Traffic Trace Info


DumpFile: 201308251400.dump
FileSize: 3476.92MB
Id: 201308251400
StartTime: Sun Aug 25 14:00:01 2013
EndTime: Sun Aug 25 14:15:00 2013
TotalTime: 899.43 seconds
TotalCapSize: -1449.38MB CapLen: 96 bytes
# of packets: 54414334 (19328.31MB)
AvgRate: 180.26Mbps stddev:29.19M

IP flow (unique src/dst pair) Information

# of flows: 28028877 (avg. 1.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.9% 4.5% 3.2% 3.1% 2.8% 2.4% 2.0% 1.9% 1.7% 1.5%

IP address Information

# of IPv4 addresses: 22419797
Top 10 bandwidth usage (bytes/total in %):
13.7% 12.7% 11.4% 11.1% 10.4% 5.0% 5.0% 5.0% 3.6% 3.5%
# of IPv6 addresses: 10328
Top 10 bandwidth usage (bytes/total in %):
34.1% 34.1% 16.7% 16.3% 16.3% 5.1% 5.1% 4.9% 4.7% 3.9%

Packet Size Distribution (including MAC headers)

[packet size distribution]
detailed numbers
 [   32-   63]:   33781800
 [   64-  127]:    7613834
 [  128-  255]:     549944
 [  256-  511]:     503614
 [  512- 1023]:     643840
 [ 1024- 2047]:   11321302


Protocol Breakdown

[protocol breakdown chart]

     protocol		packets			bytes		bytes/pkt
------------------------------------------------------------------------
 total         54414334 (100.00%)      20267206192 (100.00%)    372.46
 ip            51666890 ( 94.95%)      18342468201 ( 90.50%)    355.01
  tcp          14177055 ( 26.05%)      13380060162 ( 66.02%)    943.78
   http(s)      7437599 ( 13.67%)       9963614778 ( 49.16%)   1339.63
   http(c)      3486789 (  6.41%)        609049090 (  3.01%)    174.67
   squid         124287 (  0.23%)        102084554 (  0.50%)    821.36
   smtp           48114 (  0.09%)          7510971 (  0.04%)    156.11
   nntp              52 (  0.00%)             3120 (  0.00%)     60.00
   ftp            56564 (  0.10%)         37900728 (  0.19%)    670.05
   pop3            1997 (  0.00%)           620788 (  0.00%)    310.86
   imap            1939 (  0.00%)           288349 (  0.00%)    148.71
   telnet          7666 (  0.01%)          2021670 (  0.01%)    263.72
   ssh            13067 (  0.02%)          5177051 (  0.03%)    396.19
   dns             5356 (  0.01%)          3208767 (  0.02%)    599.10
   bgp              512 (  0.00%)           103332 (  0.00%)    201.82
   napster           41 (  0.00%)             6732 (  0.00%)    164.20
   realaud            5 (  0.00%)              681 (  0.00%)    136.20
   rtsp               2 (  0.00%)              120 (  0.00%)     60.00
   icecast        25846 (  0.05%)         30501506 (  0.15%)   1180.12
   hotline           12 (  0.00%)             1119 (  0.00%)     93.25
   other        2967207 (  5.45%)       2617966806 ( 12.92%)    882.30
  udp           3349639 (  6.16%)       1962766258 (  9.68%)    585.96
   dns           953019 (  1.75%)        477532436 (  2.36%)    501.07
   realaud           62 (  0.00%)             5358 (  0.00%)     86.42
   halflif           35 (  0.00%)             5172 (  0.00%)    147.77
   starcra           10 (  0.00%)              932 (  0.00%)     93.20
   everque           37 (  0.00%)             5938 (  0.00%)    160.49
   unreal            10 (  0.00%)             1225 (  0.00%)    122.50
   quake             19 (  0.00%)             1668 (  0.00%)     87.79
   cuseeme            5 (  0.00%)              888 (  0.00%)    177.60
   other        2390428 (  4.39%)       1479562032 (  7.30%)    618.95
  icmp         33114918 ( 60.86%)       2064054057 ( 10.18%)     62.33
  ipip              185 (  0.00%)            19270 (  0.00%)    104.16
  ipsec            3766 (  0.01%)          2490704 (  0.01%)    661.37
  ip6            929714 (  1.71%)        913530197 (  4.51%)    982.59
  other           91613 (  0.17%)         19547553 (  0.10%)    213.37
  frag           798221 (  1.47%)       1008538617 (  4.98%)   1263.48
 ip6            2747444 (  5.05%)       1924737991 (  9.50%)    700.56
  tcp6          2637644 (  4.85%)       1888024711 (  9.32%)    715.80
   http(s)      1207125 (  2.22%)       1733647485 (  8.55%)   1436.18
   http(c)      1297094 (  2.38%)        111941122 (  0.55%)     86.30
   squid             13 (  0.00%)             1098 (  0.00%)     84.46
   smtp             181 (  0.00%)            46100 (  0.00%)    254.70
   ftp               25 (  0.00%)             2209 (  0.00%)     88.36
   pop3              76 (  0.00%)             8855 (  0.00%)    116.51
   ssh              115 (  0.00%)            20498 (  0.00%)    178.24
   dns              393 (  0.00%)            70768 (  0.00%)    180.07
   bgp              102 (  0.00%)            29528 (  0.00%)    289.49
   other         132520 (  0.24%)         42257048 (  0.21%)    318.87
  udp6            81297 (  0.15%)         18162943 (  0.09%)    223.41
   dns            78400 (  0.14%)         17841454 (  0.09%)    227.57
   realaud            2 (  0.00%)              203 (  0.00%)    101.50
   halflif            1 (  0.00%)              118 (  0.00%)    118.00
   starcra            2 (  0.00%)              219 (  0.00%)    109.50
   everque            1 (  0.00%)              119 (  0.00%)    119.00
   unreal             1 (  0.00%)              107 (  0.00%)    107.00
   quake              3 (  0.00%)              369 (  0.00%)    123.00
   cuseeme            1 (  0.00%)              105 (  0.00%)    105.00
   other           2886 (  0.01%)           320249 (  0.00%)    110.97
  icmp6           14608 (  0.03%)          1881859 (  0.01%)    128.82
  pim6               30 (  0.00%)             4080 (  0.00%)    136.00
  other6          13865 (  0.03%)         16664398 (  0.08%)   1201.90


tcpdump file: 201308251400.dump.gz (1100.56 MB)