Traffic Trace Info


DumpFile: 201308111400.dump
FileSize: 2410.05MB
Id: 201308111400
StartTime: Sun Aug 11 14:00:00 2013
EndTime: Sun Aug 11 14:15:00 2013
TotalTime: 899.96 seconds
TotalCapSize: 1831.98MB CapLen: 96 bytes
# of packets: 37883647 (11604.61MB)
AvgRate: 108.14Mbps stddev:19.64M

IP flow (unique src/dst pair) Information

# of flows: 20931107 (avg. 1.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.3% 2.2% 2.0% 1.9% 1.9% 1.7% 1.7% 1.5% 1.5%

IP address Information

# of IPv4 addresses: 17079848
Top 10 bandwidth usage (bytes/total in %):
11.8% 7.6% 7.3% 5.9% 4.5% 4.2% 3.0% 2.6% 2.5% 2.3%
# of IPv6 addresses: 10507
Top 10 bandwidth usage (bytes/total in %):
29.2% 29.2% 27.0% 16.4% 16.4% 11.7% 6.2% 5.3% 4.9% 4.8%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   23094376
 [   64-  127]:    5470720
 [  128-  255]:    1335956
 [  256-  511]:     937476
 [  512- 1023]:     703628
 [ 1024- 2047]:    6341491


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         37883647 (100.00%)      12168311328 (100.00%)    321.20
 ip            35559818 ( 93.87%)      10779785048 ( 88.59%)    303.15
  tcp           9925138 ( 26.20%)       7631440487 ( 62.72%)    768.90
   http(s)      4392210 ( 11.59%)       5277402193 ( 43.37%)   1201.54
   http(c)      4058517 ( 10.71%)       1381162367 ( 11.35%)    340.31
   squid           8032 (  0.02%)          2745221 (  0.02%)    341.79
   smtp           53091 (  0.14%)          8784781 (  0.07%)    165.47
   ftp            26314 (  0.07%)          9868605 (  0.08%)    375.03
   pop3           13209 (  0.03%)           977665 (  0.01%)     74.02
   imap            1245 (  0.00%)           317653 (  0.00%)    255.14
   telnet         29510 (  0.08%)          3637430 (  0.03%)    123.26
   ssh            28255 (  0.07%)          5886796 (  0.05%)    208.35
   dns             5340 (  0.01%)          3244899 (  0.03%)    607.66
   bgp              485 (  0.00%)            89313 (  0.00%)    184.15
   realaud            3 (  0.00%)              186 (  0.00%)     62.00
   rtsp               6 (  0.00%)              360 (  0.00%)     60.00
   icecast        21436 (  0.06%)          5888760 (  0.05%)    274.71
   hotline            2 (  0.00%)              126 (  0.00%)     63.00
   other        1287483 (  3.40%)        931434132 (  7.65%)    723.45
  udp           3060175 (  8.08%)       1684869229 ( 13.85%)    550.58
   dns          1085848 (  2.87%)        522616900 (  4.29%)    481.30
   rip                3 (  0.00%)              261 (  0.00%)     87.00
   realaud           20 (  0.00%)            12039 (  0.00%)    601.95
   halflif        26353 (  0.07%)          9142135 (  0.08%)    346.91
   starcra           23 (  0.00%)             1772 (  0.00%)     77.04
   everque           56 (  0.00%)            10650 (  0.00%)    190.18
   unreal            15 (  0.00%)             5323 (  0.00%)    354.87
   quake             32 (  0.00%)             4090 (  0.00%)    127.81
   cuseeme           18 (  0.00%)             3847 (  0.00%)    213.72
   other        1945562 (  5.14%)       1151714192 (  9.46%)    591.97
  icmp         22379554 ( 59.07%)       1402838266 ( 11.53%)     62.68
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec            6302 (  0.02%)          4537908 (  0.04%)    720.07
  ip6            103538 (  0.27%)         37745979 (  0.31%)    364.56
  sctp                2 (  0.00%)              206 (  0.00%)    103.00
  other           84924 (  0.22%)         18333703 (  0.15%)    215.88
  frag           828006 (  2.19%)       1013836120 (  8.33%)   1224.43
 ip6            2323829 (  6.13%)       1388526280 ( 11.41%)    597.52
  tcp6          1904436 (  5.03%)        989691188 (  8.13%)    519.68
   http(s)       536858 (  1.42%)        719693220 (  5.91%)   1340.57
   http(c)       313986 (  0.83%)         26513173 (  0.22%)     84.44
   squid             35 (  0.00%)             8090 (  0.00%)    231.14
   smtp              67 (  0.00%)             7700 (  0.00%)    114.93
   ftp               25 (  0.00%)             2209 (  0.00%)     88.36
   ssh               82 (  0.00%)            17034 (  0.00%)    207.73
   dns              366 (  0.00%)            49420 (  0.00%)    135.03
   bgp               90 (  0.00%)            19335 (  0.00%)    214.83
   other        1052927 (  2.78%)        243381007 (  2.00%)    231.15
  udp6            84551 (  0.22%)         20381470 (  0.17%)    241.06
   dns            81677 (  0.22%)         20043225 (  0.16%)    245.40
   realaud            2 (  0.00%)              222 (  0.00%)    111.00
   halflif            1 (  0.00%)               96 (  0.00%)     96.00
   everque            2 (  0.00%)              194 (  0.00%)     97.00
   unreal             2 (  0.00%)              207 (  0.00%)    103.50
   quake              2 (  0.00%)              214 (  0.00%)    107.00
   cuseeme            1 (  0.00%)              107 (  0.00%)    107.00
   other           2864 (  0.01%)           337205 (  0.00%)    117.74
  icmp6           25052 (  0.07%)          3121134 (  0.03%)    124.59
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6         309760 (  0.82%)        375328408 (  3.08%)   1211.67


tcpdump file: 201308111400.dump.gz (745.19 MB)