Traffic Trace Info


DumpFile: 201306171400.dump
FileSize: 4664.65MB
Id: 201306171400
StartTime: Mon Jun 17 14:00:00 2013
EndTime: Mon Jun 17 14:15:01 2013
TotalTime: 900.73 seconds
TotalCapSize: -471.62MB CapLen: 96 bytes
# of packets: 68174538 (42222.01MB)
AvgRate: 393.25Mbps stddev:56.59M

IP flow (unique src/dst pair) Information

# of flows: 20105324 (avg. 3.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.1% 5.6% 2.6% 1.4% 1.1% 1.0% 0.9% 0.9% 0.8% 0.7%

IP address Information

# of IPv4 addresses: 15871931
Top 10 bandwidth usage (bytes/total in %):
17.6% 17.0% 8.7% 7.7% 6.0% 5.9% 5.1% 4.3% 2.9% 2.8%
# of IPv6 addresses: 11480
Top 10 bandwidth usage (bytes/total in %):
11.0% 6.5% 6.5% 5.6% 3.4% 3.4% 3.4% 2.9% 2.9% 2.5%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   26005685
 [   64-  127]:   11138407
 [  128-  255]:    1096873
 [  256-  511]:    1534229
 [  512- 1023]:    1084886
 [ 1024- 2047]:   27314458


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         68174538 (100.00%)      44272987322 (100.00%)    649.41
 ip            65795122 ( 96.51%)      42045954560 ( 94.97%)    639.04
  tcp          41682096 ( 61.14%)      39143574140 ( 88.41%)    939.10
   http(s)     19458268 ( 28.54%)      25300746081 ( 57.15%)   1300.26
   http(c)     12825417 ( 18.81%)       4702441783 ( 10.62%)    366.65
   squid          77823 (  0.11%)         42181332 (  0.10%)    542.02
   smtp           87955 (  0.13%)         36045770 (  0.08%)    409.82
   ftp            21062 (  0.03%)          1411355 (  0.00%)     67.01
   pop3            3500 (  0.01%)          2053434 (  0.00%)    586.70
   imap            2988 (  0.00%)           383888 (  0.00%)    128.48
   telnet          1366 (  0.00%)            92569 (  0.00%)     67.77
   ssh           932679 (  1.37%)        139474312 (  0.32%)    149.54
   dns             9158 (  0.01%)          5121501 (  0.01%)    559.24
   bgp             6782 (  0.01%)          2482511 (  0.01%)    366.04
   napster           28 (  0.00%)             6558 (  0.00%)    234.21
   rtsp               1 (  0.00%)               60 (  0.00%)     60.00
   icecast        34821 (  0.05%)         30989037 (  0.07%)    889.95
   hotline            4 (  0.00%)              258 (  0.00%)     64.50
   other        8220244 ( 12.06%)       8880143691 ( 20.06%)   1080.28
  udp           3042585 (  4.46%)       1368769887 (  3.09%)    449.87
   dns          1086627 (  1.59%)        253216185 (  0.57%)    233.03
   rip               16 (  0.00%)             1056 (  0.00%)     66.00
   realaud           12 (  0.00%)             1182 (  0.00%)     98.50
   halflif          959 (  0.00%)            84011 (  0.00%)     87.60
   starcra           19 (  0.00%)             2198 (  0.00%)    115.68
   everque           74 (  0.00%)            10739 (  0.00%)    145.12
   unreal            47 (  0.00%)             7235 (  0.00%)    153.94
   quake             17 (  0.00%)             1365 (  0.00%)     80.29
   cuseeme            5 (  0.00%)              436 (  0.00%)     87.20
   other        1953016 (  2.86%)       1115219418 (  2.52%)    571.02
  icmp         20530908 ( 30.12%)       1293586132 (  2.92%)     63.01
  ipip              184 (  0.00%)            19160 (  0.00%)    104.13
  ipsec           15622 (  0.02%)          5031768 (  0.01%)    322.09
  ip6            463361 (  0.68%)        218055162 (  0.49%)    470.59
  other           60366 (  0.09%)         16918311 (  0.04%)    280.26
  frag            53061 (  0.08%)         52119883 (  0.12%)    982.26
 ip6            2379416 (  3.49%)       2227032762 (  5.03%)    935.96
  tcp6          2054912 (  3.01%)       1975709559 (  4.46%)    961.46
   http(s)      1753681 (  2.57%)       1914619418 (  4.32%)   1091.77
   http(c)       237001 (  0.35%)         24197248 (  0.05%)    102.10
   smtp             596 (  0.00%)           568854 (  0.00%)    954.45
   ftp              465 (  0.00%)            58614 (  0.00%)    126.05
   pop3              37 (  0.00%)             8218 (  0.00%)    222.11
   ssh               72 (  0.00%)            12450 (  0.00%)    172.92
   dns              161 (  0.00%)            39865 (  0.00%)    247.61
   bgp              388 (  0.00%)           287152 (  0.00%)    740.08
   other          62511 (  0.09%)         35917740 (  0.08%)    574.58
  udp6           119635 (  0.18%)         28951812 (  0.07%)    242.00
   dns           117991 (  0.17%)         28730173 (  0.06%)    243.49
   halflif            1 (  0.00%)              101 (  0.00%)    101.00
   quake              1 (  0.00%)              112 (  0.00%)    112.00
   other           1642 (  0.00%)           221426 (  0.00%)    134.85
  icmp6           23203 (  0.03%)          2699304 (  0.01%)    116.33
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6         181636 (  0.27%)        219668007 (  0.50%)   1209.39


tcpdump file: 201306171400.dump.gz (1483.95 MB)