Traffic Trace Info


DumpFile: 201307271400.dump
FileSize: 3548.01MB
Id: 201307271400
StartTime: Sat Jul 27 14:00:00 2013
EndTime: Sat Jul 27 14:15:01 2013
TotalTime: 900.04 seconds
TotalCapSize: -1415.34MB CapLen: 96 bytes
# of packets: 56841453 (18307.49MB)
AvgRate: 170.63Mbps stddev:39.35M

IP flow (unique src/dst pair) Information

# of flows: 20678040 (avg. 2.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 4.2% 2.9% 2.2% 1.9% 1.5% 1.4% 1.4% 1.0% 1.0%

IP address Information

# of IPv4 addresses: 16732053
Top 10 bandwidth usage (bytes/total in %):
10.6% 6.8% 5.2% 5.0% 4.5% 4.5% 4.5% 4.4% 4.4% 4.4%
# of IPv6 addresses: 10457
Top 10 bandwidth usage (bytes/total in %):
31.0% 20.8% 18.5% 14.1% 11.6% 5.2% 4.3% 2.9% 2.5% 2.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   37072390
 [   64-  127]:    7165043
 [  128-  255]:     753513
 [  256-  511]:     552977
 [  512- 1023]:     694726
 [ 1024- 2047]:   10602804


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         56841453 (100.00%)      19196795328 (100.00%)    337.73
 ip            55541264 ( 97.71%)      18240294434 ( 95.02%)    328.41
  tcp          16413375 ( 28.88%)      14204147571 ( 73.99%)    865.40
   http(s)      8450075 ( 14.87%)      10652733737 ( 55.49%)   1260.67
   http(c)      5030892 (  8.85%)       1412037377 (  7.36%)    280.67
   squid         984406 (  1.73%)        804522671 (  4.19%)    817.27
   smtp          101040 (  0.18%)         11455353 (  0.06%)    113.37
   ftp            13852 (  0.02%)           972815 (  0.01%)     70.23
   pop3            2949 (  0.01%)           711933 (  0.00%)    241.42
   imap            1557 (  0.00%)           216961 (  0.00%)    139.35
   telnet          2925 (  0.01%)          1672925 (  0.01%)    571.94
   ssh            58913 (  0.10%)          5660761 (  0.03%)     96.09
   dns             5384 (  0.01%)          3329713 (  0.02%)    618.45
   bgp              850 (  0.00%)           441609 (  0.00%)    519.54
   napster            4 (  0.00%)              276 (  0.00%)     69.00
   realaud           10 (  0.00%)             1763 (  0.00%)    176.30
   rtsp              16 (  0.00%)             2794 (  0.00%)    174.62
   icecast        13889 (  0.02%)         10360325 (  0.05%)    745.94
   hotline            2 (  0.00%)              132 (  0.00%)     66.00
   other        1746611 (  3.07%)       1300026426 (  6.77%)    744.31
  udp          16768631 ( 29.50%)       2551614152 ( 13.29%)    152.17
   dns          1608949 (  2.83%)       1014754213 (  5.29%)    630.69
   realaud            7 (  0.00%)              649 (  0.00%)     92.71
   halflif           40 (  0.00%)             7148 (  0.00%)    178.70
   starcra            4 (  0.00%)              894 (  0.00%)    223.50
   everque         9543 (  0.02%)          9576559 (  0.05%)   1003.52
   unreal            11 (  0.00%)             1365 (  0.00%)    124.09
   quake             10 (  0.00%)              820 (  0.00%)     82.00
   cuseeme            2 (  0.00%)              171 (  0.00%)     85.50
   other       15148953 ( 26.65%)       1526958872 (  7.95%)    100.80
  icmp         21922134 ( 38.57%)       1381317491 (  7.20%)     63.01
  ipip              184 (  0.00%)            19160 (  0.00%)    104.13
  ipsec               1 (  0.00%)              438 (  0.00%)    438.00
  ip6            271141 (  0.48%)         70501729 (  0.37%)    260.02
  sctp                2 (  0.00%)              206 (  0.00%)    103.00
  other          165796 (  0.29%)         32693687 (  0.17%)    197.19
  frag          1010425 (  1.78%)       1361597925 (  7.09%)   1347.55
 ip6            1300189 (  2.29%)        956500894 (  4.98%)    735.66
  tcp6          1163976 (  2.05%)        927987910 (  4.83%)    797.26
   http(s)       512133 (  0.90%)        597001780 (  3.11%)   1165.72
   http(c)       204037 (  0.36%)         19419865 (  0.10%)     95.18
   squid             36 (  0.00%)             8164 (  0.00%)    226.78
   smtp              80 (  0.00%)             9905 (  0.00%)    123.81
   ftp               43 (  0.00%)             3901 (  0.00%)     90.72
   pop3              87 (  0.00%)            32716 (  0.00%)    376.05
   ssh               72 (  0.00%)            12450 (  0.00%)    172.92
   dns              318 (  0.00%)            49349 (  0.00%)    155.19
   bgp              194 (  0.00%)           137442 (  0.00%)    708.46
   other         446976 (  0.79%)        311312338 (  1.62%)    696.49
  udp6            94788 (  0.17%)         22986076 (  0.12%)    242.50
   dns            92851 (  0.16%)         22772514 (  0.12%)    245.26
   realaud            1 (  0.00%)              108 (  0.00%)    108.00
   halflif            2 (  0.00%)              220 (  0.00%)    110.00
   everque            1 (  0.00%)              107 (  0.00%)    107.00
   unreal             1 (  0.00%)              104 (  0.00%)    104.00
   quake              1 (  0.00%)              111 (  0.00%)    111.00
   other           1931 (  0.00%)           212912 (  0.00%)    110.26
  icmp6           40551 (  0.07%)          4949404 (  0.03%)    122.05
  pim6               31 (  0.00%)             4216 (  0.00%)    136.00
  other6            843 (  0.00%)           573288 (  0.00%)    680.06


tcpdump file: 201307271400.dump.gz (945.72 MB)