Traffic Trace Info


DumpFile: 201306081400.dump
FileSize: 3016.18MB
Id: 201306081400
StartTime: Sat Jun 8 14:00:01 2013
EndTime: Sat Jun 8 14:15:01 2013
TotalTime: 900.25 seconds
TotalCapSize: -1781.51MB CapLen: 96 bytes
# of packets: 45985239 (23865.68MB)
AvgRate: 222.42Mbps stddev:38.27M

IP flow (unique src/dst pair) Information

# of flows: 19361276 (avg. 2.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 3.2% 3.1% 2.2% 1.9% 1.9% 1.8% 1.8% 1.4% 1.2%

IP address Information

# of IPv4 addresses: 15355679
Top 10 bandwidth usage (bytes/total in %):
9.8% 8.3% 7.0% 6.0% 5.2% 5.1% 3.8% 3.6% 3.5% 3.5%
# of IPv6 addresses: 8487
Top 10 bandwidth usage (bytes/total in %):
18.8% 16.2% 11.1% 5.9% 5.7% 4.5% 4.5% 4.3% 4.0% 3.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   21800399
 [   64-  127]:    6683918
 [  128-  255]:     614890
 [  256-  511]:    1182907
 [  512- 1023]:     654162
 [ 1024- 2047]:   15048963


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         45985239 (100.00%)      25024977060 (100.00%)    544.20
 ip            44558818 ( 96.90%)      23301995367 ( 93.11%)    522.95
  tcp          21189376 ( 46.08%)      20195040487 ( 80.70%)    953.07
   http(s)     10581366 ( 23.01%)      14023879390 ( 56.04%)   1325.34
   http(c)      7008346 ( 15.24%)       3230052222 ( 12.91%)    460.89
   squid          10416 (  0.02%)          5159895 (  0.02%)    495.38
   smtp           52807 (  0.11%)          8605578 (  0.03%)    162.96
   ftp            20522 (  0.04%)          1353918 (  0.01%)     65.97
   pop3            3904 (  0.01%)          1055841 (  0.00%)    270.45
   imap            3796 (  0.01%)          1928652 (  0.01%)    508.07
   telnet        146909 (  0.32%)         10840235 (  0.04%)     73.79
   ssh           128078 (  0.28%)         13287431 (  0.05%)    103.74
   dns             1935 (  0.00%)           263254 (  0.00%)    136.05
   bgp              512 (  0.00%)           110312 (  0.00%)    215.45
   napster           16 (  0.00%)             3599 (  0.00%)    224.94
   realaud            9 (  0.00%)              906 (  0.00%)    100.67
   rtsp               2 (  0.00%)              120 (  0.00%)     60.00
   icecast        16299 (  0.04%)         11897773 (  0.05%)    729.97
   hotline           17 (  0.00%)             1386 (  0.00%)     81.53
   other        3214441 (  6.99%)       2886599915 ( 11.53%)    898.01
  udp           2938158 (  6.39%)       1540501021 (  6.16%)    524.31
   dns           762587 (  1.66%)        287361375 (  1.15%)    376.82
   realaud            8 (  0.00%)              799 (  0.00%)     99.88
   halflif           18 (  0.00%)             1643 (  0.00%)     91.28
   starcra            5 (  0.00%)              559 (  0.00%)    111.80
   everque           50 (  0.00%)             7571 (  0.00%)    151.42
   unreal             6 (  0.00%)              811 (  0.00%)    135.17
   quake             13 (  0.00%)             1209 (  0.00%)     93.00
   cuseeme           14 (  0.00%)              945 (  0.00%)     67.50
   other        2161188 (  4.70%)       1252141114 (  5.00%)    579.38
  icmp         20013070 ( 43.52%)       1261863297 (  5.04%)     63.05
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec            6939 (  0.02%)          3146250 (  0.01%)    453.42
  ip6            359261 (  0.78%)        287568638 (  1.15%)    800.44
  other           51829 (  0.11%)         13856404 (  0.06%)    267.35
  frag           146343 (  0.32%)        133355794 (  0.53%)    911.26
 ip6            1426421 (  3.10%)       1722981693 (  6.89%)   1207.91
  tcp6          1352018 (  2.94%)       1701134574 (  6.80%)   1258.22
   http(s)      1167128 (  2.54%)       1585856178 (  6.34%)   1358.77
   http(c)        91126 (  0.20%)          8449617 (  0.03%)     92.72
   squid             35 (  0.00%)             8090 (  0.00%)    231.14
   smtp             162 (  0.00%)            52004 (  0.00%)    321.01
   ftp              223 (  0.00%)            28175 (  0.00%)    126.35
   ssh               72 (  0.00%)            12450 (  0.00%)    172.92
   dns              145 (  0.00%)            34728 (  0.00%)    239.50
   bgp               98 (  0.00%)            21076 (  0.00%)    215.06
   other          93029 (  0.20%)        106672256 (  0.43%)   1146.66
  udp6            51706 (  0.11%)         15438661 (  0.06%)    298.59
   dns            49720 (  0.11%)         15223171 (  0.06%)    306.18
   realaud            1 (  0.00%)              112 (  0.00%)    112.00
   quake              1 (  0.00%)              107 (  0.00%)    107.00
   other           1984 (  0.00%)           215271 (  0.00%)    108.50
  icmp6           18776 (  0.04%)          2169874 (  0.01%)    115.57
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           3891 (  0.01%)          4234504 (  0.02%)   1088.28


tcpdump file: 201306081400.dump.gz (950.21 MB)