Traffic Trace Info


DumpFile: 201304221400.dump
FileSize: 4285.45MB
Id: 201304221400
StartTime: Mon Apr 22 14:00:00 2013
EndTime: Mon Apr 22 14:15:00 2013
TotalTime: 899.90 seconds
TotalCapSize: -754.17MB CapLen: 96 bytes
# of packets: 61840502 (36581.89MB)
AvgRate: 341.09Mbps stddev:63.80M

IP flow (unique src/dst pair) Information

# of flows: 16574566 (avg. 3.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.3% 2.9% 1.9% 1.6% 1.6% 1.4% 1.2% 1.1% 1.1% 1.0%

IP address Information

# of IPv4 addresses: 12887237
Top 10 bandwidth usage (bytes/total in %):
9.3% 8.6% 8.0% 5.6% 5.4% 5.2% 4.6% 3.4% 3.1% 3.0%
# of IPv6 addresses: 10370
Top 10 bandwidth usage (bytes/total in %):
13.7% 13.3% 12.1% 4.8% 4.8% 3.7% 3.7% 3.3% 3.1% 2.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   22290710
 [   64-  127]:   12341400
 [  128-  255]:    1158474
 [  256-  511]:    1600660
 [  512- 1023]:    1149168
 [ 1024- 2047]:   23300090


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         61840502 (100.00%)      38358888074 (100.00%)    620.29
 ip            59912905 ( 96.88%)      36560184015 ( 95.31%)    610.22
  tcp          36026540 ( 58.26%)      33744874331 ( 87.97%)    936.67
   http(s)     21735619 ( 35.15%)      27833151695 ( 72.56%)   1280.53
   http(c)     11428058 ( 18.48%)       3756819674 (  9.79%)    328.74
   squid         107582 (  0.17%)         41855631 (  0.11%)    389.06
   smtp          109916 (  0.18%)         22882743 (  0.06%)    208.18
   nntp               2 (  0.00%)              120 (  0.00%)     60.00
   ftp            23056 (  0.04%)          3979526 (  0.01%)    172.60
   pop3            4011 (  0.01%)          1634123 (  0.00%)    407.41
   imap            1798 (  0.00%)           497629 (  0.00%)    276.77
   telnet          1478 (  0.00%)            99061 (  0.00%)     67.02
   ssh           123061 (  0.20%)         24418426 (  0.06%)    198.43
   dns             4027 (  0.01%)          2162755 (  0.01%)    537.06
   bgp              513 (  0.00%)            93911 (  0.00%)    183.06
   napster          112 (  0.00%)            37531 (  0.00%)    335.10
   realaud           20 (  0.00%)             2133 (  0.00%)    106.65
   rtsp          286722 (  0.46%)        428562009 (  1.12%)   1494.70
   icecast        31139 (  0.05%)         16590775 (  0.04%)    532.80
   hotline           34 (  0.00%)             8360 (  0.00%)    245.88
   other        2169392 (  3.51%)       1612078229 (  4.20%)    743.10
  udp           2902551 (  4.69%)       1181314996 (  3.08%)    406.99
   dns          1045387 (  1.69%)        383838169 (  1.00%)    367.17
   realaud           61 (  0.00%)            27549 (  0.00%)    451.62
   halflif          322 (  0.00%)            64214 (  0.00%)    199.42
   starcra           60 (  0.00%)             6256 (  0.00%)    104.27
   everque          146 (  0.00%)            26423 (  0.00%)    180.98
   unreal            67 (  0.00%)             8916 (  0.00%)    133.07
   quake             59 (  0.00%)             5956 (  0.00%)    100.95
   cuseeme           30 (  0.00%)             2373 (  0.00%)     79.10
   other        1855709 (  3.00%)        797068310 (  2.08%)    429.52
  icmp         20152641 ( 32.59%)       1290498102 (  3.36%)     64.04
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec            4931 (  0.01%)          2678934 (  0.01%)    543.28
  ip6            722381 (  1.17%)        327856009 (  0.85%)    453.85
  other          103676 (  0.17%)         12942373 (  0.03%)    124.83
  frag           161330 (  0.26%)        153111285 (  0.40%)    949.06
 ip6            1927597 (  3.12%)       1798704059 (  4.69%)    933.13
  tcp6          1753544 (  2.84%)       1675652940 (  4.37%)    955.58
   http(s)      1418866 (  2.29%)       1575922302 (  4.11%)   1110.69
   http(c)       240390 (  0.39%)         22236071 (  0.06%)     92.50
   smtp             222 (  0.00%)            77819 (  0.00%)    350.54
   ftp               28 (  0.00%)             2539 (  0.00%)     90.68
   pop3              46 (  0.00%)            41904 (  0.00%)    910.96
   dns              342 (  0.00%)           120028 (  0.00%)    350.96
   bgp               91 (  0.00%)            20233 (  0.00%)    222.34
   other          93559 (  0.15%)         77232044 (  0.20%)    825.49
  udp6            76375 (  0.12%)         24760838 (  0.06%)    324.20
   dns            75880 (  0.12%)         24708634 (  0.06%)    325.63
   other            495 (  0.00%)            52204 (  0.00%)    105.46
  icmp6           16904 (  0.03%)          2016893 (  0.01%)    119.31
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6          80743 (  0.13%)         96269172 (  0.25%)   1192.29


tcpdump file: 201304221400.dump.gz (1335.67 MB)