Traffic Trace Info


DumpFile: 201207311400.dump
FileSize: 3719.86MB
Id: 201207311400
StartTime: Tue Jul 31 14:00:01 2012
EndTime: Tue Jul 31 14:15:01 2012
TotalTime: 899.65 seconds
TotalCapSize: -1228.38MB CapLen: 96 bytes
# of packets: 55851904 (32812.01MB)
AvgRate: 305.89Mbps stddev:52.99M

IP flow (unique src/dst pair) Information

# of flows: 11274853 (avg. 4.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.2% 3.0% 2.3% 1.9% 1.3% 1.3% 1.1% 0.9% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 8818013
Top 10 bandwidth usage (bytes/total in %):
19.4% 18.1% 12.6% 4.5% 4.5% 3.0% 2.9% 2.9% 2.8% 2.8%
# of IPv6 addresses: 8841
Top 10 bandwidth usage (bytes/total in %):
23.5% 13.8% 8.4% 5.3% 3.8% 3.7% 3.2% 3.1% 3.0% 2.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   20057601
 [   64-  127]:    8711684
 [  128-  255]:    1823098
 [  256-  511]:     781661
 [  512- 1023]:    4403324
 [ 1024- 2047]:   20074536


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         55851904 (100.00%)      34405888763 (100.00%)    616.02
 ip            55155083 ( 98.75%)      33838474026 ( 98.35%)    613.52
  tcp          31101685 ( 55.69%)      28620086976 ( 83.18%)    920.21
   http(s)     14075098 ( 25.20%)      18765330480 ( 54.54%)   1333.23
   http(c)      7606866 ( 13.62%)       1437981007 (  4.18%)    189.04
   squid          30847 (  0.06%)         13854948 (  0.04%)    449.15
   smtp           62002 (  0.11%)         25275916 (  0.07%)    407.66
   ftp             4406 (  0.01%)           368015 (  0.00%)     83.53
   pop3            7977 (  0.01%)          3204118 (  0.01%)    401.67
   imap            3921 (  0.01%)          1104024 (  0.00%)    281.57
   telnet          6517 (  0.01%)           490806 (  0.00%)     75.31
   ssh          1255548 (  2.25%)        743703716 (  2.16%)    592.33
   dns             2775 (  0.00%)           286200 (  0.00%)    103.14
   bgp              551 (  0.00%)           140732 (  0.00%)    255.41
   napster           66 (  0.00%)             4350 (  0.00%)     65.91
   realaud            6 (  0.00%)             1099 (  0.00%)    183.17
   rtsp            5693 (  0.01%)          7643405 (  0.02%)   1342.60
   icecast        16229 (  0.03%)         15304747 (  0.04%)    943.05
   hotline           70 (  0.00%)             4988 (  0.00%)     71.26
   other        8023113 ( 14.36%)       7605388425 ( 22.10%)    947.93
  udp           7964532 ( 14.26%)       3725038207 ( 10.83%)    467.70
   dns           793312 (  1.42%)        371180224 (  1.08%)    467.89
   rip          4061515 (  7.27%)       1971682470 (  5.73%)    485.45
   realaud           19 (  0.00%)             2097 (  0.00%)    110.37
   halflif           69 (  0.00%)            10538 (  0.00%)    152.72
   starcra           86 (  0.00%)            12944 (  0.00%)    150.51
   everque          349 (  0.00%)            49213 (  0.00%)    141.01
   unreal            51 (  0.00%)             5798 (  0.00%)    113.69
   quake             39 (  0.00%)             3691 (  0.00%)     94.64
   cuseeme            5 (  0.00%)              464 (  0.00%)     92.80
   other        3101999 (  5.55%)       1381464235 (  4.02%)    445.35
  icmp         15067726 ( 26.98%)        975358927 (  2.83%)     64.73
  ipip              184 (  0.00%)            19160 (  0.00%)    104.13
  ipsec            1661 (  0.00%)           362558 (  0.00%)    218.28
  ip6            958872 (  1.72%)        495943896 (  1.44%)    517.22
  pim                89 (  0.00%)             5340 (  0.00%)     60.00
  other           60334 (  0.11%)         21658962 (  0.06%)    358.98
  frag           238152 (  0.43%)        258195241 (  0.75%)   1084.16
 ip6             696821 (  1.25%)        567414737 (  1.65%)    814.29
  tcp6           606251 (  1.09%)        542448034 (  1.58%)    894.76
   http(s)       441123 (  0.79%)        482560615 (  1.40%)   1093.94
   http(c)       120614 (  0.22%)         11206071 (  0.03%)     92.91
   squid              6 (  0.00%)             1512 (  0.00%)    252.00
   smtp              34 (  0.00%)            20762 (  0.00%)    610.65
   ftp              189 (  0.00%)            19876 (  0.00%)    105.16
   ssh              120 (  0.00%)            17536 (  0.00%)    146.13
   dns              125 (  0.00%)            43720 (  0.00%)    349.76
   bgp               91 (  0.00%)            29096 (  0.00%)    319.74
   other          43949 (  0.08%)         48548846 (  0.14%)   1104.66
  udp6            65097 (  0.12%)         20524337 (  0.06%)    315.29
   dns            61757 (  0.11%)         19892649 (  0.06%)    322.11
   starcra            1 (  0.00%)              113 (  0.00%)    113.00
   everque            1 (  0.00%)              105 (  0.00%)    105.00
   quake              2 (  0.00%)              224 (  0.00%)    112.00
   cuseeme            1 (  0.00%)              107 (  0.00%)    107.00
   other           3335 (  0.01%)           631139 (  0.00%)    189.25
  icmp6           24264 (  0.04%)          3382102 (  0.01%)    139.39
  ip6                86 (  0.00%)            11648 (  0.00%)    135.44
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6           1092 (  0.00%)          1044400 (  0.00%)    956.41


tcpdump file: 201207311400.dump.gz (1203.30 MB)