Traffic Trace Info


DumpFile: 201306181400.dump
FileSize: 3624.20MB
Id: 201306181400
StartTime: Tue Jun 18 14:00:01 2013
EndTime: Tue Jun 18 14:15:01 2013
TotalTime: 899.97 seconds
TotalCapSize: -1280.56MB CapLen: 96 bytes
# of packets: 53002263 (32243.09MB)
AvgRate: 300.48Mbps stddev:50.99M

IP flow (unique src/dst pair) Information

# of flows: 15767942 (avg. 3.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 3.5% 1.7% 1.6% 1.5% 1.3% 1.0% 0.9% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 12532996
Top 10 bandwidth usage (bytes/total in %):
9.7% 5.7% 5.6% 5.2% 5.1% 3.9% 3.6% 3.3% 3.1% 2.9%
# of IPv6 addresses: 11679
Top 10 bandwidth usage (bytes/total in %):
8.1% 7.1% 5.1% 4.8% 4.2% 4.0% 3.8% 3.7% 3.6% 3.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   20683560
 [   64-  127]:    8057610
 [  128-  255]:    1013956
 [  256-  511]:    1359248
 [  512- 1023]:    1121835
 [ 1024- 2047]:   20766054


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         53002263 (100.00%)      33809328460 (100.00%)    637.88
 ip            49934268 ( 94.21%)      30367078257 ( 89.82%)    608.14
  tcp          29431413 ( 55.53%)      27356427986 ( 80.91%)    929.50
   http(s)     17368267 ( 32.77%)      22036542500 ( 65.18%)   1268.78
   http(c)      9529228 ( 17.98%)       3412453913 ( 10.09%)    358.10
   squid          27238 (  0.05%)         20431612 (  0.06%)    750.11
   smtp           73608 (  0.14%)         17217673 (  0.05%)    233.91
   ftp            31146 (  0.06%)          2025243 (  0.01%)     65.02
   pop3            9535 (  0.02%)          1996582 (  0.01%)    209.40
   imap            8784 (  0.02%)           825821 (  0.00%)     94.01
   telnet          1275 (  0.00%)            87184 (  0.00%)     68.38
   ssh            31415 (  0.06%)          7380979 (  0.02%)    234.95
   dns             3287 (  0.01%)           497373 (  0.00%)    151.32
   bgp              542 (  0.00%)           122687 (  0.00%)    226.36
   napster           22 (  0.00%)             3394 (  0.00%)    154.27
   realaud           16 (  0.00%)             1710 (  0.00%)    106.88
   rtsp              15 (  0.00%)              900 (  0.00%)     60.00
   icecast        33141 (  0.06%)         30782393 (  0.09%)    928.83
   hotline           35 (  0.00%)             3984 (  0.00%)    113.83
   other        2313859 (  4.37%)       1826054038 (  5.40%)    789.18
  udp           2715505 (  5.12%)       1336500915 (  3.95%)    492.17
   dns           951009 (  1.79%)        265613270 (  0.79%)    279.30
   realaud           17 (  0.00%)             1168 (  0.00%)     68.71
   halflif          102 (  0.00%)            16601 (  0.00%)    162.75
   starcra           14 (  0.00%)             1405 (  0.00%)    100.36
   everque           52 (  0.00%)             8910 (  0.00%)    171.35
   unreal            11 (  0.00%)             1133 (  0.00%)    103.00
   quake            105 (  0.00%)             8356 (  0.00%)     79.58
   cuseeme            6 (  0.00%)              672 (  0.00%)    112.00
   other        1763990 (  3.33%)       1070786125 (  3.17%)    607.03
  icmp         17049750 ( 32.17%)       1085812824 (  3.21%)     63.68
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec           12936 (  0.02%)          5478648 (  0.02%)    423.52
  ip6            659445 (  1.24%)        563961774 (  1.67%)    855.21
  other           65034 (  0.12%)         18876840 (  0.06%)    290.26
  frag            34316 (  0.06%)         37983260 (  0.11%)   1106.87
 ip6            3067995 (  5.79%)       3442250203 ( 10.18%)   1121.99
  tcp6          2934976 (  5.54%)       3409116645 ( 10.08%)   1161.55
   http(s)      2519043 (  4.75%)       3201131176 (  9.47%)   1270.77
   http(c)       189008 (  0.36%)         18159568 (  0.05%)     96.08
   smtp             293 (  0.00%)           127028 (  0.00%)    433.54
   ftp              530 (  0.00%)            67267 (  0.00%)    126.92
   ssh               72 (  0.00%)            12450 (  0.00%)    172.92
   dns              190 (  0.00%)            52168 (  0.00%)    274.57
   bgp               97 (  0.00%)            25188 (  0.00%)    259.67
   other         225743 (  0.43%)        189541800 (  0.56%)    839.64
  udp6           102841 (  0.19%)         25209069 (  0.07%)    245.13
   dns            98165 (  0.19%)         24077801 (  0.07%)    245.28
   realaud            1 (  0.00%)              118 (  0.00%)    118.00
   everque            1 (  0.00%)              112 (  0.00%)    112.00
   other           4674 (  0.01%)          1131038 (  0.00%)    241.99
  icmp6           25142 (  0.05%)          2906347 (  0.01%)    115.60
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           5006 (  0.01%)          5014062 (  0.01%)   1001.61


tcpdump file: 201306181400.dump.gz (1144.34 MB)