Traffic Trace Info


DumpFile: 201307111400.dump
FileSize: 3722.98MB
Id: 201307111400
StartTime: Thu Jul 11 14:00:01 2013
EndTime: Thu Jul 11 14:15:00 2013
TotalTime: 899.57 seconds
TotalCapSize: -1204.19MB CapLen: 96 bytes
# of packets: 54470702 (29497.62MB)
AvgRate: 275.03Mbps stddev:42.38M

IP flow (unique src/dst pair) Information

# of flows: 19638474 (avg. 2.77 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.2% 1.8% 1.7% 1.6% 1.5% 1.4% 1.2% 1.2% 1.1%

IP address Information

# of IPv4 addresses: 15620441
Top 10 bandwidth usage (bytes/total in %):
12.6% 8.2% 7.5% 5.8% 4.2% 3.5% 3.5% 2.6% 2.5% 2.4%
# of IPv6 addresses: 10560
Top 10 bandwidth usage (bytes/total in %):
13.8% 8.6% 8.5% 7.7% 7.7% 7.2% 3.1% 2.3% 2.3% 2.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   23483639
 [   64-  127]:    9545467
 [  128-  255]:     950652
 [  256-  511]:    1011075
 [  512- 1023]:     845546
 [ 1024- 2047]:   18634323


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         54470702 (100.00%)      30930498417 (100.00%)    567.84
 ip            50548364 ( 92.80%)      28159439316 ( 91.04%)    557.08
  tcp          26766029 ( 49.14%)      24834692005 ( 80.29%)    927.84
   http(s)     16594764 ( 30.47%)      20990461460 ( 67.86%)   1264.88
   http(c)      8032930 ( 14.75%)       2662193041 (  8.61%)    331.41
   squid          69517 (  0.13%)         13244981 (  0.04%)    190.53
   smtp           54046 (  0.10%)         21635661 (  0.07%)    400.32
   nntp               7 (  0.00%)              428 (  0.00%)     61.14
   ftp            38797 (  0.07%)          2910313 (  0.01%)     75.01
   pop3            3318 (  0.01%)          2208623 (  0.01%)    665.65
   imap            2539 (  0.00%)           704181 (  0.00%)    277.35
   telnet         19340 (  0.04%)          1401335 (  0.00%)     72.46
   ssh            48091 (  0.09%)          6409878 (  0.02%)    133.29
   dns             2077 (  0.00%)           270742 (  0.00%)    130.35
   bgp              521 (  0.00%)           100190 (  0.00%)    192.30
   napster           16 (  0.00%)             2394 (  0.00%)    149.62
   realaud          123 (  0.00%)            16063 (  0.00%)    130.59
   icecast        15311 (  0.03%)         13602235 (  0.04%)    888.40
   hotline            5 (  0.00%)              946 (  0.00%)    189.20
   other        1884624 (  3.46%)       1119529354 (  3.62%)    594.03
  udp           2323514 (  4.27%)       1060243451 (  3.43%)    456.31
   dns          1049667 (  1.93%)        564331113 (  1.82%)    537.63
   realaud           15 (  0.00%)             1144 (  0.00%)     76.27
   halflif           12 (  0.00%)             1831 (  0.00%)    152.58
   starcra            7 (  0.00%)             1069 (  0.00%)    152.71
   everque           31 (  0.00%)             5443 (  0.00%)    175.58
   unreal           149 (  0.00%)            19236 (  0.00%)    129.10
   quake             31 (  0.00%)             3060 (  0.00%)     98.71
   cuseeme            1 (  0.00%)               79 (  0.00%)     79.00
   other        1272929 (  2.34%)        495647287 (  1.60%)    389.38
  icmp         20023098 ( 36.76%)       1253023987 (  4.05%)     62.58
  ipip              184 (  0.00%)            19160 (  0.00%)    104.13
  ipsec           16418 (  0.03%)          5345048 (  0.02%)    325.56
  ip6           1324786 (  2.43%)        983192820 (  3.18%)    742.15
  other           94335 (  0.17%)         22922845 (  0.07%)    242.99
  frag           401253 (  0.74%)        533282716 (  1.72%)   1329.04
 ip6            3922338 (  7.20%)       2771059101 (  8.96%)    706.48
  tcp6          3787373 (  6.95%)       2731138485 (  8.83%)    721.12
   http(s)      2208807 (  4.06%)       2516464115 (  8.14%)   1139.29
   http(c)      1335004 (  2.45%)        118920794 (  0.38%)     89.08
   squid             10 (  0.00%)             1217 (  0.00%)    121.70
   smtp              81 (  0.00%)            27314 (  0.00%)    337.21
   ftp             1142 (  0.00%)           110623 (  0.00%)     96.87
   ssh               72 (  0.00%)            12450 (  0.00%)    172.92
   dns              258 (  0.00%)            52357 (  0.00%)    202.93
   bgp              276 (  0.00%)           218895 (  0.00%)    793.10
   other         241723 (  0.44%)         95330720 (  0.31%)    394.38
  udp6           107798 (  0.20%)         35046775 (  0.11%)    325.12
   dns           106009 (  0.19%)         34844046 (  0.11%)    328.69
   realaud            1 (  0.00%)              106 (  0.00%)    106.00
   halflif            1 (  0.00%)              107 (  0.00%)    107.00
   starcra            1 (  0.00%)              112 (  0.00%)    112.00
   everque            2 (  0.00%)              231 (  0.00%)    115.50
   cuseeme            1 (  0.00%)              105 (  0.00%)    105.00
   other           1783 (  0.00%)           202068 (  0.00%)    113.33
  icmp6           25750 (  0.05%)          3550074 (  0.01%)    137.87
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           1387 (  0.00%)          1319687 (  0.00%)    951.47


tcpdump file: 201307111400.dump.gz (1164.13 MB)