Traffic Trace Info


DumpFile: 201306141400.dump
FileSize: 3828.12MB
Id: 201306141400
StartTime: Fri Jun 14 14:00:01 2013
EndTime: Fri Jun 14 14:15:01 2013
TotalTime: 900.21 seconds
TotalCapSize: -1120.37MB CapLen: 96 bytes
# of packets: 55868174 (33455.26MB)
AvgRate: 311.67Mbps stddev:45.59M

IP flow (unique src/dst pair) Information

# of flows: 16929489 (avg. 3.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.6% 1.7% 1.6% 1.5% 1.2% 0.8% 0.8% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 13381408
Top 10 bandwidth usage (bytes/total in %):
8.0% 7.9% 7.6% 7.5% 4.3% 3.7% 3.4% 3.1% 2.9% 2.9%
# of IPv6 addresses: 11282
Top 10 bandwidth usage (bytes/total in %):
10.3% 6.2% 6.2% 5.9% 5.7% 5.6% 5.2% 4.5% 3.9% 3.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   21513847
 [   64-  127]:    9528877
 [  128-  255]:     945784
 [  256-  511]:    1324239
 [  512- 1023]:    1074406
 [ 1024- 2047]:   21481021


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         55868174 (100.00%)      35080386094 (100.00%)    627.91
 ip            53381438 ( 95.55%)      32509856930 ( 92.67%)    609.01
  tcp          31688151 ( 56.72%)      29474449257 ( 84.02%)    930.14
   http(s)     19131325 ( 34.24%)      24526094769 ( 69.91%)   1281.99
   http(c)     10614985 ( 19.00%)       3654312083 ( 10.42%)    344.26
   squid          34057 (  0.06%)         14028657 (  0.04%)    411.92
   smtp           63878 (  0.11%)         19224072 (  0.05%)    300.95
   ftp            20650 (  0.04%)          1358838 (  0.00%)     65.80
   pop3            4302 (  0.01%)          2757478 (  0.01%)    640.98
   imap            2591 (  0.00%)           365501 (  0.00%)    141.07
   telnet          1231 (  0.00%)            82095 (  0.00%)     66.69
   ssh            30502 (  0.05%)         13643984 (  0.04%)    447.31
   dns             7108 (  0.01%)           866254 (  0.00%)    121.87
   bgp              544 (  0.00%)           110717 (  0.00%)    203.52
   napster           16 (  0.00%)             2088 (  0.00%)    130.50
   rtsp            7069 (  0.01%)          9642813 (  0.03%)   1364.10
   icecast         6992 (  0.01%)          5800307 (  0.02%)    829.56
   hotline           21 (  0.00%)             3657 (  0.00%)    174.14
   other        1762880 (  3.16%)       1226155944 (  3.50%)    695.54
  udp           2376649 (  4.25%)       1248728572 (  3.56%)    525.42
   dns           886359 (  1.59%)        252046501 (  0.72%)    284.36
   rip               22 (  0.00%)             1477 (  0.00%)     67.14
   realaud           22 (  0.00%)             1963 (  0.00%)     89.23
   halflif            9 (  0.00%)              826 (  0.00%)     91.78
   starcra            3 (  0.00%)              346 (  0.00%)    115.33
   everque           75 (  0.00%)            10020 (  0.00%)    133.60
   unreal            15 (  0.00%)             1337 (  0.00%)     89.13
   quake             17 (  0.00%)             1283 (  0.00%)     75.47
   cuseeme            2 (  0.00%)              164 (  0.00%)     82.00
   other        1487503 (  2.66%)        996324577 (  2.84%)    669.80
  icmp         18572519 ( 33.24%)       1168985204 (  3.33%)     62.94
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec           14717 (  0.03%)          4346554 (  0.01%)    295.34
  ip6            671642 (  1.20%)        597421653 (  1.70%)    889.49
  other           57575 (  0.10%)         15906420 (  0.05%)    276.27
  frag            65017 (  0.12%)         69111944 (  0.20%)   1062.98
 ip6            2486736 (  4.45%)       2570529164 (  7.33%)   1033.70
  tcp6          2343404 (  4.19%)       2538397447 (  7.24%)   1083.21
   http(s)      1919256 (  3.44%)       2338221748 (  6.67%)   1218.30
   http(c)       169209 (  0.30%)         16590366 (  0.05%)     98.05
   smtp             273 (  0.00%)            95172 (  0.00%)    348.62
   ftp             3223 (  0.01%)           363836 (  0.00%)    112.89
   pop3             110 (  0.00%)            94093 (  0.00%)    855.39
   imap               6 (  0.00%)             1011 (  0.00%)    168.50
   ssh               72 (  0.00%)            12450 (  0.00%)    172.92
   dns              312 (  0.00%)           116448 (  0.00%)    373.23
   bgp               92 (  0.00%)            22365 (  0.00%)    243.10
   other         250851 (  0.45%)        182879958 (  0.52%)    729.04
  udp6           119353 (  0.21%)         27766934 (  0.08%)    232.65
   dns           116697 (  0.21%)         27404048 (  0.08%)    234.83
   halflif            1 (  0.00%)              110 (  0.00%)    110.00
   starcra            1 (  0.00%)               97 (  0.00%)     97.00
   other           2654 (  0.00%)           362679 (  0.00%)    136.65
  icmp6           22119 (  0.04%)          2579472 (  0.01%)    116.62
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           1830 (  0.00%)          1781231 (  0.01%)    973.35


tcpdump file: 201306141400.dump.gz (1205.05 MB)