Traffic Trace Info


DumpFile: 201308081400.dump
FileSize: 3143.58MB
Id: 201308081400
StartTime: Thu Aug 8 14:00:00 2013
EndTime: Thu Aug 8 14:15:01 2013
TotalTime: 900.71 seconds
TotalCapSize: -1678.32MB CapLen: 96 bytes
# of packets: 47572521 (19323.93MB)
AvgRate: 179.97Mbps stddev:32.76M

IP flow (unique src/dst pair) Information

# of flows: 20540794 (avg. 2.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 2.1% 1.7% 1.7% 1.6% 1.0% 1.0% 1.0% 0.9% 0.9%

IP address Information

# of IPv4 addresses: 16668282
Top 10 bandwidth usage (bytes/total in %):
14.8% 7.7% 6.7% 5.1% 5.1% 4.4% 2.7% 2.5% 2.4% 2.2%
# of IPv6 addresses: 11894
Top 10 bandwidth usage (bytes/total in %):
30.8% 9.3% 3.9% 3.9% 2.9% 2.9% 2.9% 2.7% 2.6% 2.4%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   25195439
 [   64-  127]:    8212515
 [  128-  255]:     770582
 [  256-  511]:    1093280
 [  512- 1023]:     766219
 [ 1024- 2047]:   11534486


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         47572521 (100.00%)      20262610593 (100.00%)    425.93
 ip            45476251 ( 95.59%)      19128859529 ( 94.40%)    420.63
  tcp          20022461 ( 42.09%)      15921388667 ( 78.58%)    795.18
   http(s)     10160038 ( 21.36%)      12652407900 ( 62.44%)   1245.31
   http(c)      8009648 ( 16.84%)       2129013652 ( 10.51%)    265.81
   squid          18104 (  0.04%)         11843754 (  0.06%)    654.21
   smtp           60754 (  0.13%)         16562996 (  0.08%)    272.62
   nntp               7 (  0.00%)              420 (  0.00%)     60.00
   ftp            45244 (  0.10%)         20731187 (  0.10%)    458.21
   pop3            3352 (  0.01%)          1565937 (  0.01%)    467.16
   imap            2897 (  0.01%)           619726 (  0.00%)    213.92
   telnet          2775 (  0.01%)          1669924 (  0.01%)    601.77
   ssh            61208 (  0.13%)         39118351 (  0.19%)    639.11
   dns             6051 (  0.01%)          3117683 (  0.02%)    515.23
   bgp              521 (  0.00%)           103428 (  0.00%)    198.52
   napster           43 (  0.00%)             5174 (  0.00%)    120.33
   realaud           29 (  0.00%)             2601 (  0.00%)     89.69
   rtsp               8 (  0.00%)              482 (  0.00%)     60.25
   icecast        28970 (  0.06%)          7910372 (  0.04%)    273.05
   hotline            3 (  0.00%)              186 (  0.00%)     62.00
   other        1622759 (  3.41%)       1036711894 (  5.12%)    638.86
  udp           2006192 (  4.22%)        780988817 (  3.85%)    389.29
   dns           591981 (  1.24%)        195953849 (  0.97%)    331.01
   rip               17 (  0.00%)             1143 (  0.00%)     67.24
   realaud           16 (  0.00%)             1255 (  0.00%)     78.44
   halflif           17 (  0.00%)             1555 (  0.00%)     91.47
   starcra           14 (  0.00%)             1284 (  0.00%)     91.71
   everque         6747 (  0.01%)          6879369 (  0.03%)   1019.62
   unreal            12 (  0.00%)              937 (  0.00%)     78.08
   quake              6 (  0.00%)              536 (  0.00%)     89.33
   cuseeme            1 (  0.00%)               99 (  0.00%)     99.00
   other        1406215 (  2.96%)        577251717 (  2.85%)    410.50
  icmp         22450686 ( 47.19%)       1421642662 (  7.02%)     63.32
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec            4934 (  0.01%)          3324404 (  0.02%)    673.77
  ip6            846939 (  1.78%)        972866319 (  4.80%)   1148.69
  sctp                2 (  0.00%)              206 (  0.00%)    103.00
  other          144852 (  0.30%)         28629184 (  0.14%)    197.64
  frag           297081 (  0.62%)        386565063 (  1.91%)   1301.21
 ip6            2096270 (  4.41%)       1133751064 (  5.60%)    540.84
  tcp6          1814980 (  3.82%)       1025440203 (  5.06%)    564.99
   http(s)       829247 (  1.74%)        916308781 (  4.52%)   1104.99
   http(c)       883862 (  1.86%)         78088293 (  0.39%)     88.35
   smtp             600 (  0.00%)           556315 (  0.00%)    927.19
   ftp              376 (  0.00%)            34091 (  0.00%)     90.67
   ssh             2422 (  0.01%)           377222 (  0.00%)    155.75
   dns              308 (  0.00%)            53461 (  0.00%)    173.57
   bgp               91 (  0.00%)            21464 (  0.00%)    235.87
   other          98074 (  0.21%)         30000576 (  0.15%)    305.90
  udp6           223199 (  0.47%)         60511793 (  0.30%)    271.11
   dns           107033 (  0.22%)         27523852 (  0.14%)    257.15
   realaud            1 (  0.00%)              105 (  0.00%)    105.00
   halflif            1 (  0.00%)              107 (  0.00%)    107.00
   starcra            1 (  0.00%)              113 (  0.00%)    113.00
   quake              4 (  0.00%)              435 (  0.00%)    108.75
   other         116159 (  0.24%)         32987181 (  0.16%)    283.98
  icmp6           20578 (  0.04%)          2587952 (  0.01%)    125.76
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6          37483 (  0.08%)         45207036 (  0.22%)   1206.07


tcpdump file: 201308081400.dump.gz (990.81 MB)