Traffic Trace Info


DumpFile: 201304031400.dump
FileSize: 3349.90MB
Id: 201304031400
StartTime: Wed Apr 3 14:00:01 2013
EndTime: Wed Apr 3 14:15:00 2013
TotalTime: 899.78 seconds
TotalCapSize: -1504.30MB CapLen: 96 bytes
# of packets: 49688950 (26908.61MB)
AvgRate: 250.96Mbps stddev:42.90M

IP flow (unique src/dst pair) Information

# of flows: 11144921 (avg. 4.46 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.5% 9.1% 5.0% 2.7% 2.6% 2.3% 1.5% 1.4% 1.4% 1.3%

IP address Information

# of IPv4 addresses: 8557175
Top 10 bandwidth usage (bytes/total in %):
35.6% 10.0% 9.6% 6.2% 5.3% 4.4% 3.3% 3.1% 3.1% 2.8%
# of IPv6 addresses: 10018
Top 10 bandwidth usage (bytes/total in %):
16.1% 15.7% 15.6% 4.9% 4.9% 4.2% 4.2% 2.8% 2.7% 2.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   20370112
 [   64-  127]:    8703842
 [  128-  255]:    1019103
 [  256-  511]:    1214759
 [  512- 1023]:    1947755
 [ 1024- 2047]:   16433379


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         49688950 (100.00%)      28215720672 (100.00%)    567.85
 ip            48697612 ( 98.00%)      27355818389 ( 96.95%)    561.75
  tcp          30218848 ( 60.82%)      25143040505 ( 89.11%)    832.03
   http(s)     15160073 ( 30.51%)      19761758000 ( 70.04%)   1303.54
   http(c)      9699267 ( 19.52%)       2207891284 (  7.83%)    227.63
   squid          62160 (  0.13%)         12401811 (  0.04%)    199.51
   smtp           82953 (  0.17%)         26066193 (  0.09%)    314.23
   ftp            54268 (  0.11%)         30224140 (  0.11%)    556.94
   pop3            5011 (  0.01%)          3092272 (  0.01%)    617.10
   imap            2881 (  0.01%)           412715 (  0.00%)    143.25
   telnet          1401 (  0.00%)            95539 (  0.00%)     68.19
   ssh          2038906 (  4.10%)        375101959 (  1.33%)    183.97
   dns             4551 (  0.01%)          2234864 (  0.01%)    491.07
   bgp              531 (  0.00%)           110606 (  0.00%)    208.30
   napster           30 (  0.00%)             3662 (  0.00%)    122.07
   icecast        19889 (  0.04%)         17422365 (  0.06%)    875.98
   hotline           10 (  0.00%)             1112 (  0.00%)    111.20
   other        3086917 (  6.21%)       2706223983 (  9.59%)    876.68
  udp           2286373 (  4.60%)       1068548202 (  3.79%)    467.36
   dns          1056063 (  2.13%)        418786334 (  1.48%)    396.55
   realaud            7 (  0.00%)             1379 (  0.00%)    197.00
   halflif           32 (  0.00%)             3591 (  0.00%)    112.22
   starcra           25 (  0.00%)             8548 (  0.00%)    341.92
   everque          249 (  0.00%)            27801 (  0.00%)    111.65
   unreal            24 (  0.00%)             4062 (  0.00%)    169.25
   quake             42 (  0.00%)             3310 (  0.00%)     78.81
   other        1229807 (  2.48%)        649627815 (  2.30%)    528.24
  icmp         15714234 ( 31.63%)        990070198 (  3.51%)     63.00
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec           45009 (  0.09%)         13153374 (  0.05%)    292.24
  ip6            380575 (  0.77%)        129255500 (  0.46%)    339.63
  other           52388 (  0.11%)         11731340 (  0.04%)    223.93
  frag           227245 (  0.46%)        248835353 (  0.88%)   1095.01
 ip6             991338 (  2.00%)        859902283 (  3.05%)    867.42
  tcp6           884930 (  1.78%)        830238711 (  2.94%)    938.20
   http(s)       687832 (  1.38%)        725786986 (  2.57%)   1055.18
   http(c)        84246 (  0.17%)         11017709 (  0.04%)    130.78
   smtp             191 (  0.00%)            36945 (  0.00%)    193.43
   ftp               25 (  0.00%)             2209 (  0.00%)     88.36
   ssh                2 (  0.00%)              160 (  0.00%)     80.00
   dns              838 (  0.00%)           598091 (  0.00%)    713.71
   bgp               97 (  0.00%)            24846 (  0.00%)    256.14
   other         111699 (  0.22%)         92771765 (  0.33%)    830.55
  udp6            68525 (  0.14%)         21979142 (  0.08%)    320.75
   dns            67367 (  0.14%)         21847938 (  0.08%)    324.31
   halflif            1 (  0.00%)              111 (  0.00%)    111.00
   everque            1 (  0.00%)               96 (  0.00%)     96.00
   cuseeme            1 (  0.00%)              110 (  0.00%)    110.00
   other           1155 (  0.00%)           130887 (  0.00%)    113.32
  icmp6           34328 (  0.07%)          3975464 (  0.01%)    115.81
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           3525 (  0.01%)          3704886 (  0.01%)   1051.03


tcpdump file: 201304031400.dump.gz (1107.71 MB)