Traffic Trace Info


DumpFile: 201306031400.dump
FileSize: 4667.64MB
Id: 201306031400
StartTime: Mon Jun 3 14:00:01 2013
EndTime: Mon Jun 3 14:15:01 2013
TotalTime: 900.46 seconds
TotalCapSize: -460.64MB CapLen: 96 bytes
# of packets: 67650720 (40807.86MB)
AvgRate: 380.23Mbps stddev:51.30M

IP flow (unique src/dst pair) Information

# of flows: 19652711 (avg. 3.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.7% 3.1% 2.1% 2.1% 1.7% 1.4% 1.1% 1.0% 1.0% 1.0%

IP address Information

# of IPv4 addresses: 15429888
Top 10 bandwidth usage (bytes/total in %):
9.7% 7.3% 7.1% 7.1% 6.7% 5.7% 3.7% 3.6% 3.1% 2.5%
# of IPv6 addresses: 11055
Top 10 bandwidth usage (bytes/total in %):
15.8% 15.8% 9.2% 5.2% 4.8% 4.8% 4.6% 4.3% 3.1% 2.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   25262772
 [   64-  127]:   11580040
 [  128-  255]:    1286054
 [  256-  511]:    2344768
 [  512- 1023]:    1340016
 [ 1024- 2047]:   25837070


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         67650720 (100.00%)      42790146259 (100.00%)    632.52
 ip            63825109 ( 94.35%)      40102543791 ( 93.72%)    628.32
  tcp          36692785 ( 54.24%)      34929877302 ( 81.63%)    951.95
   http(s)     21392021 ( 31.62%)      27363494555 ( 63.95%)   1279.14
   http(c)     12661857 ( 18.72%)       5858650560 ( 13.69%)    462.70
   squid          74661 (  0.11%)          9811105 (  0.02%)    131.41
   smtp           92122 (  0.14%)         39945681 (  0.09%)    433.62
   nntp               2 (  0.00%)              148 (  0.00%)     74.00
   ftp            27097 (  0.04%)          1776287 (  0.00%)     65.55
   pop3            3926 (  0.01%)          1976899 (  0.00%)    503.54
   imap            2315 (  0.00%)           519089 (  0.00%)    224.23
   telnet          1399 (  0.00%)            92815 (  0.00%)     66.34
   ssh            79368 (  0.12%)         38208343 (  0.09%)    481.41
   dns             2028 (  0.00%)           272323 (  0.00%)    134.28
   bgp              538 (  0.00%)           146277 (  0.00%)    271.89
   napster            3 (  0.00%)              214 (  0.00%)     71.33
   realaud           21 (  0.00%)             4045 (  0.00%)    192.62
   rtsp               2 (  0.00%)              148 (  0.00%)     74.00
   icecast         3280 (  0.00%)           347265 (  0.00%)    105.87
   hotline            2 (  0.00%)              126 (  0.00%)     63.00
   other        2352143 (  3.48%)       1614631422 (  3.77%)    686.45
  udp           4124929 (  6.10%)        990698087 (  2.32%)    240.17
   dns           830577 (  1.23%)        253181911 (  0.59%)    304.83
   realaud           20 (  0.00%)             2039 (  0.00%)    101.95
   halflif           30 (  0.00%)             3911 (  0.00%)    130.37
   starcra           22 (  0.00%)             2639 (  0.00%)    119.95
   everque          219 (  0.00%)           133751 (  0.00%)    610.74
   unreal           524 (  0.00%)           638025 (  0.00%)   1217.60
   quake             10 (  0.00%)             1064 (  0.00%)    106.40
   cuseeme            2 (  0.00%)              236 (  0.00%)    118.00
   other        3288433 (  4.86%)        736351322 (  1.72%)    223.92
  icmp         20711220 ( 30.61%)       1314193849 (  3.07%)     63.45
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec           11298 (  0.02%)          3143980 (  0.01%)    278.28
  ip6           2249056 (  3.32%)       2858210879 (  6.68%)   1270.85
  other           35636 (  0.05%)          6400424 (  0.01%)    179.61
  frag            71938 (  0.11%)         68140895 (  0.16%)    947.22
 ip6            3825611 (  5.65%)       2687602468 (  6.28%)    702.53
  tcp6          3728112 (  5.51%)       2662213539 (  6.22%)    714.09
   http(s)      1917378 (  2.83%)       2339425079 (  5.47%)   1220.12
   http(c)       249199 (  0.37%)         23906458 (  0.06%)     95.93
   smtp              81 (  0.00%)             7852 (  0.00%)     96.94
   ftp               25 (  0.00%)             2226 (  0.00%)     89.04
   pop3              20 (  0.00%)             7924 (  0.00%)    396.20
   ssh           936561 (  1.38%)         82373116 (  0.19%)     87.95
   dns              179 (  0.00%)            53458 (  0.00%)    298.65
   bgp               95 (  0.00%)            24563 (  0.00%)    258.56
   other         624574 (  0.92%)        216412863 (  0.51%)    346.50
  udp6            74207 (  0.11%)         21467767 (  0.05%)    289.30
   dns            72351 (  0.11%)         21228340 (  0.05%)    293.41
   everque            1 (  0.00%)              112 (  0.00%)    112.00
   other           1855 (  0.00%)           239315 (  0.00%)    129.01
  icmp6           21621 (  0.03%)          2488415 (  0.01%)    115.09
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           1641 (  0.00%)          1428667 (  0.00%)    870.61


tcpdump file: 201306031400.dump.gz (1462.62 MB)