Traffic Trace Info


DumpFile: 201305151400.dump
FileSize: 3987.64MB
Id: 201305151400
StartTime: Wed May 15 14:00:01 2013
EndTime: Wed May 15 14:15:00 2013
TotalTime: 899.89 seconds
TotalCapSize: -999.61MB CapLen: 96 bytes
# of packets: 58408262 (35900.89MB)
AvgRate: 334.70Mbps stddev:51.09M

IP flow (unique src/dst pair) Information

# of flows: 17795111 (avg. 3.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 1.7% 1.3% 1.0% 0.9% 0.8% 0.8% 0.8% 0.8% 0.7%

IP address Information

# of IPv4 addresses: 14150408
Top 10 bandwidth usage (bytes/total in %):
14.0% 6.0% 5.7% 4.5% 3.5% 3.3% 2.8% 2.1% 2.0% 2.0%
# of IPv6 addresses: 11305
Top 10 bandwidth usage (bytes/total in %):
13.9% 7.4% 4.2% 3.6% 3.2% 3.0% 2.9% 2.9% 2.8% 2.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   22452649
 [   64-  127]:    9637514
 [  128-  255]:    1005819
 [  256-  511]:    1200566
 [  512- 1023]:    1005035
 [ 1024- 2047]:   23106679


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         58408262 (100.00%)      37644811557 (100.00%)    644.51
 ip            56224956 ( 96.26%)      35972016182 ( 95.56%)    639.79
  tcp          35146848 ( 60.17%)      33397287751 ( 88.72%)    950.22
   http(s)     20824170 ( 35.65%)      27336253893 ( 72.62%)   1312.72
   http(c)      9635057 ( 16.50%)       2375954786 (  6.31%)    246.59
   squid          37652 (  0.06%)          7501942 (  0.02%)    199.24
   smtp          102975 (  0.18%)         42991547 (  0.11%)    417.49
   ftp            25552 (  0.04%)          1670858 (  0.00%)     65.39
   pop3            4859 (  0.01%)          2550571 (  0.01%)    524.92
   imap            8661 (  0.01%)          2798425 (  0.01%)    323.11
   telnet          1324 (  0.00%)            90028 (  0.00%)     68.00
   ssh            39212 (  0.07%)          6721304 (  0.02%)    171.41
   dns             7433 (  0.01%)           606575 (  0.00%)     81.61
   bgp              559 (  0.00%)           136096 (  0.00%)    243.46
   napster           30 (  0.00%)             4181 (  0.00%)    139.37
   realaud            8 (  0.00%)              709 (  0.00%)     88.62
   icecast        62009 (  0.11%)         57493331 (  0.15%)    927.18
   hotline            9 (  0.00%)             1349 (  0.00%)    149.89
   other        4397338 (  7.53%)       3562512156 (  9.46%)    810.15
  udp           2181890 (  3.74%)        793126070 (  2.11%)    363.50
   dns           837864 (  1.43%)        220151655 (  0.58%)    262.75
   realaud            6 (  0.00%)              696 (  0.00%)    116.00
   halflif          905 (  0.00%)          1190618 (  0.00%)   1315.60
   starcra           20 (  0.00%)             2736 (  0.00%)    136.80
   everque          258 (  0.00%)            37650 (  0.00%)    145.93
   unreal           103 (  0.00%)            10819 (  0.00%)    105.04
   quake             30 (  0.00%)             5076 (  0.00%)    169.20
   cuseeme            2 (  0.00%)              177 (  0.00%)     88.50
   other        1338837 (  2.29%)        571446957 (  1.52%)    426.82
  icmp         18040494 ( 30.89%)       1118431312 (  2.97%)     62.00
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec           11564 (  0.02%)          4669628 (  0.01%)    403.81
  ip6            809117 (  1.39%)        651602154 (  1.73%)    805.33
  other           34858 (  0.06%)          6879997 (  0.02%)    197.37
  frag            46534 (  0.08%)         41512994 (  0.11%)    892.10
 ip6            2183306 (  3.74%)       1672795375 (  4.44%)    766.18
  tcp6          2029685 (  3.47%)       1599585653 (  4.25%)    788.10
   http(s)      1379100 (  2.36%)       1523515266 (  4.05%)   1104.72
   http(c)       430517 (  0.74%)         40782064 (  0.11%)     94.73
   smtp             476 (  0.00%)           288026 (  0.00%)    605.10
   nntp              10 (  0.00%)              940 (  0.00%)     94.00
   ftp             6855 (  0.01%)           654991 (  0.00%)     95.55
   ssh               72 (  0.00%)            12450 (  0.00%)    172.92
   dns              356 (  0.00%)            99716 (  0.00%)    280.10
   bgp               97 (  0.00%)            26159 (  0.00%)    269.68
   other         212202 (  0.36%)         34206041 (  0.09%)    161.20
  udp6            92765 (  0.16%)         33003812 (  0.09%)    355.78
   dns            90940 (  0.16%)         32212981 (  0.09%)    354.22
   realaud            1 (  0.00%)              105 (  0.00%)    105.00
   everque            1 (  0.00%)              110 (  0.00%)    110.00
   other           1823 (  0.00%)           790616 (  0.00%)    433.69
  icmp6           30211 (  0.05%)          3631999 (  0.01%)    120.22
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6          30615 (  0.05%)         36569831 (  0.10%)   1194.51


tcpdump file: 201305151400.dump.gz (1269.78 MB)