Traffic Trace Info


DumpFile: 201308021400.dump
FileSize: 3275.29MB
Id: 201308021400
StartTime: Fri Aug 2 14:00:01 2013
EndTime: Fri Aug 2 14:15:00 2013
TotalTime: 899.44 seconds
TotalCapSize: -1589.52MB CapLen: 96 bytes
# of packets: 50383812 (22602.11MB)
AvgRate: 210.83Mbps stddev:46.64M

IP flow (unique src/dst pair) Information

# of flows: 20972009 (avg. 2.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 3.9% 1.7% 1.5% 1.0% 1.0% 0.9% 0.9% 0.9% 0.9%

IP address Information

# of IPv4 addresses: 16911436
Top 10 bandwidth usage (bytes/total in %):
7.2% 6.3% 6.0% 6.0% 5.4% 5.3% 4.0% 4.0% 3.3% 2.8%
# of IPv6 addresses: 11694
Top 10 bandwidth usage (bytes/total in %):
14.5% 14.5% 12.2% 6.6% 6.1% 5.1% 3.7% 3.5% 3.4% 2.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   24842834
 [   64-  127]:    8558753
 [  128-  255]:    1042514
 [  256-  511]:     976386
 [  512- 1023]:    1505564
 [ 1024- 2047]:   13457761


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         50383812 (100.00%)      23700025383 (100.00%)    470.39
 ip            49155110 ( 97.56%)      22805747157 ( 96.23%)    463.95
  tcp          21288696 ( 42.25%)      17436734903 ( 73.57%)    819.06
   http(s)     10355006 ( 20.55%)      12590916549 ( 53.13%)   1215.93
   http(c)      5767154 ( 11.45%)       1829408321 (  7.72%)    317.21
   squid          14443 (  0.03%)          9102921 (  0.04%)    630.27
   smtp           76655 (  0.15%)         17436634 (  0.07%)    227.47
   ftp            74289 (  0.15%)         46164551 (  0.19%)    621.42
   pop3           41221 (  0.08%)          4991665 (  0.02%)    121.10
   imap            7290 (  0.01%)          2515873 (  0.01%)    345.11
   telnet         18240 (  0.04%)          2809307 (  0.01%)    154.02
   ssh          1398452 (  2.78%)        256153694 (  1.08%)    183.17
   dns             4174 (  0.01%)          1679457 (  0.01%)    402.36
   bgp              501 (  0.00%)            93723 (  0.00%)    187.07
   napster           17 (  0.00%)             2470 (  0.00%)    145.29
   realaud         2343 (  0.00%)          1400925 (  0.01%)    597.92
   icecast         3499 (  0.01%)          2078563 (  0.01%)    594.04
   hotline            2 (  0.00%)              132 (  0.00%)     66.00
   other        3525410 (  7.00%)       2671980118 ( 11.27%)    757.92
  udp           5758039 ( 11.43%)       3617543784 ( 15.26%)    628.26
   dns          2388399 (  4.74%)       1373866630 (  5.80%)    575.22
   rip                7 (  0.00%)              515 (  0.00%)     73.57
   realaud           17 (  0.00%)             2000 (  0.00%)    117.65
   halflif           46 (  0.00%)             3988 (  0.00%)     86.70
   starcra           13 (  0.00%)              909 (  0.00%)     69.92
   everque           64 (  0.00%)             8693 (  0.00%)    135.83
   unreal           109 (  0.00%)            13673 (  0.00%)    125.44
   quake             34 (  0.00%)             2710 (  0.00%)     79.71
   cuseeme            6 (  0.00%)              484 (  0.00%)     80.67
   other        3368206 (  6.69%)       2243118636 (  9.46%)    665.97
  icmp         21512530 ( 42.70%)       1342617222 (  5.67%)     62.41
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec           25606 (  0.05%)         14664088 (  0.06%)    572.68
  ip6            399163 (  0.79%)        354470689 (  1.50%)    888.03
  sctp                2 (  0.00%)              206 (  0.00%)    103.00
  other          170889 (  0.34%)         39696995 (  0.17%)    232.30
  frag           954074 (  1.89%)       1268950445 (  5.35%)   1330.03
 ip6            1228702 (  2.44%)        894278226 (  3.77%)    727.82
  tcp6          1071542 (  2.13%)        851485713 (  3.59%)    794.64
   http(s)       665243 (  1.32%)        712584697 (  3.01%)   1071.16
   http(c)       205077 (  0.41%)         23598946 (  0.10%)    115.07
   smtp            1028 (  0.00%)           276147 (  0.00%)    268.63
   ftp              308 (  0.00%)            41956 (  0.00%)    136.22
   pop3             138 (  0.00%)            72839 (  0.00%)    527.82
   imap             208 (  0.00%)            47772 (  0.00%)    229.67
   ssh              558 (  0.00%)           155668 (  0.00%)    278.97
   dns             1479 (  0.00%)           656153 (  0.00%)    443.65
   bgp              100 (  0.00%)            25623 (  0.00%)    256.23
   other         197403 (  0.39%)        114025912 (  0.48%)    577.63
  udp6           114458 (  0.23%)         29572049 (  0.12%)    258.37
   dns           112909 (  0.22%)         29402178 (  0.12%)    260.41
   realaud            3 (  0.00%)              362 (  0.00%)    120.67
   halflif            2 (  0.00%)              191 (  0.00%)     95.50
   everque            2 (  0.00%)              185 (  0.00%)     92.50
   unreal             1 (  0.00%)              110 (  0.00%)    110.00
   quake              2 (  0.00%)              213 (  0.00%)    106.50
   cuseeme            1 (  0.00%)              105 (  0.00%)    105.00
   other           1538 (  0.00%)           168705 (  0.00%)    109.69
  icmp6           34135 (  0.07%)          4250306 (  0.02%)    124.51
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6           8537 (  0.02%)          8966078 (  0.04%)   1050.26


tcpdump file: 201308021400.dump.gz (1080.67 MB)