Traffic Trace Info


DumpFile: 201302031400.dump
FileSize: 2179.12MB
Id: 201302031400
StartTime: Sun Feb 3 14:00:00 2013
EndTime: Sun Feb 3 14:15:00 2013
TotalTime: 899.63 seconds
TotalCapSize: 1653.08MB CapLen: 96 bytes
# of packets: 34474100 (12845.70MB)
AvgRate: 119.75Mbps stddev:21.35M

IP flow (unique src/dst pair) Information

# of flows: 12391150 (avg. 2.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 4.4% 2.8% 1.6% 1.4% 1.3% 1.3% 1.3% 1.0% 1.0%

IP address Information

# of IPv4 addresses: 9649685
Top 10 bandwidth usage (bytes/total in %):
11.5% 9.5% 7.2% 6.1% 5.3% 5.2% 4.7% 3.1% 3.0% 2.7%
# of IPv6 addresses: 9572
Top 10 bandwidth usage (bytes/total in %):
14.8% 11.0% 11.0% 7.6% 5.5% 5.2% 4.1% 3.7% 3.6% 3.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   18645416
 [   64-  127]:    5941402
 [  128-  255]:     596713
 [  256-  511]:     632684
 [  512- 1023]:     711415
 [ 1024- 2047]:    7946470


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         34474100 (100.00%)      13469692178 (100.00%)    390.72
 ip            33615432 ( 97.51%)      12594748640 ( 93.50%)    374.67
  tcp          12191672 ( 35.36%)       8931737555 ( 66.31%)    732.61
   http(s)      5291111 ( 15.35%)       6104696053 ( 45.32%)   1153.76
   http(c)      3819249 ( 11.08%)        675829226 (  5.02%)    176.95
   squid          16437 (  0.05%)          6052174 (  0.04%)    368.20
   smtp           37231 (  0.11%)          6786020 (  0.05%)    182.27
   nntp              12 (  0.00%)              726 (  0.00%)     60.50
   ftp            49884 (  0.14%)         45084742 (  0.33%)    903.79
   pop3            1608 (  0.00%)           294671 (  0.00%)    183.25
   imap            2428 (  0.01%)           357239 (  0.00%)    147.13
   telnet          3827 (  0.01%)          1756083 (  0.01%)    458.87
   ssh           135116 (  0.39%)         13759172 (  0.10%)    101.83
   dns             1087 (  0.00%)            81274 (  0.00%)     74.77
   bgp              524 (  0.00%)           110026 (  0.00%)    209.97
   napster            2 (  0.00%)              120 (  0.00%)     60.00
   realaud            4 (  0.00%)              240 (  0.00%)     60.00
   rtsp               3 (  0.00%)              180 (  0.00%)     60.00
   icecast       324377 (  0.94%)        292685746 (  2.17%)    902.30
   hotline            3 (  0.00%)              186 (  0.00%)     62.00
   other        2508769 (  7.28%)       1784243677 ( 13.25%)    711.20
  udp           3869390 ( 11.22%)       1821794126 ( 13.53%)    470.82
   dns           989137 (  2.87%)        718657274 (  5.34%)    726.55
   rip                4 (  0.00%)              264 (  0.00%)     66.00
   realaud            5 (  0.00%)              397 (  0.00%)     79.40
   halflif        12182 (  0.04%)          1861419 (  0.01%)    152.80
   starcra           46 (  0.00%)             5405 (  0.00%)    117.50
   everque           42 (  0.00%)             7036 (  0.00%)    167.52
   unreal             4 (  0.00%)              540 (  0.00%)    135.00
   quake             11 (  0.00%)             1421 (  0.00%)    129.18
   cuseeme           19 (  0.00%)             1430 (  0.00%)     75.26
   other        2867699 (  8.32%)       1101017214 (  8.17%)    383.94
  icmp         17139662 ( 49.72%)       1704532740 ( 12.65%)     99.45
  ipip              184 (  0.00%)            19160 (  0.00%)    104.13
  ipsec           65167 (  0.19%)         32034850 (  0.24%)    491.58
  ip6            294118 (  0.85%)         89855416 (  0.67%)    305.51
  other           55239 (  0.16%)         14774793 (  0.11%)    267.47
  frag           509134 (  1.48%)        631334913 (  4.69%)   1240.02
 ip6             858668 (  2.49%)        874943538 (  6.50%)   1018.95
  tcp6           543817 (  1.58%)        558113146 (  4.14%)   1026.29
   http(s)       410299 (  1.19%)        405087312 (  3.01%)    987.30
   http(c)        10824 (  0.03%)          2071517 (  0.02%)    191.38
   smtp             653 (  0.00%)           187222 (  0.00%)    286.71
   ftp               66 (  0.00%)             5876 (  0.00%)     89.03
   dns              227 (  0.00%)            38680 (  0.00%)    170.40
   bgp              107 (  0.00%)            34506 (  0.00%)    322.49
   other         121641 (  0.35%)        150688033 (  1.12%)   1238.79
  udp6            50212 (  0.15%)         14685525 (  0.11%)    292.47
   dns            42410 (  0.12%)         13371001 (  0.10%)    315.28
   cuseeme            1 (  0.00%)               99 (  0.00%)     99.00
   other           7801 (  0.02%)          1314425 (  0.01%)    168.49
  icmp6           17701 (  0.05%)          2606494 (  0.02%)    147.25
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6         246907 (  0.72%)        299534157 (  2.22%)   1213.15


tcpdump file: 201302031400.dump.gz (742.38 MB)