Traffic Trace Info


DumpFile: 201212081400.dump
FileSize: 1681.85MB
Id: 201212081400
StartTime: Sat Dec 8 14:00:01 2012
EndTime: Sat Dec 8 14:15:00 2012
TotalTime: 899.51 seconds
TotalCapSize: 1331.69MB CapLen: 96 bytes
# of packets: 22948034 (18595.80MB)
AvgRate: 173.40Mbps stddev:45.82M

IP flow (unique src/dst pair) Information

# of flows: 1955221 (avg. 11.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 4.4% 2.7% 1.8% 1.8% 1.5% 1.4% 1.4% 1.4% 1.3%

IP address Information

# of IPv4 addresses: 1460168
Top 10 bandwidth usage (bytes/total in %):
16.2% 6.8% 6.3% 5.7% 4.7% 4.7% 3.9% 3.7% 3.0% 2.9%
# of IPv6 addresses: 11308
Top 10 bandwidth usage (bytes/total in %):
12.4% 12.4% 9.9% 7.8% 7.8% 7.1% 5.2% 4.5% 4.2% 3.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:    3490969
 [   64-  127]:    5183397
 [  128-  255]:     562213
 [  256-  511]:     638839
 [  512- 1023]:     881798
 [ 1024- 2047]:   12190818


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         22948034 (100.00%)      19499106056 (100.00%)    849.71
 ip            21500155 ( 93.69%)      18144100900 ( 93.05%)    843.91
  tcp          17269047 ( 75.25%)      16592301786 ( 85.09%)    960.81
   http(s)      9199129 ( 40.09%)      11823128640 ( 60.63%)   1285.24
   http(c)      4227408 ( 18.42%)       1615301331 (  8.28%)    382.10
   squid          22477 (  0.10%)         10334000 (  0.05%)    459.76
   smtp           57190 (  0.25%)         17470389 (  0.09%)    305.48
   nntp               1 (  0.00%)               60 (  0.00%)     60.00
   ftp            26225 (  0.11%)         16700844 (  0.09%)    636.83
   pop3            1886 (  0.01%)           482338 (  0.00%)    255.75
   imap            3274 (  0.01%)           406916 (  0.00%)    124.29
   telnet         44138 (  0.19%)          4757309 (  0.02%)    107.78
   ssh            24712 (  0.11%)          4991714 (  0.03%)    202.00
   dns             2077 (  0.01%)           556640 (  0.00%)    268.00
   bgp              515 (  0.00%)           106088 (  0.00%)    206.00
   napster           20 (  0.00%)             2406 (  0.00%)    120.30
   realaud           13 (  0.00%)             1369 (  0.00%)    105.31
   rtsp               4 (  0.00%)              240 (  0.00%)     60.00
   icecast         1214 (  0.01%)           754311 (  0.00%)    621.34
   hotline            6 (  0.00%)             1084 (  0.00%)    180.67
   other        3658758 ( 15.94%)       3097306107 ( 15.88%)    846.55
  udp           2268716 (  9.89%)       1288900820 (  6.61%)    568.12
   dns           734075 (  3.20%)        488670474 (  2.51%)    665.70
   rip                5 (  0.00%)              320 (  0.00%)     64.00
   realaud           23 (  0.00%)             1786 (  0.00%)     77.65
   halflif            6 (  0.00%)              525 (  0.00%)     87.50
   starcra           21 (  0.00%)             3436 (  0.00%)    163.62
   everque          221 (  0.00%)            26954 (  0.00%)    121.96
   unreal             3 (  0.00%)              377 (  0.00%)    125.67
   quake             22 (  0.00%)             2870 (  0.00%)    130.45
   other        1533887 (  6.68%)        799672420 (  4.10%)    521.34
  icmp          1471688 (  6.41%)         99707591 (  0.51%)     67.75
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec            9279 (  0.04%)          3960886 (  0.02%)    426.87
  ip6            435249 (  1.90%)        145678753 (  0.75%)    334.70
  pim                76 (  0.00%)             4560 (  0.00%)     60.00
  other           45915 (  0.20%)         13527234 (  0.07%)    294.61
  frag           419682 (  1.83%)        437839192 (  2.25%)   1043.26
 ip6            1447879 (  6.31%)       1355005156 (  6.95%)    935.86
  tcp6          1289947 (  5.62%)       1288252240 (  6.61%)    998.69
   http(s)       870731 (  3.79%)        932970484 (  4.78%)   1071.48
   http(c)       160489 (  0.70%)         20768408 (  0.11%)    129.41
   smtp             173 (  0.00%)            80593 (  0.00%)    465.86
   ftp             3499 (  0.02%)          1528196 (  0.01%)    436.75
   ssh               12 (  0.00%)             1008 (  0.00%)     84.00
   dns              682 (  0.00%)           284068 (  0.00%)    416.52
   bgp               96 (  0.00%)            25710 (  0.00%)    267.81
   hotline            4 (  0.00%)              308 (  0.00%)     77.00
   other         254261 (  1.11%)        332593465 (  1.71%)   1308.08
  udp6           111147 (  0.48%)         58576343 (  0.30%)    527.02
   dns            52156 (  0.23%)         17132338 (  0.09%)    328.48
   starcra            3 (  0.00%)              276 (  0.00%)     92.00
   quake              1 (  0.00%)               99 (  0.00%)     99.00
   other          58987 (  0.26%)         41443630 (  0.21%)    702.59
  icmp6           43105 (  0.19%)          4232635 (  0.02%)     98.19
  ip6                84 (  0.00%)            11412 (  0.00%)    135.86
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6           3565 (  0.02%)          3928310 (  0.02%)   1101.91


tcpdump file: 201212081400.dump.gz (516.25 MB)