Traffic Trace Info


DumpFile: 201306211400.dump
FileSize: 4227.54MB
Id: 201306211400
StartTime: Fri Jun 21 14:00:01 2013
EndTime: Fri Jun 21 14:15:00 2013
TotalTime: 899.39 seconds
TotalCapSize: -867.08MB CapLen: 96 bytes
# of packets: 65445037 (26890.34MB)
AvgRate: 250.81Mbps stddev:36.78M

IP flow (unique src/dst pair) Information

# of flows: 29223504 (avg. 2.24 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.7% 1.5% 1.4% 1.3% 1.2% 1.2% 1.0% 0.8% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 22942914
Top 10 bandwidth usage (bytes/total in %):
7.7% 7.6% 5.7% 4.9% 3.6% 3.3% 3.1% 2.6% 2.5% 2.4%
# of IPv6 addresses: 11094
Top 10 bandwidth usage (bytes/total in %):
12.2% 9.1% 5.6% 5.4% 4.2% 4.2% 3.0% 2.9% 2.7% 2.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   36100294
 [   64-  127]:    9703939
 [  128-  255]:    1056502
 [  256-  511]:    1358055
 [  512- 1023]:    1147370
 [ 1024- 2047]:   16078877


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         65445037 (100.00%)      28196568929 (100.00%)    430.84
 ip            63568132 ( 97.13%)      26559160533 ( 94.19%)    417.81
  tcp          25547936 ( 39.04%)      22805080178 ( 80.88%)    892.64
   http(s)     14219479 ( 21.73%)      17376356938 ( 61.63%)   1222.01
   http(c)      7551261 ( 11.54%)       2628212067 (  9.32%)    348.05
   squid          85249 (  0.13%)         24583890 (  0.09%)    288.38
   smtp           64636 (  0.10%)         16927703 (  0.06%)    261.89
   nntp               4 (  0.00%)              240 (  0.00%)     60.00
   ftp            27597 (  0.04%)          1800249 (  0.01%)     65.23
   pop3            7477 (  0.01%)          3779157 (  0.01%)    505.44
   imap            4896 (  0.01%)          2825437 (  0.01%)    577.09
   telnet          1098 (  0.00%)            73297 (  0.00%)     66.76
   ssh            31887 (  0.05%)          7000487 (  0.02%)    219.54
   dns             3571 (  0.01%)           542048 (  0.00%)    151.79
   bgp              670 (  0.00%)           257006 (  0.00%)    383.59
   napster           53 (  0.00%)            13316 (  0.00%)    251.25
   realaud           30 (  0.00%)             8881 (  0.00%)    296.03
   rtsp            1428 (  0.00%)          1203416 (  0.00%)    842.73
   icecast         6063 (  0.01%)          3845100 (  0.01%)    634.19
   hotline           78 (  0.00%)            11169 (  0.00%)    143.19
   other        3542459 (  5.41%)       2737639777 (  9.71%)    772.81
  udp           3266715 (  4.99%)       1368136558 (  4.85%)    418.81
   dns          1033311 (  1.58%)        257129260 (  0.91%)    248.84
   realaud           10 (  0.00%)             1020 (  0.00%)    102.00
   halflif           26 (  0.00%)             2240 (  0.00%)     86.15
   starcra           40 (  0.00%)             7896 (  0.00%)    197.40
   everque           39 (  0.00%)             7549 (  0.00%)    193.56
   unreal            17 (  0.00%)             1872 (  0.00%)    110.12
   quake             75 (  0.00%)             5669 (  0.00%)     75.59
   cuseeme            5 (  0.00%)              731 (  0.00%)    146.20
   other        2232642 (  3.41%)       1110774951 (  3.94%)    497.52
  icmp         34110979 ( 52.12%)       2122813245 (  7.53%)     62.23
  ipip              185 (  0.00%)            19240 (  0.00%)    104.00
  ipsec           14746 (  0.02%)          5048244 (  0.02%)    342.35
  ip6            564327 (  0.86%)        239348506 (  0.85%)    424.13
  other           63244 (  0.10%)         18714562 (  0.07%)    295.91
  frag            55035 (  0.08%)         64319670 (  0.23%)   1168.70
 ip6            1876905 (  2.87%)       1637408396 (  5.81%)    872.40
  tcp6          1755145 (  2.68%)       1605638609 (  5.69%)    914.82
   http(s)      1381370 (  2.11%)       1499377701 (  5.32%)   1085.43
   http(c)       306010 (  0.47%)         29354140 (  0.10%)     95.93
   smtp             399 (  0.00%)           316888 (  0.00%)    794.21
   ftp               24 (  0.00%)             2135 (  0.00%)     88.96
   ssh               72 (  0.00%)            12450 (  0.00%)    172.92
   dns              223 (  0.00%)            56487 (  0.00%)    253.30
   bgp              111 (  0.00%)            41932 (  0.00%)    377.77
   other          66936 (  0.10%)         76476876 (  0.27%)   1142.54
  udp6            90009 (  0.14%)         27271837 (  0.10%)    302.99
   dns            84371 (  0.13%)         24113960 (  0.09%)    285.81
   quake              1 (  0.00%)               97 (  0.00%)     97.00
   other           5637 (  0.01%)          3157780 (  0.01%)    560.19
  icmp6           30402 (  0.05%)          3482441 (  0.01%)    114.55
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6           1318 (  0.00%)          1011293 (  0.00%)    767.29


tcpdump file: 201306211400.dump.gz (1404.79 MB)