Traffic Trace Info


DumpFile: 201307181400.dump
FileSize: 4241.23MB
Id: 201307181400
StartTime: Thu Jul 18 14:00:01 2013
EndTime: Thu Jul 18 14:15:00 2013
TotalTime: 899.48 seconds
TotalCapSize: -791.60MB CapLen: 96 bytes
# of packets: 61395536 (34490.22MB)
AvgRate: 321.74Mbps stddev:45.40M

IP flow (unique src/dst pair) Information

# of flows: 19523246 (avg. 3.14 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.8% 1.8% 1.2% 1.2% 1.1% 1.1% 1.1% 1.1% 1.0%

IP address Information

# of IPv4 addresses: 15610307
Top 10 bandwidth usage (bytes/total in %):
9.8% 7.6% 6.2% 4.6% 4.0% 3.5% 3.2% 2.7% 2.3% 2.2%
# of IPv6 addresses: 10985
Top 10 bandwidth usage (bytes/total in %):
13.6% 13.6% 5.9% 4.6% 4.3% 4.3% 3.2% 3.1% 2.9% 2.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   24913481
 [   64-  127]:   11167329
 [  128-  255]:     900598
 [  256-  511]:    1220949
 [  512- 1023]:    1383223
 [ 1024- 2047]:   21809956


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         61395536 (100.00%)      36165612112 (100.00%)    589.06
 ip            56687070 ( 92.33%)      31299331362 ( 86.54%)    552.14
  tcp          32448447 ( 52.85%)      28469164271 ( 78.72%)    877.37
   http(s)     18780901 ( 30.59%)      24328883496 ( 67.27%)   1295.41
   http(c)     10938910 ( 17.82%)       2723321522 (  7.53%)    248.96
   squid         227162 (  0.37%)        114211914 (  0.32%)    502.78
   smtp           91788 (  0.15%)         37943534 (  0.10%)    413.38
   nntp               9 (  0.00%)              540 (  0.00%)     60.00
   ftp            61548 (  0.10%)          5221256 (  0.01%)     84.83
   pop3            4786 (  0.01%)          3600709 (  0.01%)    752.34
   imap            3633 (  0.01%)           514006 (  0.00%)    141.48
   telnet         26724 (  0.04%)          3445132 (  0.01%)    128.92
   ssh            16454 (  0.03%)          3328442 (  0.01%)    202.29
   dns             3120 (  0.01%)           439055 (  0.00%)    140.72
   bgp              547 (  0.00%)           120538 (  0.00%)    220.36
   napster           66 (  0.00%)             7353 (  0.00%)    111.41
   realaud          190 (  0.00%)            42614 (  0.00%)    224.28
   rtsp             126 (  0.00%)           157755 (  0.00%)   1252.02
   icecast        27577 (  0.04%)         23720837 (  0.07%)    860.17
   hotline           23 (  0.00%)             3015 (  0.00%)    131.09
   other        2264807 (  3.69%)       1224197993 (  3.38%)    540.53
  udp           2356721 (  3.84%)       1064123521 (  2.94%)    451.53
   dns           963985 (  1.57%)        360852754 (  1.00%)    374.33
   rip               28 (  0.00%)             1848 (  0.00%)     66.00
   realaud           32 (  0.00%)             2836 (  0.00%)     88.62
   halflif           30 (  0.00%)             4051 (  0.00%)    135.03
   starcra            7 (  0.00%)             1541 (  0.00%)    220.14
   everque           44 (  0.00%)             6290 (  0.00%)    142.95
   unreal            19 (  0.00%)             4783 (  0.00%)    251.74
   quake            181 (  0.00%)            11564 (  0.00%)     63.89
   cuseeme            8 (  0.00%)              712 (  0.00%)     89.00
   other        1391911 (  2.27%)        703015829 (  1.94%)    505.07
  icmp         20884870 ( 34.02%)       1313840320 (  3.63%)     62.91
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec           20223 (  0.03%)          7473378 (  0.02%)    369.55
  ip6            882813 (  1.44%)        421995786 (  1.17%)    478.01
  other           93811 (  0.15%)         22714816 (  0.06%)    242.13
  frag           223594 (  0.36%)        289587088 (  0.80%)   1295.15
 ip6            4708466 (  7.67%)       4866280750 ( 13.46%)   1033.52
  tcp6          4207208 (  6.85%)       4803913032 ( 13.28%)   1141.83
   http(s)      3455403 (  5.63%)       4580941417 ( 12.67%)   1325.73
   http(c)       482781 (  0.79%)         44211192 (  0.12%)     91.58
   smtp             389 (  0.00%)           381564 (  0.00%)    980.88
   ftp              146 (  0.00%)            14270 (  0.00%)     97.74
   pop3              49 (  0.00%)            31893 (  0.00%)    650.88
   ssh               72 (  0.00%)            12450 (  0.00%)    172.92
   dns              368 (  0.00%)           197864 (  0.00%)    537.67
   bgp              102 (  0.00%)            29472 (  0.00%)    288.94
   hotline            5 (  0.00%)             1203 (  0.00%)    240.60
   other         267893 (  0.44%)        178091707 (  0.49%)    664.79
  udp6           457161 (  0.74%)         55849195 (  0.15%)    122.17
   dns           453881 (  0.74%)         54814683 (  0.15%)    120.77
   rip                6 (  0.00%)              474 (  0.00%)     79.00
   realaud           12 (  0.00%)              948 (  0.00%)     79.00
   halflif           14 (  0.00%)             1159 (  0.00%)     82.79
   starcra            6 (  0.00%)              474 (  0.00%)     79.00
   everque           18 (  0.00%)             1422 (  0.00%)     79.00
   unreal             6 (  0.00%)              474 (  0.00%)     79.00
   quake             21 (  0.00%)             1796 (  0.00%)     85.52
   cuseeme            6 (  0.00%)              474 (  0.00%)     79.00
   other           3191 (  0.01%)          1027291 (  0.00%)    321.93
  icmp6           42485 (  0.07%)          4894141 (  0.01%)    115.20
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           1582 (  0.00%)          1620302 (  0.00%)   1024.21


tcpdump file: 201307181400.dump.gz (1304.41 MB)