Traffic Trace Info


DumpFile: 201207271400.dump
FileSize: 3803.35MB
Id: 201207271400
StartTime: Fri Jul 27 14:00:00 2012
EndTime: Fri Jul 27 14:15:00 2012
TotalTime: 900.03 seconds
TotalCapSize: -1166.84MB CapLen: 96 bytes
# of packets: 57290270 (34225.52MB)
AvgRate: 319.00Mbps stddev:61.41M

IP flow (unique src/dst pair) Information

# of flows: 11187019 (avg. 5.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.8% 3.5% 2.1% 1.1% 1.1% 0.9% 0.9% 0.9% 0.9% 0.9%

IP address Information

# of IPv4 addresses: 8808892
Top 10 bandwidth usage (bytes/total in %):
19.9% 15.7% 9.1% 5.0% 4.3% 4.3% 3.8% 3.6% 2.6% 2.5%
# of IPv6 addresses: 7121
Top 10 bandwidth usage (bytes/total in %):
22.4% 13.9% 5.7% 4.3% 4.0% 4.0% 3.4% 3.3% 3.2% 2.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   18769662
 [   64-  127]:    9631676
 [  128-  255]:    1511492
 [  256-  511]:     797369
 [  512- 1023]:    6203403
 [ 1024- 2047]:   20376668


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         57290270 (100.00%)      35888053699 (100.00%)    626.42
 ip            56673189 ( 98.92%)      35391527922 ( 98.62%)    624.48
  tcp          29433826 ( 51.38%)      27949393375 ( 77.88%)    949.57
   http(s)     16799080 ( 29.32%)      23104429525 ( 64.38%)   1375.34
   http(c)      8473841 ( 14.79%)       1609625443 (  4.49%)    189.95
   squid          53713 (  0.09%)         20074016 (  0.06%)    373.73
   smtp           62244 (  0.11%)         13045292 (  0.04%)    209.58
   ftp            19461 (  0.03%)          1952511 (  0.01%)    100.33
   pop3            5759 (  0.01%)          2125456 (  0.01%)    369.07
   imap           34934 (  0.06%)          2703174 (  0.01%)     77.38
   telnet          6405 (  0.01%)           480223 (  0.00%)     74.98
   ssh            23235 (  0.04%)          7486695 (  0.02%)    322.22
   dns             7953 (  0.01%)           745077 (  0.00%)     93.69
   bgp              545 (  0.00%)           130275 (  0.00%)    239.04
   napster           24 (  0.00%)             2728 (  0.00%)    113.67
   realaud          183 (  0.00%)            13502 (  0.00%)     73.78
   icecast          822 (  0.00%)           132413 (  0.00%)    161.09
   hotline           13 (  0.00%)             1362 (  0.00%)    104.77
   other        3945510 (  6.89%)       3186439443 (  8.88%)    807.61
  udp          10156417 ( 17.73%)       5364759277 ( 14.95%)    528.21
   dns           529415 (  0.92%)        198649321 (  0.55%)    375.22
   rip          6358732 ( 11.10%)       3087657672 (  8.60%)    485.58
   realaud           14 (  0.00%)             1068 (  0.00%)     76.29
   halflif         2255 (  0.00%)          2101423 (  0.01%)    931.89
   starcra           81 (  0.00%)             7708 (  0.00%)     95.16
   everque          203 (  0.00%)            42824 (  0.00%)    210.96
   unreal            31 (  0.00%)             3341 (  0.00%)    107.77
   quake             45 (  0.00%)             3810 (  0.00%)     84.67
   cuseeme            9 (  0.00%)             1022 (  0.00%)    113.56
   other        3265451 (  5.70%)       2076192559 (  5.79%)    635.81
  icmp         15845596 ( 27.66%)       1044993768 (  2.91%)     65.95
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec            4331 (  0.01%)           852146 (  0.00%)    196.76
  ip6           1186541 (  2.07%)       1017644601 (  2.84%)    857.66
  pim               126 (  0.00%)             7560 (  0.00%)     60.00
  other           46167 (  0.08%)         13857925 (  0.04%)    300.17
  frag           107249 (  0.19%)        113176788 (  0.32%)   1055.27
 ip6             617081 (  1.08%)        496525777 (  1.38%)    804.64
  tcp6           530718 (  0.93%)        471735515 (  1.31%)    888.86
   http(s)       405720 (  0.71%)        450127061 (  1.25%)   1109.45
   http(c)       108565 (  0.19%)          9899184 (  0.03%)     91.18
   smtp             933 (  0.00%)          1114079 (  0.00%)   1194.08
   ftp              164 (  0.00%)            17687 (  0.00%)    107.85
   dns              147 (  0.00%)            48657 (  0.00%)    331.00
   bgp              191 (  0.00%)            41122 (  0.00%)    215.30
   other          14998 (  0.03%)         10487725 (  0.03%)    699.27
  udp6            59843 (  0.10%)         20056120 (  0.06%)    335.15
   dns            57989 (  0.10%)         19832936 (  0.06%)    342.01
   other           1854 (  0.00%)           223184 (  0.00%)    120.38
  icmp6           25312 (  0.04%)          3674970 (  0.01%)    145.19
  ip6                84 (  0.00%)            11412 (  0.00%)    135.86
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6           1093 (  0.00%)          1043544 (  0.00%)    954.75


tcpdump file: 201207271400.dump.gz (1218.33 MB)