Traffic Trace Info


DumpFile: 201307081400.dump
FileSize: 4852.19MB
Id: 201307081400
StartTime: Mon Jul 8 14:00:01 2013
EndTime: Mon Jul 8 14:15:00 2013
TotalTime: 899.46 seconds
TotalCapSize: -306.92MB CapLen: 96 bytes
# of packets: 69671168 (42279.90MB)
AvgRate: 394.32Mbps stddev:51.33M

IP flow (unique src/dst pair) Information

# of flows: 19193011 (avg. 3.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.9% 1.6% 1.0% 0.9% 0.9% 0.8% 0.8% 0.8% 0.7% 0.7%

IP address Information

# of IPv4 addresses: 15303686
Top 10 bandwidth usage (bytes/total in %):
11.8% 10.3% 10.2% 6.8% 6.5% 5.6% 3.1% 2.3% 2.0% 1.8%
# of IPv6 addresses: 11745
Top 10 bandwidth usage (bytes/total in %):
7.9% 6.3% 4.1% 3.9% 3.8% 3.5% 3.2% 3.2% 3.2% 2.6%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   24642995
 [   64-  127]:   13352022
 [  128-  255]:    1242934
 [  256-  511]:    1923360
 [  512- 1023]:    1267515
 [ 1024- 2047]:   27242342


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         69671168 (100.00%)      44333689580 (100.00%)    636.33
 ip            64496896 ( 92.57%)      39385822039 ( 88.84%)    610.66
  tcp          40483118 ( 58.11%)      36184186687 ( 81.62%)    893.81
   http(s)     23355383 ( 33.52%)      30276252966 ( 68.29%)   1296.33
   http(c)     14447665 ( 20.74%)       4506097243 ( 10.16%)    311.89
   squid         126220 (  0.18%)         21474705 (  0.05%)    170.14
   smtp           91541 (  0.13%)         23722636 (  0.05%)    259.15
   ftp           254042 (  0.36%)         19643631 (  0.04%)     77.32
   pop3            4019 (  0.01%)          2757864 (  0.01%)    686.21
   imap            1875 (  0.00%)           573264 (  0.00%)    305.74
   telnet          1531 (  0.00%)           102565 (  0.00%)     66.99
   ssh            93047 (  0.13%)         15401120 (  0.03%)    165.52
   dns             9427 (  0.01%)          3940292 (  0.01%)    417.98
   bgp              494 (  0.00%)            95283 (  0.00%)    192.88
   napster           63 (  0.00%)            10900 (  0.00%)    173.02
   realaud           11 (  0.00%)              690 (  0.00%)     62.73
   icecast         3249 (  0.00%)          1465492 (  0.00%)    451.06
   other        2094551 (  3.01%)       1312648036 (  2.96%)    626.70
  udp           2584065 (  3.71%)       1096013549 (  2.47%)    424.14
   dns          1085327 (  1.56%)        379486477 (  0.86%)    349.65
   rip                2 (  0.00%)              169 (  0.00%)     84.50
   realaud            5 (  0.00%)              472 (  0.00%)     94.40
   halflif           20 (  0.00%)             1773 (  0.00%)     88.65
   starcra           15 (  0.00%)             1724 (  0.00%)    114.93
   everque          392 (  0.00%)           354402 (  0.00%)    904.09
   unreal            49 (  0.00%)             3663 (  0.00%)     74.76
   quake             41 (  0.00%)             3296 (  0.00%)     80.39
   cuseeme            4 (  0.00%)              326 (  0.00%)     81.50
   other        1495699 (  2.15%)        713100175 (  1.61%)    476.77
  icmp         20266344 ( 29.09%)       1270614187 (  2.87%)     62.70
  ipip              184 (  0.00%)            19160 (  0.00%)    104.13
  ipsec          126236 (  0.18%)        105471880 (  0.24%)    835.51
  ip6            948011 (  1.36%)        707425092 (  1.60%)    746.22
  other           88938 (  0.13%)         22091484 (  0.05%)    248.39
  frag           154160 (  0.22%)        191669373 (  0.43%)   1243.31
 ip6            5174272 (  7.43%)       4947867541 ( 11.16%)    956.24
  tcp6          5061211 (  7.26%)       4915658943 ( 11.09%)    971.24
   http(s)      3674081 (  5.27%)       4605890030 ( 10.39%)   1253.62
   http(c)       899784 (  1.29%)         91082850 (  0.21%)    101.23
   squid              4 (  0.00%)              376 (  0.00%)     94.00
   smtp             359 (  0.00%)           256075 (  0.00%)    713.30
   ftp             3790 (  0.01%)           404862 (  0.00%)    106.82
   pop3              22 (  0.00%)             2238 (  0.00%)    101.73
   ssh               72 (  0.00%)            12450 (  0.00%)    172.92
   dns              370 (  0.00%)            89692 (  0.00%)    242.41
   bgp               91 (  0.00%)            21442 (  0.00%)    235.63
   other         482638 (  0.69%)        217898928 (  0.49%)    451.47
  udp6            87161 (  0.13%)         27199237 (  0.06%)    312.06
   dns            84358 (  0.12%)         26890444 (  0.06%)    318.77
   starcra            1 (  0.00%)              117 (  0.00%)    117.00
   quake              1 (  0.00%)              110 (  0.00%)    110.00
   other           2801 (  0.00%)           308566 (  0.00%)    110.16
  icmp6           23450 (  0.03%)          2836512 (  0.01%)    120.96
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           2420 (  0.00%)          2168769 (  0.00%)    896.19


tcpdump file: 201307081400.dump.gz (1498.78 MB)