Traffic Trace Info


DumpFile: 201307291400.dump
FileSize: 4162.68MB
Id: 201307291400
StartTime: Mon Jul 29 14:00:00 2013
EndTime: Mon Jul 29 14:15:00 2013
TotalTime: 900.14 seconds
TotalCapSize: -910.30MB CapLen: 96 bytes
# of packets: 64027141 (31654.99MB)
AvgRate: 295.07Mbps stddev:48.02M

IP flow (unique src/dst pair) Information

# of flows: 20561721 (avg. 3.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 3.0% 2.8% 2.7% 2.7% 2.7% 2.7% 2.2% 1.6% 1.2%

IP address Information

# of IPv4 addresses: 16492585
Top 10 bandwidth usage (bytes/total in %):
14.5% 12.2% 5.1% 5.0% 4.6% 3.9% 3.7% 3.2% 2.9% 2.9%
# of IPv6 addresses: 12502
Top 10 bandwidth usage (bytes/total in %):
13.7% 10.2% 10.2% 9.7% 9.3% 8.1% 8.0% 4.9% 4.1% 4.1%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   25051135
 [   64-  127]:   14887168
 [  128-  255]:    1559543
 [  256-  511]:    1258423
 [  512- 1023]:    1067874
 [ 1024- 2047]:   20202998


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         64027141 (100.00%)      33192664863 (100.00%)    518.42
 ip            62175917 ( 97.11%)      31600066976 ( 95.20%)    508.24
  tcp          28657482 ( 44.76%)      27416351524 ( 82.60%)    956.69
   http(s)     14996675 ( 23.42%)      18977769066 ( 57.17%)   1265.47
   http(c)      8172511 ( 12.76%)       2817443032 (  8.49%)    344.75
   squid         101677 (  0.16%)         28052001 (  0.08%)    275.89
   smtp           73161 (  0.11%)         19353249 (  0.06%)    264.53
   ftp            30216 (  0.05%)          2676821 (  0.01%)     88.59
   pop3            3790 (  0.01%)          1996097 (  0.01%)    526.67
   imap            7007 (  0.01%)          4863743 (  0.01%)    694.13
   telnet          2877 (  0.00%)          1676089 (  0.01%)    582.58
   ssh          3582647 (  5.60%)       4535182083 ( 13.66%)   1265.87
   dns             4114 (  0.01%)           631875 (  0.00%)    153.59
   bgp              495 (  0.00%)           103996 (  0.00%)    210.09
   napster           64 (  0.00%)            11379 (  0.00%)    177.80
   realaud           18 (  0.00%)             1484 (  0.00%)     82.44
   rtsp            5307 (  0.01%)          7620118 (  0.02%)   1435.86
   icecast        30425 (  0.05%)         12690919 (  0.04%)    417.12
   hotline           10 (  0.00%)             1136 (  0.00%)    113.60
   other        1646488 (  2.57%)       1006278436 (  3.03%)    611.17
  udp           4351219 (  6.80%)       2105577678 (  6.34%)    483.91
   dns          1367992 (  2.14%)        799858037 (  2.41%)    584.69
   realaud           22 (  0.00%)             2126 (  0.00%)     96.64
   halflif           15 (  0.00%)             1375 (  0.00%)     91.67
   starcra           11 (  0.00%)             1598 (  0.00%)    145.27
   everque           61 (  0.00%)             9646 (  0.00%)    158.13
   unreal            16 (  0.00%)             1368 (  0.00%)     85.50
   quake             15 (  0.00%)             1298 (  0.00%)     86.53
   cuseeme            9 (  0.00%)              814 (  0.00%)     90.44
   other        2975070 (  4.65%)       1296552043 (  3.91%)    435.81
  icmp         28586451 ( 44.65%)       1883518589 (  5.67%)     65.89
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec           30950 (  0.05%)          8611684 (  0.03%)    278.25
  ip6            374023 (  0.58%)        151799235 (  0.46%)    405.86
  other          175607 (  0.27%)         34188996 (  0.10%)    194.69
  frag           859246 (  1.34%)       1132311401 (  3.41%)   1317.80
 ip6            1851224 (  2.89%)       1592597887 (  4.80%)    860.29
  tcp6          1691424 (  2.64%)       1550714721 (  4.67%)    916.81
   http(s)      1053911 (  1.65%)       1180869907 (  3.56%)   1120.46
   http(c)       157993 (  0.25%)         19065840 (  0.06%)    120.68
   smtp             201 (  0.00%)            68086 (  0.00%)    338.74
   ftp               25 (  0.00%)             2209 (  0.00%)     88.36
   pop3              98 (  0.00%)            67126 (  0.00%)    684.96
   ssh               72 (  0.00%)            12450 (  0.00%)    172.92
   dns              435 (  0.00%)            72550 (  0.00%)    166.78
   bgp              101 (  0.00%)            34648 (  0.00%)    343.05
   other         478588 (  0.75%)        350521905 (  1.06%)    732.41
  udp6           114845 (  0.18%)         29143952 (  0.09%)    253.77
   dns           113256 (  0.18%)         28967882 (  0.09%)    255.77
   halflif            2 (  0.00%)              218 (  0.00%)    109.00
   starcra            1 (  0.00%)              115 (  0.00%)    115.00
   everque            2 (  0.00%)              209 (  0.00%)    104.50
   unreal             1 (  0.00%)              115 (  0.00%)    115.00
   cuseeme            2 (  0.00%)              223 (  0.00%)    111.50
   other           1581 (  0.00%)           175190 (  0.00%)    110.81
  icmp6           38039 (  0.06%)          4705902 (  0.01%)    123.71
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           6886 (  0.01%)          8029232 (  0.02%)   1166.02


tcpdump file: 201307291400.dump.gz (1335.17 MB)