Traffic Trace Info


DumpFile: 201306131400.dump
FileSize: 6696.61MB
Id: 201306131400
StartTime: Thu Jun 13 14:00:01 2013
EndTime: Thu Jun 13 14:15:01 2013
TotalTime: 899.56 seconds
TotalCapSize: 1260.17MB CapLen: 96 bytes
# of packets: 87846516 (71695.88MB)
AvgRate: 668.59Mbps stddev:94.13M

IP flow (unique src/dst pair) Information

# of flows: 20606559 (avg. 4.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.0% 12.4% 9.6% 9.4% 7.9% 4.6% 0.7% 0.7% 0.6% 0.6%

IP address Information

# of IPv4 addresses: 16190168
Top 10 bandwidth usage (bytes/total in %):
21.8% 15.7% 9.0% 9.0% 6.8% 6.2% 3.6% 3.4% 2.4% 2.1%
# of IPv6 addresses: 11443
Top 10 bandwidth usage (bytes/total in %):
92.5% 28.5% 25.4% 19.5% 19.2% 0.7% 0.4% 0.4% 0.4% 0.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   25326797
 [   64-  127]:   10376449
 [  128-  255]:     970546
 [  256-  511]:    2708015
 [  512- 1023]:    1231607
 [ 1024- 2047]:   47233102


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         87846516 (100.00%)      75178575860 (100.00%)    855.79
 ip            60858296 ( 69.28%)      38327980146 ( 50.98%)    629.79
  tcp          36841725 ( 41.94%)      36080287469 ( 47.99%)    979.33
   http(s)     23490081 ( 26.74%)      31360913933 ( 41.72%)   1335.07
   http(c)     10451156 ( 11.90%)       3020062616 (  4.02%)    288.97
   squid          99868 (  0.11%)         15399156 (  0.02%)    154.20
   smtp          162342 (  0.18%)         85819952 (  0.11%)    528.64
   nntp              13 (  0.00%)              780 (  0.00%)     60.00
   ftp            25209 (  0.03%)          1711551 (  0.00%)     67.89
   pop3            4527 (  0.01%)          1814036 (  0.00%)    400.71
   imap            3179 (  0.00%)           468973 (  0.00%)    147.52
   telnet         36941 (  0.04%)          2722625 (  0.00%)     73.70
   ssh            70554 (  0.08%)          8894121 (  0.01%)    126.06
   dns             2003 (  0.00%)           277107 (  0.00%)    138.35
   bgp             2203 (  0.00%)           742853 (  0.00%)    337.20
   napster           65 (  0.00%)            14421 (  0.00%)    221.86
   realaud           72 (  0.00%)             7322 (  0.00%)    101.69
   rtsp               9 (  0.00%)              540 (  0.00%)     60.00
   icecast        23233 (  0.03%)         18038145 (  0.02%)    776.40
   hotline            3 (  0.00%)              186 (  0.00%)     62.00
   other        2470195 (  2.81%)       1563394832 (  2.08%)    632.90
  udp           1434721 (  1.63%)        375599792 (  0.50%)    261.79
   dns           751458 (  0.86%)        209880545 (  0.28%)    279.30
   rip               29 (  0.00%)             1993 (  0.00%)     68.72
   realaud            5 (  0.00%)              467 (  0.00%)     93.40
   halflif         2305 (  0.00%)           201060 (  0.00%)     87.23
   starcra            7 (  0.00%)              722 (  0.00%)    103.14
   everque         6039 (  0.01%)          5976695 (  0.01%)    989.68
   unreal             7 (  0.00%)              625 (  0.00%)     89.29
   quake             27 (  0.00%)             2254 (  0.00%)     83.48
   cuseeme            2 (  0.00%)              206 (  0.00%)    103.00
   other         674670 (  0.77%)        159439634 (  0.21%)    236.32
  icmp         21827709 ( 24.85%)       1368983203 (  1.82%)     62.72
  ipip              183 (  0.00%)            19050 (  0.00%)    104.10
  ipsec           21403 (  0.02%)          5684070 (  0.01%)    265.57
  ip6            672943 (  0.77%)        481146120 (  0.64%)    714.99
  other           59612 (  0.07%)         16260442 (  0.02%)    272.77
  frag             1560 (  0.00%)          1648667 (  0.00%)   1056.84
 ip6           26988220 ( 30.72%)      36850595714 ( 49.02%)   1365.43
  tcp6         26854289 ( 30.57%)      36821545355 ( 48.98%)   1371.16
   http(s)     25665875 ( 29.22%)      36675565835 ( 48.78%)   1428.96
   http(c)       346123 (  0.39%)         33208124 (  0.04%)     95.94
   squid             33 (  0.00%)             7942 (  0.00%)    240.67
   smtp              64 (  0.00%)            24423 (  0.00%)    381.61
   ftp            19051 (  0.02%)          2100693 (  0.00%)    110.27
   ssh               72 (  0.00%)            12450 (  0.00%)    172.92
   dns              253 (  0.00%)            65785 (  0.00%)    260.02
   bgp               89 (  0.00%)            20942 (  0.00%)    235.30
   other         822729 (  0.94%)        110539161 (  0.15%)    134.36
  udp6           105228 (  0.12%)         24974968 (  0.03%)    237.34
   dns           103054 (  0.12%)         24702299 (  0.03%)    239.70
   realaud            1 (  0.00%)              104 (  0.00%)    104.00
   quake              1 (  0.00%)              106 (  0.00%)    106.00
   other           2172 (  0.00%)           272459 (  0.00%)    125.44
  icmp6           27758 (  0.03%)          3184635 (  0.00%)    114.73
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            915 (  0.00%)           886676 (  0.00%)    969.04


tcpdump file: 201306131400.dump.gz (1678.77 MB)