Traffic Trace Info


DumpFile: 201307091400.dump
FileSize: 3794.72MB
Id: 201307091400
StartTime: Tue Jul 9 14:00:00 2013
EndTime: Tue Jul 9 14:15:01 2013
TotalTime: 900.19 seconds
TotalCapSize: -1129.09MB CapLen: 96 bytes
# of packets: 54250318 (32177.39MB)
AvgRate: 299.87Mbps stddev:45.97M

IP flow (unique src/dst pair) Information

# of flows: 16051968 (avg. 3.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 2.4% 2.0% 1.7% 1.3% 1.2% 0.9% 0.9% 0.8% 0.8%

IP address Information

# of IPv4 addresses: 12778692
Top 10 bandwidth usage (bytes/total in %):
15.4% 11.9% 8.8% 6.3% 4.0% 3.5% 3.5% 2.8% 2.4% 2.3%
# of IPv6 addresses: 11849
Top 10 bandwidth usage (bytes/total in %):
5.9% 5.3% 5.2% 5.2% 3.8% 3.1% 2.9% 2.6% 2.0% 2.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   20167857
 [   64-  127]:   10614282
 [  128-  255]:    1018295
 [  256-  511]:     879797
 [  512- 1023]:     982887
 [ 1024- 2047]:   20587200


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         54250318 (100.00%)      33740435287 (100.00%)    621.94
 ip            48574914 ( 89.54%)      29755983203 ( 88.19%)    612.58
  tcp          27985990 ( 51.59%)      26851631790 ( 79.58%)    959.47
   http(s)     17757616 ( 32.73%)      23254449227 ( 68.92%)   1309.55
   http(c)      7973952 ( 14.70%)       2339482087 (  6.93%)    293.39
   squid          20097 (  0.04%)         13741864 (  0.04%)    683.78
   smtp           49201 (  0.09%)         14756350 (  0.04%)    299.92
   ftp            59310 (  0.11%)          4197736 (  0.01%)     70.78
   pop3            7320 (  0.01%)          5565576 (  0.02%)    760.32
   imap            5741 (  0.01%)          4661275 (  0.01%)    811.93
   telnet          1196 (  0.00%)            80709 (  0.00%)     67.48
   ssh            92022 (  0.17%)         11805773 (  0.03%)    128.29
   dns             5696 (  0.01%)          3545833 (  0.01%)    622.51
   bgp              528 (  0.00%)           116267 (  0.00%)    220.20
   napster           19 (  0.00%)             1511 (  0.00%)     79.53
   realaud          360 (  0.00%)            25332 (  0.00%)     70.37
   rtsp              12 (  0.00%)              720 (  0.00%)     60.00
   icecast        60005 (  0.11%)         54631574 (  0.16%)    910.45
   hotline            6 (  0.00%)              724 (  0.00%)    120.67
   other        1952903 (  3.60%)       1144568872 (  3.39%)    586.09
  udp           2027788 (  3.74%)        994014581 (  2.95%)    490.20
   dns          1020894 (  1.88%)        619166441 (  1.84%)    606.49
   rip               10 (  0.00%)              686 (  0.00%)     68.60
   realaud            7 (  0.00%)              595 (  0.00%)     85.00
   halflif           31 (  0.00%)             5140 (  0.00%)    165.81
   starcra            8 (  0.00%)              976 (  0.00%)    122.00
   everque          159 (  0.00%)            17872 (  0.00%)    112.40
   unreal            44 (  0.00%)             3224 (  0.00%)     73.27
   quake             75 (  0.00%)             5547 (  0.00%)     73.96
   cuseeme            4 (  0.00%)              352 (  0.00%)     88.00
   other        1006149 (  1.85%)        374493419 (  1.11%)    372.20
  icmp         17495372 ( 32.25%)       1119660103 (  3.32%)     64.00
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec          113727 (  0.21%)         95402210 (  0.28%)    838.87
  ip6            859224 (  1.58%)        674241936 (  2.00%)    784.71
  other           92628 (  0.17%)         21013313 (  0.06%)    226.86
  frag           322072 (  0.59%)        440130331 (  1.30%)   1366.56
 ip6            5675404 ( 10.46%)       3984452084 ( 11.81%)    702.06
  tcp6          5557630 ( 10.24%)       3951855177 ( 11.71%)    711.07
   http(s)      2980190 (  5.49%)       3649187532 ( 10.82%)   1224.48
   http(c)       549674 (  1.01%)         47997039 (  0.14%)     87.32
   smtp             190 (  0.00%)           131068 (  0.00%)    689.83
   ftp              757 (  0.00%)            79968 (  0.00%)    105.64
   pop3              17 (  0.00%)             6841 (  0.00%)    402.41
   ssh               72 (  0.00%)            12450 (  0.00%)    172.92
   dns              199 (  0.00%)            47128 (  0.00%)    236.82
   bgp               97 (  0.00%)            23857 (  0.00%)    245.95
   other        2026434 (  3.74%)        254369294 (  0.75%)    125.53
  udp6            95283 (  0.18%)         28761358 (  0.09%)    301.85
   dns            92692 (  0.17%)         28452645 (  0.08%)    306.96
   realaud            1 (  0.00%)              107 (  0.00%)    107.00
   halflif            1 (  0.00%)              106 (  0.00%)    106.00
   starcra            1 (  0.00%)              101 (  0.00%)    101.00
   everque            1 (  0.00%)              101 (  0.00%)    101.00
   quake              3 (  0.00%)              334 (  0.00%)    111.33
   other           2584 (  0.00%)           307964 (  0.00%)    119.18
  icmp6           21133 (  0.04%)          2521302 (  0.01%)    119.31
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           1328 (  0.00%)          1310167 (  0.00%)    986.57


tcpdump file: 201307091400.dump.gz (1132.46 MB)