Traffic Trace Info


DumpFile: 201306241400.dump
FileSize: 4736.26MB
Id: 201306241400
StartTime: Mon Jun 24 14:00:01 2013
EndTime: Mon Jun 24 14:15:00 2013
TotalTime: 899.86 seconds
TotalCapSize: -458.85MB CapLen: 96 bytes
# of packets: 72030545 (34646.97MB)
AvgRate: 323.01Mbps stddev:42.61M

IP flow (unique src/dst pair) Information

# of flows: 29025683 (avg. 2.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.4% 3.8% 2.2% 1.4% 1.3% 1.2% 1.1% 1.0% 1.0% 0.8%

IP address Information

# of IPv4 addresses: 23005479
Top 10 bandwidth usage (bytes/total in %):
15.2% 14.0% 8.0% 6.5% 5.6% 4.0% 3.3% 3.0% 2.5% 2.3%
# of IPv6 addresses: 11279
Top 10 bandwidth usage (bytes/total in %):
14.0% 5.9% 4.9% 4.2% 3.8% 3.6% 3.0% 2.8% 2.8% 2.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   36995801
 [   64-  127]:   10042332
 [  128-  255]:     969975
 [  256-  511]:    1298050
 [  512- 1023]:    1102101
 [ 1024- 2047]:   21622286


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         72030545 (100.00%)      36329985672 (100.00%)    504.37
 ip            69053645 ( 95.87%)      34513346968 ( 95.00%)    499.80
  tcp          32858338 ( 45.62%)      30272602210 ( 83.33%)    921.31
   http(s)     19351864 ( 26.87%)      24981341885 ( 68.76%)   1290.90
   http(c)     10814161 ( 15.01%)       3835949333 ( 10.56%)    354.72
   squid          54434 (  0.08%)         24360229 (  0.07%)    447.52
   smtp           89716 (  0.12%)         33350473 (  0.09%)    371.73
   ftp            24978 (  0.03%)          1817890 (  0.01%)     72.78
   pop3           12281 (  0.02%)          3922587 (  0.01%)    319.40
   imap            4558 (  0.01%)          1255945 (  0.00%)    275.55
   telnet          1337 (  0.00%)            87914 (  0.00%)     65.75
   ssh            27132 (  0.04%)          5102545 (  0.01%)    188.06
   dns             7047 (  0.01%)          3953194 (  0.01%)    560.98
   bgp              504 (  0.00%)           103132 (  0.00%)    204.63
   napster           27 (  0.00%)             4128 (  0.00%)    152.89
   realaud          197 (  0.00%)            14023 (  0.00%)     71.18
   icecast       409569 (  0.57%)        339626155 (  0.93%)    829.23
   hotline          178 (  0.00%)            25107 (  0.00%)    141.05
   other        2060355 (  2.86%)       1041687670 (  2.87%)    505.59
  udp           3364184 (  4.67%)       2042904377 (  5.62%)    607.25
   dns           875807 (  1.22%)        268715409 (  0.74%)    306.82
   rip                2 (  0.00%)              140 (  0.00%)     70.00
   realaud           34 (  0.00%)             3429 (  0.00%)    100.85
   halflif           10 (  0.00%)              762 (  0.00%)     76.20
   starcra           10 (  0.00%)             1784 (  0.00%)    178.40
   everque           47 (  0.00%)             7258 (  0.00%)    154.43
   unreal             6 (  0.00%)              419 (  0.00%)     69.83
   quake            138 (  0.00%)            10022 (  0.00%)     72.62
   cuseeme            3 (  0.00%)              227 (  0.00%)     75.67
   other        2487822 (  3.45%)       1774064433 (  4.88%)    713.10
  icmp         32319934 ( 44.87%)       2008038253 (  5.53%)     62.13
  ipip              185 (  0.00%)            19240 (  0.00%)    104.00
  ipsec           14217 (  0.02%)          8558926 (  0.02%)    602.02
  ip6            430618 (  0.60%)        160917960 (  0.44%)    373.69
  other           66169 (  0.09%)         20306002 (  0.06%)    306.88
  frag            56055 (  0.08%)         70598046 (  0.19%)   1259.44
 ip6            2976900 (  4.13%)       1816638704 (  5.00%)    610.25
  tcp6          2876530 (  3.99%)       1789602250 (  4.93%)    622.14
   http(s)      1374807 (  1.91%)       1475097045 (  4.06%)   1072.95
   http(c)      1256913 (  1.74%)        109826282 (  0.30%)     87.38
   squid             71 (  0.00%)            16254 (  0.00%)    228.93
   smtp             211 (  0.00%)           116899 (  0.00%)    554.02
   ftp               71 (  0.00%)             7748 (  0.00%)    109.13
   pop3              35 (  0.00%)             6094 (  0.00%)    174.11
   ssh               72 (  0.00%)            12450 (  0.00%)    172.92
   dns              717 (  0.00%)           522536 (  0.00%)    728.78
   bgp               94 (  0.00%)            20931 (  0.00%)    222.67
   other         243539 (  0.34%)        203976011 (  0.56%)    837.55
  udp6            73561 (  0.10%)         21285024 (  0.06%)    289.35
   dns            71918 (  0.10%)         21091622 (  0.06%)    293.27
   realaud            1 (  0.00%)              111 (  0.00%)    111.00
   halflif            1 (  0.00%)              105 (  0.00%)    105.00
   cuseeme            1 (  0.00%)              106 (  0.00%)    106.00
   other           1640 (  0.00%)           193080 (  0.00%)    117.73
  icmp6           23745 (  0.03%)          2736801 (  0.01%)    115.26
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           3034 (  0.00%)          3010549 (  0.01%)    992.27


tcpdump file: 201306241400.dump.gz (1549.42 MB)