Traffic Trace Info


DumpFile: 201307241400.dump
FileSize: 4087.25MB
Id: 201307241400
StartTime: Wed Jul 24 14:00:00 2013
EndTime: Wed Jul 24 14:15:01 2013
TotalTime: 900.62 seconds
TotalCapSize: -928.76MB CapLen: 96 bytes
# of packets: 60293304 (30620.23MB)
AvgRate: 285.14Mbps stddev:54.56M

IP flow (unique src/dst pair) Information

# of flows: 20901528 (avg. 2.88 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 4.4% 2.3% 2.1% 1.9% 1.2% 1.1% 1.0% 1.0% 1.0%

IP address Information

# of IPv4 addresses: 16662865
Top 10 bandwidth usage (bytes/total in %):
11.5% 7.0% 5.2% 5.0% 4.8% 4.3% 4.2% 3.6% 2.5% 2.5%
# of IPv6 addresses: 12251
Top 10 bandwidth usage (bytes/total in %):
13.7% 7.5% 6.4% 4.7% 4.6% 4.6% 4.3% 3.0% 2.7% 2.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   25261178
 [   64-  127]:   12122158
 [  128-  255]:    1245086
 [  256-  511]:    1429344
 [  512- 1023]:    1185072
 [ 1024- 2047]:   19050466


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         60293304 (100.00%)      32107639516 (100.00%)    532.52
 ip            56990883 ( 94.52%)      29509273448 ( 91.91%)    517.79
  tcp          30799484 ( 51.08%)      26092483657 ( 81.27%)    847.17
   http(s)     16314114 ( 27.06%)      20443905364 ( 63.67%)   1253.14
   http(c)      9852055 ( 16.34%)       3499360768 ( 10.90%)    355.19
   squid          47012 (  0.08%)         12763412 (  0.04%)    271.49
   smtp           71238 (  0.12%)         22796061 (  0.07%)    320.00
   nntp               2 (  0.00%)              120 (  0.00%)     60.00
   ftp            18715 (  0.03%)          1780359 (  0.01%)     95.13
   pop3            6102 (  0.01%)          3079956 (  0.01%)    504.75
   imap           24071 (  0.04%)         27408189 (  0.09%)   1138.64
   telnet          3173 (  0.01%)          1695326 (  0.01%)    534.30
   ssh          1721902 (  2.86%)        271761486 (  0.85%)    157.83
   dns             2548 (  0.00%)           299501 (  0.00%)    117.54
   bgp              514 (  0.00%)           113198 (  0.00%)    220.23
   napster          225 (  0.00%)            93960 (  0.00%)    417.60
   realaud            1 (  0.00%)               60 (  0.00%)     60.00
   rtsp              12 (  0.00%)             1625 (  0.00%)    135.42
   icecast        10915 (  0.02%)           737898 (  0.00%)     67.60
   hotline           26 (  0.00%)             4435 (  0.00%)    170.58
   other        2726859 (  4.52%)       1806681939 (  5.63%)    662.55
  udp           3557343 (  5.90%)       1601270601 (  4.99%)    450.13
   dns          1621293 (  2.69%)        516486727 (  1.61%)    318.56
   rip                3 (  0.00%)              225 (  0.00%)     75.00
   realaud           27 (  0.00%)             2263 (  0.00%)     83.81
   halflif           27 (  0.00%)             2056 (  0.00%)     76.15
   starcra           14 (  0.00%)             1957 (  0.00%)    139.79
   everque           63 (  0.00%)             7949 (  0.00%)    126.17
   unreal             8 (  0.00%)             1097 (  0.00%)    137.12
   quake             33 (  0.00%)             2952 (  0.00%)     89.45
   cuseeme           10 (  0.00%)              763 (  0.00%)     76.30
   other        1934845 (  3.21%)       1084463019 (  3.38%)    560.49
  icmp         21751504 ( 36.08%)       1374697898 (  4.28%)     63.20
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec           20763 (  0.03%)          9535794 (  0.03%)    459.27
  ip6            686016 (  1.14%)        396536229 (  1.24%)    578.03
  sctp                2 (  0.00%)              206 (  0.00%)    103.00
  other          175586 (  0.29%)         34729793 (  0.11%)    197.79
  frag           513261 (  0.85%)        659273421 (  2.05%)   1284.48
 ip6            3302421 (  5.48%)       2598366068 (  8.09%)    786.81
  tcp6          3112159 (  5.16%)       2485077080 (  7.74%)    798.51
   http(s)      1895094 (  3.14%)       2228258440 (  6.94%)   1175.80
   http(c)       745002 (  1.24%)         71860980 (  0.22%)     96.46
   smtp             140 (  0.00%)            44749 (  0.00%)    319.64
   ftp              260 (  0.00%)            31634 (  0.00%)    121.67
   pop3             145 (  0.00%)            66643 (  0.00%)    459.61
   ssh               72 (  0.00%)            12450 (  0.00%)    172.92
   dns             3692 (  0.01%)          2591845 (  0.01%)    702.02
   bgp              105 (  0.00%)            29847 (  0.00%)    284.26
   other         467649 (  0.78%)        182180492 (  0.57%)    389.57
  udp6            74711 (  0.12%)         22598708 (  0.07%)    302.48
   dns            72950 (  0.12%)         22403676 (  0.07%)    307.11
   realaud            1 (  0.00%)              106 (  0.00%)    106.00
   halflif            1 (  0.00%)              106 (  0.00%)    106.00
   starcra            1 (  0.00%)              111 (  0.00%)    111.00
   unreal             1 (  0.00%)              163 (  0.00%)    163.00
   quake              1 (  0.00%)              172 (  0.00%)    172.00
   other           1756 (  0.00%)           194374 (  0.00%)    110.69
  icmp6           43156 (  0.07%)          5117668 (  0.02%)    118.59
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6          72365 (  0.12%)         85568532 (  0.27%)   1182.46


tcpdump file: 201307241400.dump.gz (1317.16 MB)