Traffic Trace Info


DumpFile: 201306121400.dump
FileSize: 4461.76MB
Id: 201306121400
StartTime: Wed Jun 12 14:00:01 2013
EndTime: Wed Jun 12 14:15:01 2013
TotalTime: 899.49 seconds
TotalCapSize: -650.38MB CapLen: 96 bytes
# of packets: 66593637 (37592.44MB)
AvgRate: 350.56Mbps stddev:60.58M

IP flow (unique src/dst pair) Information

# of flows: 19294721 (avg. 3.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.4% 3.7% 1.9% 1.2% 1.1% 1.0% 0.9% 0.9% 0.8% 0.7%

IP address Information

# of IPv4 addresses: 15262039
Top 10 bandwidth usage (bytes/total in %):
11.8% 9.1% 7.7% 7.5% 6.2% 3.9% 3.9% 3.9% 3.5% 2.6%
# of IPv6 addresses: 11234
Top 10 bandwidth usage (bytes/total in %):
9.5% 7.9% 6.1% 4.7% 3.2% 3.0% 2.8% 2.8% 2.4% 2.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   29215509
 [   64-  127]:    9890517
 [  128-  255]:    1200569
 [  256-  511]:    1108317
 [  512- 1023]:    1057344
 [ 1024- 2047]:   24121381


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         66593637 (100.00%)      39418528484 (100.00%)    591.93
 ip            63349704 ( 95.13%)      37193461374 ( 94.36%)    587.11
  tcp          35452277 ( 53.24%)      34365960799 ( 87.18%)    969.36
   http(s)     22201383 ( 33.34%)      29286708972 ( 74.30%)   1319.14
   http(c)     11714554 ( 17.59%)       4096928824 ( 10.39%)    349.73
   squid          32541 (  0.05%)         16826935 (  0.04%)    517.10
   smtp           62051 (  0.09%)         11180624 (  0.03%)    180.18
   ftp            30543 (  0.05%)          2123920 (  0.01%)     69.54
   pop3            4492 (  0.01%)          2584763 (  0.01%)    575.41
   imap            3125 (  0.00%)           625571 (  0.00%)    200.18
   telnet          1499 (  0.00%)           101929 (  0.00%)     68.00
   ssh            24920 (  0.04%)          7210583 (  0.02%)    289.35
   dns             1426 (  0.00%)           233582 (  0.00%)    163.80
   bgp              448 (  0.00%)            93936 (  0.00%)    209.68
   napster           40 (  0.00%)             6942 (  0.00%)    173.55
   realaud            1 (  0.00%)               60 (  0.00%)     60.00
   rtsp            2722 (  0.00%)          3871525 (  0.01%)   1422.31
   icecast        37558 (  0.06%)         30977071 (  0.08%)    824.78
   hotline           18 (  0.00%)             2385 (  0.00%)    132.50
   other        1334956 (  2.00%)        906483177 (  2.30%)    679.04
  udp           2864824 (  4.30%)       1145338645 (  2.91%)    399.79
   dns           821659 (  1.23%)        233568087 (  0.59%)    284.26
   rip                1 (  0.00%)               86 (  0.00%)     86.00
   realaud        10850 (  0.02%)          7792537 (  0.02%)    718.21
   halflif           20 (  0.00%)             1581 (  0.00%)     79.05
   starcra            8 (  0.00%)             1141 (  0.00%)    142.62
   everque          363 (  0.00%)           192658 (  0.00%)    530.74
   unreal             6 (  0.00%)              461 (  0.00%)     76.83
   quake             31 (  0.00%)             2518 (  0.00%)     81.23
   cuseeme            4 (  0.00%)              973 (  0.00%)    243.25
   other        2025286 (  3.04%)        903301930 (  2.29%)    446.01
  icmp         24520087 ( 36.82%)       1520726921 (  3.86%)     62.02
  ipip              184 (  0.00%)            19160 (  0.00%)    104.13
  ipsec           37091 (  0.06%)          5817946 (  0.01%)    156.86
  ip6            417791 (  0.63%)        140433776 (  0.36%)    336.13
  other           57450 (  0.09%)         15164127 (  0.04%)    263.95
  frag            95040 (  0.14%)         90077073 (  0.23%)    947.78
 ip6            3243933 (  4.87%)       2225067110 (  5.64%)    685.92
  tcp6          3108551 (  4.67%)       2155120222 (  5.47%)    693.29
   http(s)      1720060 (  2.58%)       1952838112 (  4.95%)   1135.33
   http(c)       271196 (  0.41%)         26090477 (  0.07%)     96.21
   smtp             495 (  0.00%)           258189 (  0.00%)    521.59
   ftp              131 (  0.00%)            12210 (  0.00%)     93.21
   ssh               72 (  0.00%)            12450 (  0.00%)    172.92
   dns              181 (  0.00%)            59219 (  0.00%)    327.18
   bgp               94 (  0.00%)            23004 (  0.00%)    244.72
   other        1116322 (  1.68%)        175826561 (  0.45%)    157.51
  udp6            74846 (  0.11%)         22299665 (  0.06%)    297.94
   dns            72922 (  0.11%)         22029257 (  0.06%)    302.09
   realaud            1 (  0.00%)              111 (  0.00%)    111.00
   quake              1 (  0.00%)              105 (  0.00%)    105.00
   cuseeme            1 (  0.00%)              113 (  0.00%)    113.00
   other           1921 (  0.00%)           270079 (  0.00%)    140.59
  icmp6           22385 (  0.03%)          2599973 (  0.01%)    116.15
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6          38121 (  0.06%)         45043170 (  0.11%)   1181.58


tcpdump file: 201306121400.dump.gz (1365.26 MB)