/total in %):
10.7% 8.2% 6.9% 5.6% 5.5% 4.4% 4.4% 4.2% 3.3% 2.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6737451
 [   64-  127]:    7522431
 [  128-  255]:     887977
 [  256-  511]:     847099
 [  512- 1023]:     817799
 [ 1024- 2047]:   14526507


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         31339264 (100.00%)      23273715175 (100.00%)    742.64
 ip            29340845 ( 93.62%)      21559761120 ( 92.64%)    734.80
  tcp          24522284 ( 78.25%)      19526046474 ( 83.90%)    796.26
   http(s)     12623755 ( 40.28%)      16322344690 ( 70.13%)   1292.99
   http(c)      9362597 ( 29.87%)       1373818903 (  5.90%)    146.73
   squid          33381 (  0.11%)         16017797 (  0.07%)    479.85
   smtp           59945 (  0.19%)         23109764 (  0.10%)    385.52
   nntp              11 (  0.00%)              688 (  0.00%)     62.55
   ftp            22719 (  0.07%)          2575260 (  0.01%)    113.35
   pop3            2933 (  0.01%)          1162893 (  0.00%)    396.49
   imap            2179 (  0.01%)           231564 (  0.00%)    106.27
   telnet          8203 (  0.03%)           626590 (  0.00%)     76.39
   ssh            29101 (  0.09%)          5449156 (  0.02%)    187.25
   dns             7491 (  0.02%)          2278865 (  0.01%)    304.21
   bgp              841 (  0.00%)           142670 (  0.00%)    169.64
   napster           92 (  0.00%)             7061 (  0.00%)     76.75
   realaud           42 (  0.00%)             3016 (  0.00%)     71.81
   rtsp            4495 (  0.01%)          6094398 (  0.03%)   1355.82
   icecast        12743 (  0.04%)         10766225 (  0.05%)    844.87
   hotline            3 (  0.00%)              198 (  0.00%)     66.00
   other        2351751 (  7.50%)       1761416364 (  7.57%)    748.98
  udp           1724388 (  5.50%)        606730556 (  2.61%)    351.85
   dns           566809 (  1.81%)        151547312 (  0.65%)    267.37
   realaud            7 (  0.00%)             1341 (  0.00%)    191.57
   halflif           40 (  0.00%)             5026 (  0.00%)    125.65
   starcra           38 (  0.00%)             4940 (  0.00%)    130.00
   everque         3005 (  0.01%)          2984052 (  0.01%)    993.03
   unreal            33 (  0.00%)             6927 (  0.00%)    209.91
   quake              9 (  0.00%)             1123 (  0.00%)    124.78
   cuseeme            2 (  0.00%)              179 (  0.00%)     89.50
   other        1154248 (  3.68%)        452120382 (  1.94%)    391.70
  icmp          1495054 (  4.77%)        154729645 (  0.66%)    103.49
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec            5572 (  0.02%)          1535080 (  0.01%)    275.50
  ip6           1576287 (  5.03%)       1267376956 (  5.45%)    804.03
  pim                21 (  0.00%)             1260 (  0.00%)     60.00
  other           17054 (  0.05%)          3321879 (  0.01%)    194.79
  frag             2374 (  0.01%)          2538053 (  0.01%)   1069.10
 ip6            1998419 (  6.38%)       1713954055 (  7.36%)    857.66
  tcp6          1832325 (  5.85%)       1675798718 (  7.20%)    914.58
   http(s)      1298123 (  4.14%)       1474205150 (  6.33%)   1135.64
   http(c)       228995 (  0.73%)         22215390 (  0.10%)     97.01
   smtp              71 (  0.00%)            16085 (  0.00%)    226.55
   ftp              189 (  0.00%)            21992 (  0.00%)    116.36
   ssh            11585 (  0.04%)          1030130 (  0.00%)     88.92
   dns              118 (  0.00%)            41632 (  0.00%)    352.81
   bgp               90 (  0.00%)            24703 (  0.00%)    274.48
   other         293154 (  0.94%)        178243636 (  0.77%)    608.02
  udp6           134453 (  0.43%)         32685668 (  0.14%)    243.10
   dns           110316 (  0.35%)         24410428 (  0.10%)    221.28
   realaud            1 (  0.00%)              107 (  0.00%)    107.00
   halflif            1 (  0.00%)              112 (  0.00%)    112.00
   quake              2 (  0.00%)              211 (  0.00%)    105.50
   other          24133 (  0.08%)          8274810 (  0.04%)    342.88
  icmp6           27859 (  0.09%)          3696017 (  0.02%)    132.67
  ip6                84 (  0.00%)            11462 (  0.00%)    136.45
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           3668 (  0.01%)          1758110 (  0.01%)    479.31


tcpdump file: 201206191400.dump.gz (744.31 MB)