Traffic Trace Info


DumpFile: 201304171400.dump
FileSize: 5109.59MB
Id: 201304171400
StartTime: Wed Apr 17 14:00:01 2013
EndTime: Wed Apr 17 14:15:00 2013
TotalTime: 899.76 seconds
TotalCapSize: -113.25MB CapLen: 96 bytes
# of packets: 73847941 (41616.88MB)
AvgRate: 388.09Mbps stddev:54.59M

IP flow (unique src/dst pair) Information

# of flows: 19246115 (avg. 3.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.5% 2.2% 1.8% 1.7% 1.6% 1.5% 1.5% 1.2% 1.2% 1.1%

IP address Information

# of IPv4 addresses: 14697561
Top 10 bandwidth usage (bytes/total in %):
12.2% 9.9% 9.9% 8.6% 6.7% 5.8% 4.4% 4.4% 2.5% 2.4%
# of IPv6 addresses: 11991
Top 10 bandwidth usage (bytes/total in %):
12.6% 8.3% 8.3% 7.8% 7.8% 3.6% 3.4% 3.2% 2.4% 2.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   28473127
 [   64-  127]:   15025373
 [  128-  255]:     871536
 [  256-  511]:    1552660
 [  512- 1023]:    1255134
 [ 1024- 2047]:   26670111


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         73847941 (100.00%)      43638461869 (100.00%)    590.92
 ip            69213868 ( 93.72%)      38441220354 ( 88.09%)    555.40
  tcp          38566990 ( 52.22%)      35874886752 ( 82.21%)    930.20
   http(s)     20765198 ( 28.12%)      26792204893 ( 61.40%)   1290.25
   http(c)     11861988 ( 16.06%)       4038922867 (  9.26%)    340.49
   squid          38307 (  0.05%)         29133879 (  0.07%)    760.54
   smtp           92488 (  0.13%)         33834094 (  0.08%)    365.82
   ftp            29392 (  0.04%)          4446039 (  0.01%)    151.27
   pop3            4285 (  0.01%)          2067048 (  0.00%)    482.39
   imap            2683 (  0.00%)           567990 (  0.00%)    211.70
   telnet          1320 (  0.00%)            88633 (  0.00%)     67.15
   ssh            37975 (  0.05%)          6056553 (  0.01%)    159.49
   dns             1965 (  0.00%)           273464 (  0.00%)    139.17
   bgp              562 (  0.00%)           152814 (  0.00%)    271.91
   napster           21 (  0.00%)             2574 (  0.00%)    122.57
   realaud          251 (  0.00%)            52149 (  0.00%)    207.76
   rtsp           16534 (  0.02%)         24452162 (  0.06%)   1478.90
   icecast        24187 (  0.03%)         15860025 (  0.04%)    655.73
   hotline           19 (  0.00%)             2749 (  0.00%)    144.68
   other        5689815 (  7.70%)       4926768819 ( 11.29%)    865.89
  udp           1703812 (  2.31%)        521745806 (  1.20%)    306.22
   dns          1021186 (  1.38%)        282115110 (  0.65%)    276.26
   rip                5 (  0.00%)              320 (  0.00%)     64.00
   realaud           21 (  0.00%)             1944 (  0.00%)     92.57
   halflif          303 (  0.00%)            65551 (  0.00%)    216.34
   starcra           27 (  0.00%)             4097 (  0.00%)    151.74
   everque        11792 (  0.02%)         11392800 (  0.03%)    966.15
   unreal            79 (  0.00%)             7746 (  0.00%)     98.05
   quake             28 (  0.00%)             2023 (  0.00%)     72.25
   cuseeme            4 (  0.00%)              404 (  0.00%)    101.00
   other         670098 (  0.91%)        228080795 (  0.52%)    340.37
  icmp         28317994 ( 38.35%)       1816796201 (  4.16%)     64.16
  ipip              184 (  0.00%)            19160 (  0.00%)    104.13
  ipsec           16544 (  0.02%)          4783164 (  0.01%)    289.12
  ip6            543086 (  0.74%)        213998946 (  0.49%)    394.04
  other           65258 (  0.09%)          8990325 (  0.02%)    137.77
  frag            36068 (  0.05%)         39916136 (  0.09%)   1106.69
 ip6            4634071 (  6.28%)       5197241395 ( 11.91%)   1121.53
  tcp6          3631467 (  4.92%)       4213682465 (  9.66%)   1160.33
   http(s)      2971551 (  4.02%)       3683664147 (  8.44%)   1239.64
   http(c)       169310 (  0.23%)         15831628 (  0.04%)     93.51
   squid              5 (  0.00%)              450 (  0.00%)     90.00
   smtp             432 (  0.00%)           132082 (  0.00%)    305.75
   ftp              675 (  0.00%)            61586 (  0.00%)     91.24
   pop3              79 (  0.00%)            76964 (  0.00%)    974.23
   dns              285 (  0.00%)            79015 (  0.00%)    277.25
   bgp               92 (  0.00%)            28818 (  0.00%)    313.24
   other         489038 (  0.66%)        513807775 (  1.18%)   1050.65
  udp6           920512 (  1.25%)        940891893 (  2.16%)   1022.14
   dns            79333 (  0.11%)         24889143 (  0.06%)    313.73
   realaud            1 (  0.00%)              117 (  0.00%)    117.00
   halflif            3 (  0.00%)              320 (  0.00%)    106.67
   cuseeme            1 (  0.00%)              110 (  0.00%)    110.00
   other         841174 (  1.14%)        916002203 (  2.10%)   1088.96
  icmp6           26595 (  0.04%)          2753495 (  0.01%)    103.53
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6          55467 (  0.08%)         39909462 (  0.09%)    719.52


tcpdump file: 201304171400.dump.gz (1477.13 MB)