Traffic Trace Info


DumpFile: 201304191400.dump
FileSize: 4038.58MB
Id: 201304191400
StartTime: Fri Apr 19 14:00:00 2013
EndTime: Fri Apr 19 14:15:01 2013
TotalTime: 900.80 seconds
TotalCapSize: -963.13MB CapLen: 96 bytes
# of packets: 59355708 (33713.20MB)
AvgRate: 313.97Mbps stddev:43.21M

IP flow (unique src/dst pair) Information

# of flows: 18762686 (avg. 3.16 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 1.9% 1.7% 1.6% 1.5% 1.4% 1.4% 1.2% 1.2% 1.1%

IP address Information

# of IPv4 addresses: 14669553
Top 10 bandwidth usage (bytes/total in %):
9.9% 8.9% 8.1% 5.2% 4.4% 3.7% 3.5% 2.2% 2.1% 2.0%
# of IPv6 addresses: 10297
Top 10 bandwidth usage (bytes/total in %):
14.1% 13.9% 12.9% 7.7% 5.8% 5.8% 5.3% 3.0% 2.9% 2.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   24046753
 [   64-  127]:   10057834
 [  128-  255]:    1088677
 [  256-  511]:    1438799
 [  512- 1023]:    1314536
 [ 1024- 2047]:   21409109


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         59355708 (100.00%)      35350857358 (100.00%)    595.58
 ip            57452508 ( 96.79%)      33759821636 ( 95.50%)    587.61
  tcp          33791572 ( 56.93%)      30857202178 ( 87.29%)    913.16
   http(s)     18717612 ( 31.53%)      23832664261 ( 67.42%)   1273.27
   http(c)     10563340 ( 17.80%)       3889713160 ( 11.00%)    368.23
   squid         594806 (  1.00%)        592382673 (  1.68%)    995.93
   smtp          105335 (  0.18%)         19190385 (  0.05%)    182.18
   ftp            28673 (  0.05%)          4390460 (  0.01%)    153.12
   pop3            7602 (  0.01%)          7654511 (  0.02%)   1006.91
   imap            5432 (  0.01%)          4334299 (  0.01%)    797.92
   telnet         22530 (  0.04%)          1654679 (  0.00%)     73.44
   ssh           944825 (  1.59%)        177572472 (  0.50%)    187.94
   dns             2022 (  0.00%)           353608 (  0.00%)    174.88
   bgp              635 (  0.00%)           221420 (  0.00%)    348.69
   napster           46 (  0.00%)             6448 (  0.00%)    140.17
   realaud           73 (  0.00%)             9168 (  0.00%)    125.59
   rtsp          268266 (  0.45%)        399225594 (  1.13%)   1488.17
   icecast        59864 (  0.10%)         52778108 (  0.15%)    881.63
   hotline          869 (  0.00%)           859721 (  0.00%)    989.32
   other        2468946 (  4.16%)       1874134161 (  5.30%)    759.08
  udp           2501112 (  4.21%)       1036998600 (  2.93%)    414.62
   dns           969064 (  1.63%)        357317413 (  1.01%)    368.72
   realaud           13 (  0.00%)             1842 (  0.00%)    141.69
   halflif          305 (  0.00%)            64348 (  0.00%)    210.98
   starcra           20 (  0.00%)             2199 (  0.00%)    109.95
   everque          288 (  0.00%)            31622 (  0.00%)    109.80
   unreal            36 (  0.00%)             6107 (  0.00%)    169.64
   quake             24 (  0.00%)             1756 (  0.00%)     73.17
   cuseeme            3 (  0.00%)              281 (  0.00%)     93.67
   other        1531127 (  2.58%)        679440061 (  1.92%)    443.75
  icmp         20365572 ( 34.31%)       1296218746 (  3.67%)     63.65
  ipip              184 (  0.00%)            19160 (  0.00%)    104.13
  ipsec           37984 (  0.06%)         10976244 (  0.03%)    288.97
  ip6            647228 (  1.09%)        545240748 (  1.54%)    842.42
  other          108856 (  0.18%)         13165960 (  0.04%)    120.95
  frag            46059 (  0.08%)         58741417 (  0.17%)   1275.35
 ip6            1903200 (  3.21%)       1591035722 (  4.50%)    835.98
  tcp6          1794323 (  3.02%)       1560749381 (  4.42%)    869.83
   http(s)      1288287 (  2.17%)       1404847751 (  3.97%)   1090.48
   http(c)       340880 (  0.57%)         30919796 (  0.09%)     90.71
   squid              4 (  0.00%)              300 (  0.00%)     75.00
   smtp              86 (  0.00%)            16465 (  0.00%)    191.45
   ftp              280 (  0.00%)            26746 (  0.00%)     95.52
   dns              806 (  0.00%)           542716 (  0.00%)    673.34
   bgp               95 (  0.00%)            24694 (  0.00%)    259.94
   other         163885 (  0.28%)        124370913 (  0.35%)    758.89
  udp6            79254 (  0.13%)         24327629 (  0.07%)    306.96
   dns            78661 (  0.13%)         24263845 (  0.07%)    308.46
   quake              1 (  0.00%)              107 (  0.00%)    107.00
   other            592 (  0.00%)            63677 (  0.00%)    107.56
  icmp6           26863 (  0.05%)          3291225 (  0.01%)    122.52
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6           2729 (  0.00%)          2663271 (  0.01%)    975.91


tcpdump file: 201304191400.dump.gz (1305.14 MB)