Traffic Trace Info


DumpFile: 201302091400.dump
FileSize: 3115.10MB
Id: 201302091400
StartTime: Sat Feb 9 14:00:01 2013
EndTime: Sat Feb 9 14:15:01 2013
TotalTime: 900.27 seconds
TotalCapSize: -1745.20MB CapLen: 96 bytes
# of packets: 50088448 (14247.79MB)
AvgRate: 132.75Mbps stddev:25.10M

IP flow (unique src/dst pair) Information

# of flows: 24919101 (avg. 2.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.3% 2.1% 1.9% 1.6% 1.4% 1.4% 1.3% 1.2% 1.2%

IP address Information

# of IPv4 addresses: 19617855
Top 10 bandwidth usage (bytes/total in %):
15.1% 8.7% 8.1% 6.4% 5.5% 4.2% 4.1% 3.2% 3.2% 2.6%
# of IPv6 addresses: 9024
Top 10 bandwidth usage (bytes/total in %):
14.6% 14.6% 11.9% 11.9% 7.5% 7.4% 4.8% 4.7% 3.3% 2.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   32052538
 [   64-  127]:    8287152
 [  128-  255]:     683724
 [  256-  511]:     466324
 [  512- 1023]:     573322
 [ 1024- 2047]:    8025388


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         50088448 (100.00%)      14939886997 (100.00%)    298.27
 ip            49043272 ( 97.91%)      13940107681 ( 93.31%)    284.24
  tcp          10900351 ( 21.76%)       8606118091 ( 57.60%)    789.53
   http(s)      5714158 ( 11.41%)       6571856658 ( 43.99%)   1150.10
   http(c)      3206197 (  6.40%)        574459482 (  3.85%)    179.17
   squid          27224 (  0.05%)         13741140 (  0.09%)    504.74
   smtp           36602 (  0.07%)          8600106 (  0.06%)    234.96
   nntp               6 (  0.00%)              360 (  0.00%)     60.00
   ftp             2359 (  0.00%)           182433 (  0.00%)     77.33
   pop3            2500 (  0.00%)           482835 (  0.00%)    193.13
   imap           18953 (  0.04%)         20040051 (  0.13%)   1057.36
   telnet         42256 (  0.08%)          4602442 (  0.03%)    108.92
   ssh           100997 (  0.20%)         18291656 (  0.12%)    181.11
   dns             1510 (  0.00%)           562845 (  0.00%)    372.75
   bgp              494 (  0.00%)            88055 (  0.00%)    178.25
   napster           22 (  0.00%)             2446 (  0.00%)    111.18
   realaud           11 (  0.00%)             1047 (  0.00%)     95.18
   rtsp               4 (  0.00%)              342 (  0.00%)     85.50
   icecast        39471 (  0.08%)         31364024 (  0.21%)    794.61
   hotline            7 (  0.00%)              793 (  0.00%)    113.29
   other        1707580 (  3.41%)       1361841376 (  9.12%)    797.53
  udp           4205724 (  8.40%)       3118180461 ( 20.87%)    741.41
   dns           757594 (  1.51%)        359617562 (  2.41%)    474.68
   realaud           19 (  0.00%)             1347 (  0.00%)     70.89
   halflif           13 (  0.00%)             1472 (  0.00%)    113.23
   starcra           19 (  0.00%)             2211 (  0.00%)    116.37
   everque        11573 (  0.02%)         11505237 (  0.08%)    994.14
   unreal            29 (  0.00%)             2289 (  0.00%)     78.93
   quake             22 (  0.00%)             1651 (  0.00%)     75.05
   cuseeme            2 (  0.00%)              182 (  0.00%)     91.00
   other        3433872 (  6.86%)       2745855279 ( 18.38%)    799.64
  icmp         33571310 ( 67.02%)       2095951478 ( 14.03%)     62.43
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec           15753 (  0.03%)          7150902 (  0.05%)    453.94
  ip6            295479 (  0.59%)         96978705 (  0.65%)    328.21
  other           54470 (  0.11%)         15708774 (  0.11%)    288.39
  frag           215342 (  0.43%)        221520478 (  1.48%)   1028.69
 ip6            1045176 (  2.09%)        999779316 (  6.69%)    956.57
  tcp6           785243 (  1.57%)        756916405 (  5.07%)    963.93
   http(s)       553542 (  1.11%)        597189003 (  4.00%)   1078.85
   http(c)       105872 (  0.21%)         11153926 (  0.07%)    105.35
   smtp              82 (  0.00%)            28469 (  0.00%)    347.18
   ftp              831 (  0.00%)            73808 (  0.00%)     88.82
   ssh              109 (  0.00%)            14266 (  0.00%)    130.88
   dns              782 (  0.00%)           561034 (  0.00%)    717.43
   bgp               94 (  0.00%)            25052 (  0.00%)    266.51
   other         123931 (  0.25%)        147870847 (  0.99%)   1193.17
  udp6            57460 (  0.11%)         21780034 (  0.15%)    379.05
   dns            49516 (  0.10%)         16139073 (  0.11%)    325.94
   realaud            1 (  0.00%)              102 (  0.00%)    102.00
   halflif            1 (  0.00%)              101 (  0.00%)    101.00
   everque            1 (  0.00%)               90 (  0.00%)     90.00
   quake              1 (  0.00%)              102 (  0.00%)    102.00
   cuseeme            1 (  0.00%)              106 (  0.00%)    106.00
   other           7939 (  0.02%)          5640460 (  0.04%)    710.47
  icmp6           21068 (  0.04%)          2497593 (  0.02%)    118.55
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6         181375 (  0.36%)        218581204 (  1.46%)   1205.13


tcpdump file: 201302091400.dump.gz (1003.87 MB)