Traffic Trace Info


DumpFile: 201307201400.dump
FileSize: 3061.92MB
Id: 201307201400
StartTime: Sat Jul 20 14:00:00 2013
EndTime: Sat Jul 20 14:15:01 2013
TotalTime: 900.33 seconds
TotalCapSize: -1745.98MB CapLen: 96 bytes
# of packets: 46654881 (18767.32MB)
AvgRate: 174.86Mbps stddev:27.32M

IP flow (unique src/dst pair) Information

# of flows: 19725755 (avg. 2.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.4% 2.1% 1.5% 1.2% 1.2% 1.2% 1.0% 1.0% 1.0%

IP address Information

# of IPv4 addresses: 15731014
Top 10 bandwidth usage (bytes/total in %):
17.3% 7.4% 6.4% 4.0% 3.7% 3.3% 3.1% 2.9% 2.9% 2.9%
# of IPv6 addresses: 8680
Top 10 bandwidth usage (bytes/total in %):
22.9% 14.6% 13.5% 11.7% 10.5% 6.6% 5.8% 4.4% 3.2% 2.7%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   24604412
 [   64-  127]:    8086557
 [  128-  255]:     759517
 [  256-  511]:    1157133
 [  512- 1023]:     764332
 [ 1024- 2047]:   11282930


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         46654881 (100.00%)      19678956871 (100.00%)    421.80
 ip            45478920 ( 97.48%)      18684505896 ( 94.95%)    410.84
  tcp          21290097 ( 45.63%)      15066609645 ( 76.56%)    707.68
   http(s)      8538297 ( 18.30%)      10599438741 ( 53.86%)   1241.40
   http(c)      7142888 ( 15.31%)       1858231735 (  9.44%)    260.15
   squid         270670 (  0.58%)        103919437 (  0.53%)    383.93
   smtp           92388 (  0.20%)         24670994 (  0.13%)    267.04
   ftp            12551 (  0.03%)          1497356 (  0.01%)    119.30
   pop3         2116258 (  4.54%)        142390889 (  0.72%)     67.28
   imap           27654 (  0.06%)          2428876 (  0.01%)     87.83
   telnet         38356 (  0.08%)          4230917 (  0.02%)    110.31
   ssh           163350 (  0.35%)         24421440 (  0.12%)    149.50
   dns             3782 (  0.01%)           584027 (  0.00%)    154.42
   bgp              554 (  0.00%)           144590 (  0.00%)    260.99
   napster           30 (  0.00%)             3707 (  0.00%)    123.57
   realaud           23 (  0.00%)             2848 (  0.00%)    123.83
   rtsp           41170 (  0.09%)         60255055 (  0.31%)   1463.57
   icecast        91162 (  0.20%)         68116043 (  0.35%)    747.20
   hotline            5 (  0.00%)              686 (  0.00%)    137.20
   other        2750959 (  5.90%)       2176272304 ( 11.06%)    791.10
  udp           3382481 (  7.25%)       1830640152 (  9.30%)    541.21
   dns          1562233 (  3.35%)        713726051 (  3.63%)    456.86
   realaud           14 (  0.00%)             1162 (  0.00%)     83.00
   halflif           31 (  0.00%)             3676 (  0.00%)    118.58
   starcra            6 (  0.00%)              832 (  0.00%)    138.67
   everque           45 (  0.00%)             6455 (  0.00%)    143.44
   unreal            35 (  0.00%)             2702 (  0.00%)     77.20
   quake             40 (  0.00%)             3247 (  0.00%)     81.17
   cuseeme           12 (  0.00%)              926 (  0.00%)     77.17
   other        1812102 (  3.88%)       1114726334 (  5.66%)    615.16
  icmp         20169418 ( 43.23%)       1275199317 (  6.48%)     63.22
  ipip              184 (  0.00%)            19160 (  0.00%)    104.13
  ipsec            4207 (  0.01%)          2582382 (  0.01%)    613.83
  ip6            537482 (  1.15%)        489125526 (  2.49%)    910.03
  sctp                2 (  0.00%)              206 (  0.00%)    103.00
  other           95049 (  0.20%)         20329508 (  0.10%)    213.88
  frag          1123181 (  2.41%)       1221074070 (  6.20%)   1087.16
 ip6            1175961 (  2.52%)        994450975 (  5.05%)    845.65
  tcp6          1082181 (  2.32%)        970406454 (  4.93%)    896.71
   http(s)       697263 (  1.49%)        815259584 (  4.14%)   1169.23
   http(c)       189883 (  0.41%)         19407398 (  0.10%)    102.21
   smtp             162 (  0.00%)            31915 (  0.00%)    197.01
   ftp               25 (  0.00%)             2209 (  0.00%)     88.36
   ssh               72 (  0.00%)            12450 (  0.00%)    172.92
   dns              200 (  0.00%)            48751 (  0.00%)    243.75
   bgp              102 (  0.00%)            24022 (  0.00%)    235.51
   other         194474 (  0.42%)        135620125 (  0.69%)    697.37
  udp6            57643 (  0.12%)         19246147 (  0.10%)    333.89
   dns            54532 (  0.12%)         18904168 (  0.10%)    346.66
   other           3111 (  0.01%)           341979 (  0.00%)    109.93
  icmp6           35390 (  0.08%)          4153116 (  0.02%)    117.35
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6            717 (  0.00%)           641178 (  0.00%)    894.25


tcpdump file: 201307201400.dump.gz (996.71 MB)