Traffic Trace Info


DumpFile: 201306111400.dump
FileSize: 3711.43MB
Id: 201306111400
StartTime: Tue Jun 11 14:00:01 2013
EndTime: Tue Jun 11 14:15:00 2013
TotalTime: 899.68 seconds
TotalCapSize: -1216.48MB CapLen: 96 bytes
# of packets: 54519526 (29315.45MB)
AvgRate: 273.41Mbps stddev:46.16M

IP flow (unique src/dst pair) Information

# of flows: 19650313 (avg. 2.77 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 2.0% 2.0% 1.9% 1.8% 1.7% 1.5% 1.5% 1.2% 1.2%

IP address Information

# of IPv4 addresses: 15687827
Top 10 bandwidth usage (bytes/total in %):
8.8% 7.7% 7.2% 6.3% 4.6% 4.4% 2.7% 2.6% 2.6% 2.5%
# of IPv6 addresses: 11954
Top 10 bandwidth usage (bytes/total in %):
21.4% 19.9% 19.1% 16.9% 5.1% 4.6% 2.6% 2.6% 2.3% 2.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   23750279
 [   64-  127]:    8836221
 [  128-  255]:    1032901
 [  256-  511]:    1257011
 [  512- 1023]:    1314520
 [ 1024- 2047]:   18328594


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         54519526 (100.00%)      30739475650 (100.00%)    563.83
 ip            51344634 ( 94.18%)      27644937870 ( 89.93%)    538.42
  tcp          27405907 ( 50.27%)      24880085666 ( 80.94%)    907.84
   http(s)     16155890 ( 29.63%)      20473307781 ( 66.60%)   1267.23
   http(c)      8931650 ( 16.38%)       2917223618 (  9.49%)    326.62
   squid          24781 (  0.05%)         16576587 (  0.05%)    668.92
   smtp           66471 (  0.12%)         13683879 (  0.04%)    205.86
   nntp               8 (  0.00%)              480 (  0.00%)     60.00
   ftp            27622 (  0.05%)          1865381 (  0.01%)     67.53
   pop3           16871 (  0.03%)         19701551 (  0.06%)   1167.78
   imap           11536 (  0.02%)          1055700 (  0.00%)     91.51
   telnet         73065 (  0.13%)          5393370 (  0.02%)     73.82
   ssh            15970 (  0.03%)          5071339 (  0.02%)    317.55
   dns             5807 (  0.01%)          3579250 (  0.01%)    616.37
   bgp            66108 (  0.12%)          4195814 (  0.01%)     63.47
   napster           25 (  0.00%)             2873 (  0.00%)    114.92
   realaud          291 (  0.00%)           121070 (  0.00%)    416.05
   rtsp            2409 (  0.00%)          3429248 (  0.01%)   1423.52
   icecast        33378 (  0.06%)         31103565 (  0.10%)    931.86
   hotline           11 (  0.00%)              743 (  0.00%)     67.55
   other        1974011 (  3.62%)       1383773237 (  4.50%)    701.00
  udp           2523167 (  4.63%)        983388358 (  3.20%)    389.74
   dns           920563 (  1.69%)        271283197 (  0.88%)    294.69
   rip                1 (  0.00%)               87 (  0.00%)     87.00
   realaud           20 (  0.00%)             1675 (  0.00%)     83.75
   halflif           33 (  0.00%)             2770 (  0.00%)     83.94
   starcra            3 (  0.00%)              578 (  0.00%)    192.67
   everque          797 (  0.00%)           608692 (  0.00%)    763.73
   unreal             8 (  0.00%)             1336 (  0.00%)    167.00
   quake              7 (  0.00%)              970 (  0.00%)    138.57
   cuseeme            3 (  0.00%)              313 (  0.00%)    104.33
   other        1595672 (  2.93%)        710991226 (  2.31%)    445.57
  icmp         20472446 ( 37.55%)       1294406272 (  4.21%)     63.23
  ipip              185 (  0.00%)            19240 (  0.00%)    104.00
  ipsec           29842 (  0.05%)          9370520 (  0.03%)    314.00
  ip6            854969 (  1.57%)        461550470 (  1.50%)    539.84
  other           58118 (  0.11%)         16117344 (  0.05%)    277.32
  frag           178515 (  0.33%)        186225980 (  0.61%)   1043.20
 ip6            3174892 (  5.82%)       3094537780 ( 10.07%)    974.69
  tcp6          3055883 (  5.61%)       3065173155 (  9.97%)   1003.04
   http(s)      1644565 (  3.02%)       1807968484 (  5.88%)   1099.36
   http(c)       328002 (  0.60%)         29599125 (  0.10%)     90.24
   smtp             767 (  0.00%)           226558 (  0.00%)    295.38
   ftp              415 (  0.00%)            60541 (  0.00%)    145.88
   pop3              37 (  0.00%)             9461 (  0.00%)    255.70
   ssh              542 (  0.00%)            98791 (  0.00%)    182.27
   dns              441 (  0.00%)           130801 (  0.00%)    296.60
   bgp              235 (  0.00%)           155059 (  0.00%)    659.83
   other        1080879 (  1.98%)       1226924335 (  3.99%)   1135.12
  udp6            82766 (  0.15%)         23989337 (  0.08%)    289.85
   dns            78588 (  0.14%)         23499077 (  0.08%)    299.02
   realaud            1 (  0.00%)              110 (  0.00%)    110.00
   starcra            2 (  0.00%)              220 (  0.00%)    110.00
   quake              1 (  0.00%)              101 (  0.00%)    101.00
   other           4174 (  0.01%)           489829 (  0.00%)    117.35
  icmp6           34724 (  0.06%)          3902912 (  0.01%)    112.40
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           1489 (  0.00%)          1468296 (  0.00%)    986.10


tcpdump file: 201306111400.dump.gz (1183.80 MB)