Traffic Trace Info


DumpFile: 201307311400.dump
FileSize: 4095.97MB
Id: 201307311400
StartTime: Wed Jul 31 14:00:01 2013
EndTime: Wed Jul 31 14:15:01 2013
TotalTime: 899.86 seconds
TotalCapSize: -947.67MB CapLen: 96 bytes
# of packets: 62104195 (30946.74MB)
AvgRate: 288.47Mbps stddev:43.44M

IP flow (unique src/dst pair) Information

# of flows: 17381396 (avg. 3.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 4.8% 4.5% 4.2% 4.2% 3.5% 2.6% 2.0% 1.5% 1.3%

IP address Information

# of IPv4 addresses: 13865311
Top 10 bandwidth usage (bytes/total in %):
23.7% 6.0% 5.1% 4.9% 4.9% 4.5% 4.5% 4.4% 4.0% 3.8%
# of IPv6 addresses: 12195
Top 10 bandwidth usage (bytes/total in %):
15.4% 14.8% 12.6% 8.2% 8.2% 7.9% 7.9% 3.3% 3.3% 3.3%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   21492150
 [   64-  127]:   16494136
 [  128-  255]:    1884338
 [  256-  511]:    1206812
 [  512- 1023]:    1251545
 [ 1024- 2047]:   19775214


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         62104195 (100.00%)      32450009954 (100.00%)    522.51
 ip            59604025 ( 95.97%)      30507194716 ( 94.01%)    511.83
  tcp          26679390 ( 42.96%)      26227720855 ( 80.83%)    983.07
   http(s)     11800526 ( 19.00%)      14443536276 ( 44.51%)   1223.97
   http(c)      7244271 ( 11.66%)       3332014144 ( 10.27%)    459.95
   squid          85498 (  0.14%)         14980290 (  0.05%)    175.21
   smtp           72747 (  0.12%)         21883311 (  0.07%)    300.81
   ftp            25169 (  0.04%)          2393736 (  0.01%)     95.11
   pop3           17317 (  0.03%)         19526674 (  0.06%)   1127.60
   imap            2480 (  0.00%)           646198 (  0.00%)    260.56
   telnet         37123 (  0.06%)          4192097 (  0.01%)    112.92
   ssh          5727464 (  9.22%)       7262460950 ( 22.38%)   1268.01
   dns             2225 (  0.00%)           313390 (  0.00%)    140.85
   bgp              529 (  0.00%)           121715 (  0.00%)    230.09
   napster           18 (  0.00%)             2659 (  0.00%)    147.72
   realaud            5 (  0.00%)              476 (  0.00%)     95.20
   icecast         2017 (  0.00%)          1679396 (  0.01%)    832.62
   hotline          296 (  0.00%)            29910 (  0.00%)    101.05
   other        1661705 (  2.68%)       1123939633 (  3.46%)    676.38
  udp           5506110 (  8.87%)       2274532689 (  7.01%)    413.09
   dns          1309563 (  2.11%)        606114300 (  1.87%)    462.84
   realaud           12 (  0.00%)             1356 (  0.00%)    113.00
   halflif           18 (  0.00%)             1673 (  0.00%)     92.94
   starcra           16 (  0.00%)             1867 (  0.00%)    116.69
   everque           60 (  0.00%)             9448 (  0.00%)    157.47
   unreal            71 (  0.00%)            11031 (  0.00%)    155.37
   quake             18 (  0.00%)             1865 (  0.00%)    103.61
   cuseeme            5 (  0.00%)              392 (  0.00%)     78.40
   other        4195266 (  6.76%)       1668165051 (  5.14%)    397.63
  icmp         26834437 ( 43.21%)       1779562040 (  5.48%)     66.32
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec           11191 (  0.02%)          3340078 (  0.01%)    298.46
  ip6            408385 (  0.66%)        191354121 (  0.59%)    468.56
  other          164327 (  0.26%)         30665663 (  0.09%)    186.61
  frag           741220 (  1.19%)        888927779 (  2.74%)   1199.28
 ip6            2500170 (  4.03%)       1942815238 (  5.99%)    777.07
  tcp6          2324025 (  3.74%)       1871582639 (  5.77%)    805.32
   http(s)      1176802 (  1.89%)       1424032762 (  4.39%)   1210.09
   http(c)       470241 (  0.76%)         47892089 (  0.15%)    101.85
   smtp             329 (  0.00%)           102756 (  0.00%)    312.33
   ftp              945 (  0.00%)            96000 (  0.00%)    101.59
   pop3             151 (  0.00%)           107685 (  0.00%)    713.15
   imap             260 (  0.00%)            65428 (  0.00%)    251.65
   ssh              119 (  0.00%)            17908 (  0.00%)    150.49
   dns              412 (  0.00%)            58682 (  0.00%)    142.43
   bgp               98 (  0.00%)            29471 (  0.00%)    300.72
   other         674668 (  1.09%)        399179858 (  1.23%)    591.67
  udp6           102812 (  0.17%)         22717796 (  0.07%)    220.96
   dns           100964 (  0.16%)         22484719 (  0.07%)    222.70
   halflif            3 (  0.00%)              299 (  0.00%)     99.67
   everque            2 (  0.00%)              219 (  0.00%)    109.50
   quake              1 (  0.00%)              118 (  0.00%)    118.00
   other           1842 (  0.00%)           232441 (  0.00%)    126.19
  icmp6           36013 (  0.06%)          4540179 (  0.01%)    126.07
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6          37290 (  0.06%)         43970544 (  0.14%)   1179.15


tcpdump file: 201307311400.dump.gz (1263.57 MB)