Traffic Trace Info


DumpFile: 201305191400.dump
FileSize: 3510.62MB
Id: 201305191400
StartTime: Sun May 19 14:00:00 2013
EndTime: Sun May 19 14:15:00 2013
TotalTime: 900.01 seconds
TotalCapSize: -1381.65MB CapLen: 96 bytes
# of packets: 52183695 (28230.51MB)
AvgRate: 263.06Mbps stddev:61.83M

IP flow (unique src/dst pair) Information

# of flows: 17993526 (avg. 2.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
18.5% 9.2% 6.1% 2.2% 2.0% 1.9% 1.5% 1.3% 1.3% 1.1%

IP address Information

# of IPv4 addresses: 14319874
Top 10 bandwidth usage (bytes/total in %):
19.5% 19.5% 13.7% 9.6% 9.6% 6.6% 6.6% 4.2% 3.7% 2.6%
# of IPv6 addresses: 7867
Top 10 bandwidth usage (bytes/total in %):
20.1% 11.1% 9.9% 8.8% 8.7% 7.9% 7.9% 6.9% 5.6% 5.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   21658029
 [   64-  127]:   10699469
 [  128-  255]:     769955
 [  256-  511]:     452979
 [  512- 1023]:     576880
 [ 1024- 2047]:   18026383


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         52183695 (100.00%)      29601839134 (100.00%)    567.26
 ip            50340393 ( 96.47%)      28691025021 ( 96.92%)    569.94
  tcp          28054626 ( 53.76%)      26185997324 ( 88.46%)    933.39
   http(s)     12637942 ( 24.22%)      17283816729 ( 58.39%)   1367.61
   http(c)      7191191 ( 13.78%)       1463154448 (  4.94%)    203.46
   squid          78775 (  0.15%)          9790603 (  0.03%)    124.29
   smtp           63490 (  0.12%)         10094268 (  0.03%)    158.99
   ftp            19626 (  0.04%)          1303153 (  0.00%)     66.40
   pop3            1981 (  0.00%)           358177 (  0.00%)    180.81
   imap            2430 (  0.00%)           482968 (  0.00%)    198.75
   telnet          1448 (  0.00%)            96284 (  0.00%)     66.49
   ssh            99871 (  0.19%)         18499946 (  0.06%)    185.24
   dns             1935 (  0.00%)           241607 (  0.00%)    124.86
   bgp              574 (  0.00%)           154371 (  0.00%)    268.94
   napster            4 (  0.00%)              240 (  0.00%)     60.00
   realaud           91 (  0.00%)            10425 (  0.00%)    114.56
   rtsp               1 (  0.00%)               60 (  0.00%)     60.00
   icecast          720 (  0.00%)           131430 (  0.00%)    182.54
   other        7954547 ( 15.24%)       7397862615 ( 24.99%)    930.02
  udp           3119056 (  5.98%)       1256222847 (  4.24%)    402.76
   dns           596775 (  1.14%)        169052306 (  0.57%)    283.28
   rip                1 (  0.00%)               91 (  0.00%)     91.00
   realaud           11 (  0.00%)             1016 (  0.00%)     92.36
   halflif           15 (  0.00%)             1474 (  0.00%)     98.27
   starcra           18 (  0.00%)             3457 (  0.00%)    192.06
   everque           25 (  0.00%)             4983 (  0.00%)    199.32
   unreal             3 (  0.00%)              262 (  0.00%)     87.33
   quake            642 (  0.00%)           122426 (  0.00%)    190.69
   other        2510780 (  4.81%)       1086303059 (  3.67%)    432.66
  icmp         18959235 ( 36.33%)       1191999637 (  4.03%)     62.87
  ipip              184 (  0.00%)            19160 (  0.00%)    104.13
  ipsec            4921 (  0.01%)          2816554 (  0.01%)    572.35
  ip6            168259 (  0.32%)         47519460 (  0.16%)    282.42
  other           34112 (  0.07%)          6450039 (  0.02%)    189.08
  frag           125603 (  0.24%)        119760273 (  0.40%)    953.48
 ip6            1843302 (  3.53%)        910814113 (  3.08%)    494.12
  tcp6          1758917 (  3.37%)        885512361 (  2.99%)    503.44
   http(s)       716180 (  1.37%)        707223838 (  2.39%)    987.49
   http(c)       952538 (  1.83%)         73280524 (  0.25%)     76.93
   squid             68 (  0.00%)            16032 (  0.00%)    235.76
   smtp             141 (  0.00%)            29386 (  0.00%)    208.41
   ftp               25 (  0.00%)             2209 (  0.00%)     88.36
   ssh               72 (  0.00%)            12450 (  0.00%)    172.92
   dns               93 (  0.00%)            26182 (  0.00%)    281.53
   bgp              118 (  0.00%)            48463 (  0.00%)    410.70
   other          89682 (  0.17%)        104873277 (  0.35%)   1169.39
  udp6            49317 (  0.09%)         14672205 (  0.05%)    297.51
   dns            46598 (  0.09%)         14334243 (  0.05%)    307.61
   realaud            1 (  0.00%)              102 (  0.00%)    102.00
   everque            1 (  0.00%)              101 (  0.00%)    101.00
   other           2717 (  0.01%)           337759 (  0.00%)    124.31
  icmp6           28878 (  0.06%)          3359786 (  0.01%)    116.34
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           6160 (  0.01%)          7265681 (  0.02%)   1179.49


tcpdump file: 201305191400.dump.gz (1051.20 MB)