Traffic Trace Info


DumpFile: 201306021400.dump
FileSize: 2463.92MB
Id: 201306021400
StartTime: Sun Jun 2 14:00:00 2013
EndTime: Sun Jun 2 14:15:01 2013
TotalTime: 900.26 seconds
TotalCapSize: 1875.56MB CapLen: 96 bytes
# of packets: 38558665 (16183.91MB)
AvgRate: 150.81Mbps stddev:31.97M

IP flow (unique src/dst pair) Information

# of flows: 19835296 (avg. 1.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 3.9% 3.8% 3.0% 2.8% 2.1% 2.0% 1.6% 1.6% 1.4%

IP address Information

# of IPv4 addresses: 15853333
Top 10 bandwidth usage (bytes/total in %):
11.9% 10.3% 7.7% 7.1% 6.9% 6.0% 4.8% 4.7% 4.2% 3.2%
# of IPv6 addresses: 8065
Top 10 bandwidth usage (bytes/total in %):
28.9% 25.5% 10.5% 10.1% 10.1% 8.1% 5.5% 5.4% 4.9% 4.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   22488125
 [   64-  127]:    4745743
 [  128-  255]:     517076
 [  256-  511]:     380918
 [  512- 1023]:     463183
 [ 1024- 2047]:    9963620


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         38558665 (100.00%)      16970057626 (100.00%)    440.11
 ip            37779138 ( 97.98%)      16121015081 ( 95.00%)    426.72
  tcp          15053597 ( 39.04%)      13542402291 ( 79.80%)    899.61
   http(s)      8235464 ( 21.36%)      10765600811 ( 63.44%)   1307.22
   http(c)      4487193 ( 11.64%)       1107286836 (  6.52%)    246.77
   squid          49006 (  0.13%)         51145721 (  0.30%)   1043.66
   smtp           61252 (  0.16%)         11821547 (  0.07%)    193.00
   ftp            12246 (  0.03%)           811278 (  0.00%)     66.25
   pop3            1983 (  0.01%)           369194 (  0.00%)    186.18
   imap            3336 (  0.01%)           434736 (  0.00%)    130.32
   telnet          1118 (  0.00%)            74756 (  0.00%)     66.87
   ssh           882158 (  2.29%)        791312587 (  4.66%)    897.02
   dns            78972 (  0.20%)          5389362 (  0.03%)     68.24
   bgp              504 (  0.00%)            99007 (  0.00%)    196.44
   napster            7 (  0.00%)              430 (  0.00%)     61.43
   realaud           15 (  0.00%)             2652 (  0.00%)    176.80
   icecast         2273 (  0.01%)          2012620 (  0.01%)    885.45
   other        1238070 (  3.21%)        806040754 (  4.75%)    651.05
  udp           1950048 (  5.06%)        930952207 (  5.49%)    477.40
   dns           589036 (  1.53%)        167926813 (  0.99%)    285.09
   rip                1 (  0.00%)               90 (  0.00%)     90.00
   realaud           21 (  0.00%)             1421 (  0.00%)     67.67
   halflif            9 (  0.00%)             1114 (  0.00%)    123.78
   starcra           28 (  0.00%)             1917 (  0.00%)     68.46
   everque          134 (  0.00%)            16696 (  0.00%)    124.60
   unreal             1 (  0.00%)               91 (  0.00%)     91.00
   quake              6 (  0.00%)              689 (  0.00%)    114.83
   cuseeme           15 (  0.00%)             1050 (  0.00%)     70.00
   other        1355219 (  3.51%)        762575773 (  4.49%)    562.70
  icmp         20422234 ( 52.96%)       1281864239 (  7.55%)     62.77
  ipip              184 (  0.00%)            19160 (  0.00%)    104.13
  ipsec            2815 (  0.01%)          2131494 (  0.01%)    757.19
  ip6            315347 (  0.82%)        357423012 (  2.11%)   1133.43
  other           34913 (  0.09%)          6222678 (  0.04%)    178.23
  frag           111144 (  0.29%)        122611048 (  0.72%)   1103.17
 ip6             779527 (  2.02%)        849042545 (  5.00%)   1089.18
  tcp6           715695 (  1.86%)        833242194 (  4.91%)   1164.24
   http(s)       604019 (  1.57%)        813464093 (  4.79%)   1346.75
   http(c)        87542 (  0.23%)          7848436 (  0.05%)     89.65
   squid             14 (  0.00%)             3236 (  0.00%)    231.14
   smtp            2236 (  0.01%)           191808 (  0.00%)     85.78
   ftp               25 (  0.00%)             2241 (  0.00%)     89.64
   ssh               72 (  0.00%)            12450 (  0.00%)    172.92
   dns               93 (  0.00%)            18744 (  0.00%)    201.55
   bgp               99 (  0.00%)            19035 (  0.00%)    192.27
   other          21595 (  0.06%)         11682151 (  0.07%)    540.97
  udp6            43603 (  0.11%)         12496770 (  0.07%)    286.60
   dns            41290 (  0.11%)         12158500 (  0.07%)    294.47
   everque            1 (  0.00%)              119 (  0.00%)    119.00
   other           2312 (  0.01%)           338151 (  0.00%)    146.26
  icmp6           19100 (  0.05%)          2204327 (  0.01%)    115.41
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           1099 (  0.00%)          1095174 (  0.01%)    996.52


tcpdump file: 201306021400.dump.gz (775.05 MB)