Traffic Trace Info
DumpFile: 201201011400.dump
FileSize: 2716.39MB
Id: 201201011400
StartTime: Sun Jan 1 14:00:00 2012
EndTime: Sun Jan 1 14:15:01 2012
TotalTime: 900.73 seconds
TotalCapSize: -1964.00MB CapLen: 96 bytes
# of packets: 38298486 (26279.52MB)
AvgRate: 244.72Mbps stddev:48.98M
IP flow (unique src/dst pair) Information
# of flows: 1003081 (avg. 38.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 5.7% 3.4% 1.6% 1.4% 1.3% 1.3% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 436258
Top 10 bandwidth usage (bytes/total in %):
16.3% 11.6% 8.1% 8.1% 7.7% 6.7% 6.6% 6.2% 5.8% 5.4%
# of IPv6 addresses: 3621
Top 10 bandwidth usage (bytes/total in %):
61.5% 36.9% 17.1% 7.8% 7.5% 6.1% 5.4% 4.8% 4.0% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201201011400.pktlen.png)
detailed numbers
[ 32- 63]: 9210359
[ 64- 127]: 9066215
[ 128- 255]: 1480964
[ 256- 511]: 497778
[ 512- 1023]: 794488
[ 1024- 2047]: 17248682
Protocol Breakdown
![[protocol breakdown chart]](201201011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38298486 (100.00%) 27556073780 (100.00%) 719.51
ip 38075436 ( 99.42%) 27429327559 ( 99.54%) 720.39
tcp 32367046 ( 84.51%) 24768399722 ( 89.88%) 765.24
http(s) 9427200 ( 24.62%) 13001447857 ( 47.18%) 1379.14
http(c) 3980324 ( 10.39%) 382057056 ( 1.39%) 95.99
squid 136117 ( 0.36%) 118754974 ( 0.43%) 872.45
smtp 39976 ( 0.10%) 9737599 ( 0.04%) 243.59
ftp 165009 ( 0.43%) 124448165 ( 0.45%) 754.19
pop3 708 ( 0.00%) 52777 ( 0.00%) 74.54
imap 542 ( 0.00%) 103734 ( 0.00%) 191.39
telnet 11163 ( 0.03%) 843323 ( 0.00%) 75.55
ssh 3530924 ( 9.22%) 549136135 ( 1.99%) 155.52
dns 10575 ( 0.03%) 861072 ( 0.00%) 81.43
bgp 641 ( 0.00%) 102932 ( 0.00%) 160.58
napster 158 ( 0.00%) 10035 ( 0.00%) 63.51
realaud 51 ( 0.00%) 3672 ( 0.00%) 72.00
icecast 13300 ( 0.03%) 1177120 ( 0.00%) 88.51
hotline 47 ( 0.00%) 3082 ( 0.00%) 65.57
other 15050311 ( 39.30%) 10579660189 ( 38.39%) 702.95
udp 3524840 ( 9.20%) 1635350067 ( 5.93%) 463.95
dns 279780 ( 0.73%) 71364314 ( 0.26%) 255.07
realaud 13 ( 0.00%) 1109 ( 0.00%) 85.31
halflif 490 ( 0.00%) 30537 ( 0.00%) 62.32
starcra 204 ( 0.00%) 27868 ( 0.00%) 136.61
everque 143 ( 0.00%) 31878 ( 0.00%) 222.92
unreal 15 ( 0.00%) 2452 ( 0.00%) 163.47
quake 14 ( 0.00%) 999 ( 0.00%) 71.36
other 2968357 ( 7.75%) 1547335677 ( 5.62%) 521.28
icmp 674979 ( 1.76%) 52158724 ( 0.19%) 77.27
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 4947 ( 0.01%) 1213762 ( 0.00%) 245.35
ip6 1495534 ( 3.90%) 969399322 ( 3.52%) 648.20
other 7906 ( 0.02%) 2786802 ( 0.01%) 352.49
frag 572666 ( 1.50%) 436979281 ( 1.59%) 763.06
ip6 223050 ( 0.58%) 126746221 ( 0.46%) 568.24
tcp6 82670 ( 0.22%) 29840966 ( 0.11%) 360.96
http(s) 8139 ( 0.02%) 8305044 ( 0.03%) 1020.40
http(c) 33017 ( 0.09%) 2956494 ( 0.01%) 89.54
smtp 243 ( 0.00%) 50630 ( 0.00%) 208.35
ftp 25 ( 0.00%) 2296 ( 0.00%) 91.84
dns 271 ( 0.00%) 54997 ( 0.00%) 202.94
bgp 87 ( 0.00%) 15450 ( 0.00%) 177.59
hotline 30 ( 0.00%) 4856 ( 0.00%) 161.87
other 40858 ( 0.11%) 18451199 ( 0.07%) 451.59
udp6 80324 ( 0.21%) 64627089 ( 0.23%) 804.58
dns 23784 ( 0.06%) 5780387 ( 0.02%) 243.04
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
other 56539 ( 0.15%) 58846596 ( 0.21%) 1040.81
icmp6 17745 ( 0.05%) 2583280 ( 0.01%) 145.58
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 42197 ( 0.11%) 29679376 ( 0.11%) 703.35
tcpdump file: 201201011400.dump.gz (911.49 MB)