Traffic Trace Info


DumpFile: 201308061400.dump
FileSize: 3161.70MB
Id: 201308061400
StartTime: Tue Aug 6 14:00:00 2013
EndTime: Tue Aug 6 14:15:00 2013
TotalTime: 899.63 seconds
TotalCapSize: -1672.82MB CapLen: 96 bytes
# of packets: 48399174 (21178.15MB)
AvgRate: 197.45Mbps stddev:41.13M

IP flow (unique src/dst pair) Information

# of flows: 20724746 (avg. 2.34 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 1.6% 1.4% 1.4% 1.4% 1.4% 1.3% 1.2% 1.2% 1.2%

IP address Information

# of IPv4 addresses: 16819783
Top 10 bandwidth usage (bytes/total in %):
14.4% 9.3% 5.9% 3.2% 3.2% 3.1% 3.1% 2.6% 2.1% 2.0%
# of IPv6 addresses: 11544
Top 10 bandwidth usage (bytes/total in %):
22.2% 14.6% 14.6% 14.6% 14.5% 7.1% 4.3% 3.7% 3.7% 3.2%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   26146702
 [   64-  127]:    6812844
 [  128-  255]:     923171
 [  256-  511]:     731445
 [  512- 1023]:     766664
 [ 1024- 2047]:   13018348


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         48399174 (100.00%)      22206895444 (100.00%)    458.83
 ip            46165598 ( 95.39%)      20408246659 ( 91.90%)    442.07
  tcp          21545901 ( 44.52%)      17566477409 ( 79.10%)    815.30
   http(s)     11708496 ( 24.19%)      15107304035 ( 68.03%)   1290.29
   http(c)      7265569 ( 15.01%)       1063207347 (  4.79%)    146.34
   squid          11646 (  0.02%)          5722210 (  0.03%)    491.35
   smtp           63001 (  0.13%)         16443665 (  0.07%)    261.01
   ftp            15616 (  0.03%)           999378 (  0.00%)     64.00
   pop3            8733 (  0.02%)          7997070 (  0.04%)    915.73
   imap            4158 (  0.01%)          1120967 (  0.01%)    269.59
   telnet          4143 (  0.01%)          1769171 (  0.01%)    427.03
   ssh           558891 (  1.15%)        178699592 (  0.80%)    319.74
   dns             4027 (  0.01%)          1666363 (  0.01%)    413.80
   bgp              520 (  0.00%)           113558 (  0.00%)    218.38
   napster           24 (  0.00%)             1682 (  0.00%)     70.08
   icecast        43459 (  0.09%)         13631548 (  0.06%)    313.66
   other        1857618 (  3.84%)       1167800823 (  5.26%)    628.65
  udp           2495724 (  5.16%)       1113271199 (  5.01%)    446.07
   dns           638408 (  1.32%)        166074917 (  0.75%)    260.14
   realaud            7 (  0.00%)              660 (  0.00%)     94.29
   halflif            9 (  0.00%)              820 (  0.00%)     91.11
   starcra           14 (  0.00%)             1557 (  0.00%)    111.21
   everque           84 (  0.00%)            38508 (  0.00%)    458.43
   unreal            94 (  0.00%)            13010 (  0.00%)    138.40
   quake             13 (  0.00%)             1055 (  0.00%)     81.15
   cuseeme            5 (  0.00%)              481 (  0.00%)     96.20
   other        1855708 (  3.83%)        946389643 (  4.26%)    509.99
  icmp         21392754 ( 44.20%)       1332928247 (  6.00%)     62.31
  ipip              184 (  0.00%)            19160 (  0.00%)    104.13
  ipsec          113242 (  0.23%)         26067780 (  0.12%)    230.20
  ip6            519799 (  1.07%)        347671761 (  1.57%)    668.86
  other           97994 (  0.20%)         21811103 (  0.10%)    222.58
  frag           477063 (  0.99%)        608482026 (  2.74%)   1275.48
 ip6            2233576 (  4.61%)       1798648785 (  8.10%)    805.28
  tcp6          1948737 (  4.03%)       1584805979 (  7.14%)    813.25
   http(s)      1005621 (  2.08%)       1186930995 (  5.34%)   1180.30
   http(c)       348740 (  0.72%)         34971745 (  0.16%)    100.28
   squid             29 (  0.00%)             2639 (  0.00%)     91.00
   smtp             178 (  0.00%)            51688 (  0.00%)    290.38
   ftp              160 (  0.00%)            18331 (  0.00%)    114.57
   pop3             140 (  0.00%)            93637 (  0.00%)    668.84
   ssh               72 (  0.00%)            12450 (  0.00%)    172.92
   dns              352 (  0.00%)            54190 (  0.00%)    153.95
   bgp              102 (  0.00%)            28789 (  0.00%)    282.25
   other         593343 (  1.23%)        362641515 (  1.63%)    611.18
  udp6           116438 (  0.24%)         28679937 (  0.13%)    246.31
   dns           113639 (  0.23%)         28379835 (  0.13%)    249.74
   realaud            4 (  0.00%)              490 (  0.00%)    122.50
   everque            4 (  0.00%)              418 (  0.00%)    104.50
   quake              4 (  0.00%)              409 (  0.00%)    102.25
   cuseeme            1 (  0.00%)              104 (  0.00%)    104.00
   other           2786 (  0.01%)           298681 (  0.00%)    107.21
  icmp6           16795 (  0.03%)          2148441 (  0.01%)    127.92
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6         151576 (  0.31%)        183010348 (  0.82%)   1207.38


tcpdump file: 201308061400.dump.gz (1007.40 MB)