Traffic Trace Info


DumpFile: 201206201400.dump
FileSize: 2779.46MB
Id: 201206201400
StartTime: Wed Jun 20 14:00:01 2012
EndTime: Wed Jun 20 14:15:00 2012
TotalTime: 899.67 seconds
TotalCapSize: -1899.10MB CapLen: 96 bytes
# of packets: 38178446 (31594.11MB)
AvgRate: 294.54Mbps stddev:42.21M

IP flow (unique src/dst pair) Information

# of flows: 1780656 (avg. 21.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.1% 2.8% 2.2% 2.1% 1.8% 1.8% 1.5% 1.2% 1.2% 1.2%

IP address Information

# of IPv4 addresses: 1391476
Top 10 bandwidth usage (bytes/total in %):
10.8% 8.6% 7.8% 7.6% 5.9% 3.9% 3.4% 3.1% 2.9% 2.5%
# of IPv6 addresses: 8264
Top 10 bandwidth usage (bytes/total in %):
52.6% 31.8% 8.6% 5.8% 5.0% 5.0% 2.0% 2.0% 1.8% 1.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    6174697
 [   64-  127]:    7892098
 [  128-  255]:    1255939
 [  256-  511]:     940401
 [  512- 1023]:     830371
 [ 1024- 2047]:   21084940


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         38178446 (100.00%)      33128822162 (100.00%)    867.74
 ip            36167949 ( 94.73%)      31248464354 ( 94.32%)    863.98
  tcp          28149314 ( 73.73%)      27019777516 ( 81.56%)    959.87
   http(s)     16042637 ( 42.02%)      21671215568 ( 65.41%)   1350.85
   http(c)      8008727 ( 20.98%)       1926016486 (  5.81%)    240.49
   squid          75510 (  0.20%)         51152973 (  0.15%)    677.43
   smtp           84103 (  0.22%)         32319986 (  0.10%)    384.29
   nntp              35 (  0.00%)             2100 (  0.00%)     60.00
   ftp            30496 (  0.08%)          7391472 (  0.02%)    242.38
   pop3            5883 (  0.02%)          2804423 (  0.01%)    476.70
   imap            6244 (  0.02%)          5660500 (  0.02%)    906.55
   telnet          8909 (  0.02%)           674267 (  0.00%)     75.68
   ssh            28186 (  0.07%)          5293446 (  0.02%)    187.80
   dns             4153 (  0.01%)           395713 (  0.00%)     95.28
   bgp              971 (  0.00%)           132709 (  0.00%)    136.67
   napster           19 (  0.00%)             3294 (  0.00%)    173.37
   realaud           36 (  0.00%)             2160 (  0.00%)     60.00
   rtsp            8114 (  0.02%)          7804129 (  0.02%)    961.81
   icecast        10902 (  0.03%)           719241 (  0.00%)     65.97
   other        3834388 ( 10.04%)       3308188989 (  9.99%)    862.77
  udp           4488140 ( 11.76%)       2379628020 (  7.18%)    530.20
   dns           671324 (  1.76%)        171538271 (  0.52%)    255.52
   rip                1 (  0.00%)               72 (  0.00%)     72.00
   realaud           23 (  0.00%)             4185 (  0.00%)    181.96
   halflif           65 (  0.00%)            12752 (  0.00%)    196.18
   starcra           16 (  0.00%)             2757 (  0.00%)    172.31
   everque          258 (  0.00%)            40193 (  0.00%)    155.79
   unreal            83 (  0.00%)            38643 (  0.00%)    465.58
   quake             29 (  0.00%)             3572 (  0.00%)    123.17
   cuseeme           11 (  0.00%)             1874 (  0.00%)    170.36
   other        3754256 (  9.83%)       2204200362 (  6.65%)    587.12
  icmp          1450954 (  3.80%)        138374438 (  0.42%)     95.37
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec           16764 (  0.04%)          6965096 (  0.02%)    415.48
  ip6           2043239 (  5.35%)       1698571304 (  5.13%)    831.31
  pim                25 (  0.00%)             1500 (  0.00%)     60.00
  other           19328 (  0.05%)          5127210 (  0.02%)    265.27
  frag           127105 (  0.33%)         97657012 (  0.29%)    768.32
 ip6            2010497 (  5.27%)       1880357808 (  5.68%)    935.27
  tcp6          1889947 (  4.95%)       1850558826 (  5.59%)    979.16
   http(s)      1391042 (  3.64%)       1747899832 (  5.28%)   1256.54
   http(c)       159899 (  0.42%)         15812505 (  0.05%)     98.89
   squid              3 (  0.00%)              246 (  0.00%)     82.00
   smtp             487 (  0.00%)           205829 (  0.00%)    422.65
   ftp              175 (  0.00%)            18544 (  0.00%)    105.97
   pop3            9351 (  0.02%)         14138421 (  0.04%)   1511.97
   dns              221 (  0.00%)            74744 (  0.00%)    338.21
   bgp               93 (  0.00%)            25259 (  0.00%)    271.60
   other         328676 (  0.86%)         72383446 (  0.22%)    220.23
  udp6            99792 (  0.26%)         25772219 (  0.08%)    258.26
   dns            91655 (  0.24%)         22922564 (  0.07%)    250.10
   realaud            1 (  0.00%)              107 (  0.00%)    107.00
   halflif            1 (  0.00%)              107 (  0.00%)    107.00
   everque            2 (  0.00%)              208 (  0.00%)    104.00
   other           8133 (  0.02%)          2849233 (  0.01%)    350.33
  icmp6           19405 (  0.05%)          2761559 (  0.01%)    142.31
  ip6                82 (  0.00%)            11176 (  0.00%)    136.29
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           1241 (  0.00%)          1249948 (  0.00%)   1007.21


tcpdump file: 201206201400.dump.gz (872.67 MB)