Traffic Trace Info


DumpFile: 201307031400.dump
FileSize: 4401.79MB
Id: 201307031400
StartTime: Wed Jul 3 14:00:01 2013
EndTime: Wed Jul 3 14:15:00 2013
TotalTime: 899.30 seconds
TotalCapSize: -674.00MB CapLen: 96 bytes
# of packets: 64211404 (37972.77MB)
AvgRate: 354.23Mbps stddev:68.39M

IP flow (unique src/dst pair) Information

# of flows: 19767761 (avg. 3.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 1.8% 1.4% 1.2% 1.1% 1.0% 1.0% 0.9% 0.9% 0.8%

IP address Information

# of IPv4 addresses: 15614355
Top 10 bandwidth usage (bytes/total in %):
9.0% 7.6% 7.4% 6.0% 5.0% 4.5% 3.4% 2.3% 2.1% 2.0%
# of IPv6 addresses: 10800
Top 10 bandwidth usage (bytes/total in %):
4.3% 4.3% 3.7% 2.8% 2.8% 2.7% 2.5% 2.4% 2.3% 2.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   25247717
 [   64-  127]:   10758201
 [  128-  255]:    1085433
 [  256-  511]:    1673762
 [  512- 1023]:    1222998
 [ 1024- 2047]:   24223293


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         64211404 (100.00%)      39817338280 (100.00%)    620.10
 ip            59362832 ( 92.45%)      35327886175 ( 88.72%)    595.12
  tcp          35356409 ( 55.06%)      32151183136 ( 80.75%)    909.35
   http(s)     20097395 ( 31.30%)      26138558371 ( 65.65%)   1300.59
   http(c)     11671058 ( 18.18%)       4151080001 ( 10.43%)    355.67
   squid         269999 (  0.42%)         26685288 (  0.07%)     98.83
   smtp           73623 (  0.11%)         16105128 (  0.04%)    218.75
   ftp            89327 (  0.14%)          6220279 (  0.02%)     69.63
   pop3            5092 (  0.01%)          3487512 (  0.01%)    684.90
   imap            2439 (  0.00%)           378940 (  0.00%)    155.37
   telnet          1368 (  0.00%)            91883 (  0.00%)     67.17
   ssh           302028 (  0.47%)         46500080 (  0.12%)    153.96
   dns             4984 (  0.01%)           663415 (  0.00%)    133.11
   bgp              504 (  0.00%)           100709 (  0.00%)    199.82
   napster           25 (  0.00%)             5640 (  0.00%)    225.60
   realaud           73 (  0.00%)             5325 (  0.00%)     72.95
   rtsp              42 (  0.00%)             5560 (  0.00%)    132.38
   icecast       175972 (  0.27%)        133371011 (  0.33%)    757.91
   hotline           60 (  0.00%)             4408 (  0.00%)     73.47
   other        2662420 (  4.15%)       1627919586 (  4.09%)    611.44
  udp           2794888 (  4.35%)       1145025621 (  2.88%)    409.69
   dns          1149021 (  1.79%)        431624248 (  1.08%)    375.65
   realaud            3 (  0.00%)              572 (  0.00%)    190.67
   halflif          600 (  0.00%)            36501 (  0.00%)     60.84
   starcra           10 (  0.00%)             1241 (  0.00%)    124.10
   everque         1252 (  0.00%)           163845 (  0.00%)    130.87
   unreal             9 (  0.00%)              952 (  0.00%)    105.78
   quake             17 (  0.00%)             1773 (  0.00%)    104.29
   cuseeme            9 (  0.00%)             1049 (  0.00%)    116.56
   other        1637996 (  2.55%)        707224315 (  1.78%)    431.76
  icmp         20095842 ( 31.30%)       1270796225 (  3.19%)     63.24
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec           49013 (  0.08%)         17887986 (  0.04%)    364.96
  ip6            965834 (  1.50%)        717188484 (  1.80%)    742.56
  other          100661 (  0.16%)         25785453 (  0.06%)    256.16
  frag           185561 (  0.29%)        222411272 (  0.56%)   1198.59
 ip6            4848572 (  7.55%)       4489452105 ( 11.28%)    925.93
  tcp6          4743114 (  7.39%)       4458133485 ( 11.20%)    939.92
   http(s)      3254673 (  5.07%)       4258847812 ( 10.70%)   1308.53
   http(c)      1355985 (  2.11%)        118917070 (  0.30%)     87.70
   squid             10 (  0.00%)              940 (  0.00%)     94.00
   smtp            2911 (  0.00%)          1566293 (  0.00%)    538.06
   ftp               25 (  0.00%)             2209 (  0.00%)     88.36
   pop3              80 (  0.00%)             9177 (  0.00%)    114.71
   ssh               72 (  0.00%)            12450 (  0.00%)    172.92
   dns              199 (  0.00%)            47500 (  0.00%)    238.69
   bgp               95 (  0.00%)            21374 (  0.00%)    224.99
   other         129064 (  0.20%)         78708660 (  0.20%)    609.84
  udp6            86591 (  0.13%)         28034828 (  0.07%)    323.76
   dns            84202 (  0.13%)         27531140 (  0.07%)    326.97
   realaud            2 (  0.00%)              231 (  0.00%)    115.50
   halflif            1 (  0.00%)              172 (  0.00%)    172.00
   everque            2 (  0.00%)              218 (  0.00%)    109.00
   quake              1 (  0.00%)              173 (  0.00%)    173.00
   other           2383 (  0.00%)           502894 (  0.00%)    211.03
  icmp6           17561 (  0.03%)          2060603 (  0.01%)    117.34
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           1276 (  0.00%)          1219109 (  0.00%)    955.41


tcpdump file: 201307031400.dump.gz (1360.01 MB)