Traffic Trace Info


DumpFile: 201307131400.dump
FileSize: 2644.46MB
Id: 201307131400
StartTime: Sat Jul 13 14:00:01 2013
EndTime: Sat Jul 13 14:15:01 2013
TotalTime: 900.04 seconds
TotalCapSize: 2030.36MB CapLen: 96 bytes
# of packets: 40245170 (15430.93MB)
AvgRate: 143.82Mbps stddev:31.91M

IP flow (unique src/dst pair) Information

# of flows: 19830983 (avg. 2.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 3.7% 3.1% 2.9% 2.8% 1.8% 1.6% 1.4% 1.4% 1.3%

IP address Information

# of IPv4 addresses: 15905465
Top 10 bandwidth usage (bytes/total in %):
16.5% 12.1% 8.6% 7.6% 5.8% 4.2% 4.1% 3.5% 3.5% 3.2%
# of IPv6 addresses: 8396
Top 10 bandwidth usage (bytes/total in %):
30.8% 30.8% 17.1% 13.4% 6.6% 5.8% 5.8% 5.8% 4.7% 4.0%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   22050424
 [   64-  127]:    6915207
 [  128-  255]:     831831
 [  256-  511]:     546577
 [  512- 1023]:     710692
 [ 1024- 2047]:    9190439


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         40245170 (100.00%)      16180498516 (100.00%)    402.05
 ip            38175725 ( 94.86%)      14701630460 ( 90.86%)    385.10
  tcp          14100943 ( 35.04%)      12286895764 ( 75.94%)    871.35
   http(s)      7739614 ( 19.23%)       9895696765 ( 61.16%)   1278.58
   http(c)      4424584 ( 10.99%)       1144450889 (  7.07%)    258.66
   squid          23022 (  0.06%)          3017865 (  0.02%)    131.09
   smtp           48934 (  0.12%)          9889484 (  0.06%)    202.10
   ftp            17509 (  0.04%)          1760514 (  0.01%)    100.55
   pop3             941 (  0.00%)           162930 (  0.00%)    173.15
   imap            1046 (  0.00%)           122861 (  0.00%)    117.46
   telnet          1662 (  0.00%)           113103 (  0.00%)     68.05
   ssh            43487 (  0.11%)         26518595 (  0.16%)    609.81
   dns             2148 (  0.01%)           290823 (  0.00%)    135.39
   bgp              501 (  0.00%)            85334 (  0.00%)    170.33
   napster            7 (  0.00%)              456 (  0.00%)     65.14
   realaud            7 (  0.00%)              456 (  0.00%)     65.14
   rtsp               2 (  0.00%)              122 (  0.00%)     61.00
   icecast        32293 (  0.08%)         23896930 (  0.15%)    740.00
   hotline            2 (  0.00%)              124 (  0.00%)     62.00
   other        1765183 (  4.39%)       1180888453 (  7.30%)    668.99
  udp           1793355 (  4.46%)        565904399 (  3.50%)    315.56
   dns           734055 (  1.82%)        162141328 (  1.00%)    220.88
   rip                1 (  0.00%)               90 (  0.00%)     90.00
   realaud          738 (  0.00%)            46353 (  0.00%)     62.81
   halflif           44 (  0.00%)             7791 (  0.00%)    177.07
   starcra            9 (  0.00%)             2517 (  0.00%)    279.67
   everque           35 (  0.00%)             6391 (  0.00%)    182.60
   unreal            21 (  0.00%)             6458 (  0.00%)    307.52
   quake             69 (  0.00%)             5569 (  0.00%)     80.71
   cuseeme            9 (  0.00%)              825 (  0.00%)     91.67
   other        1058001 (  2.63%)        403623139 (  2.49%)    381.50
  icmp         21241464 ( 52.78%)       1347332706 (  8.33%)     63.43
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec            4237 (  0.01%)          2517110 (  0.02%)    594.08
  ip6            937056 (  2.33%)        474424452 (  2.93%)    506.29
  other           98485 (  0.24%)         24536759 (  0.15%)    249.14
  frag           136286 (  0.34%)        175645589 (  1.09%)   1288.80
 ip6            2069445 (  5.14%)       1478868056 (  9.14%)    714.62
  tcp6          1367004 (  3.40%)       1091300548 (  6.74%)    798.32
   http(s)       553420 (  1.38%)        606396075 (  3.75%)   1095.72
   http(c)       262525 (  0.65%)         27050965 (  0.17%)    103.04
   squid             35 (  0.00%)             8090 (  0.00%)    231.14
   smtp             365 (  0.00%)            40188 (  0.00%)    110.10
   ftp             1853 (  0.00%)           179255 (  0.00%)     96.74
   ssh           540611 (  1.34%)        455832384 (  2.82%)    843.18
   dns              414 (  0.00%)           295135 (  0.00%)    712.89
   bgp               94 (  0.00%)            20307 (  0.00%)    216.03
   other           7687 (  0.02%)          1478149 (  0.01%)    192.29
  udp6           395959 (  0.98%)         45339343 (  0.28%)    114.51
   dns           393946 (  0.98%)         45123737 (  0.28%)    114.54
   rip                3 (  0.00%)              237 (  0.00%)     79.00
   realaud           10 (  0.00%)              812 (  0.00%)     81.20
   halflif           15 (  0.00%)             1185 (  0.00%)     79.00
   starcra            6 (  0.00%)              474 (  0.00%)     79.00
   everque            9 (  0.00%)              711 (  0.00%)     79.00
   unreal             9 (  0.00%)              711 (  0.00%)     79.00
   quake             10 (  0.00%)              829 (  0.00%)     82.90
   cuseeme            6 (  0.00%)              474 (  0.00%)     79.00
   other           1945 (  0.00%)           210173 (  0.00%)    108.06
  icmp6           24186 (  0.06%)          2958382 (  0.02%)    122.32
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6         282266 (  0.70%)        339265703 (  2.10%)   1201.94


tcpdump file: 201307131400.dump.gz (819.19 MB)