Traffic Trace Info
DumpFile: 201201021400.dump
FileSize: 2118.92MB
Id: 201201021400
StartTime: Mon Jan 2 14:00:00 2012
EndTime: Mon Jan 2 14:15:01 2012
TotalTime: 900.67 seconds
TotalCapSize: 1652.42MB CapLen: 96 bytes
# of packets: 30572041 (19541.71MB)
AvgRate: 182.01Mbps stddev:46.86M
IP flow (unique src/dst pair) Information
# of flows: 2623570 (avg. 11.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 2.8% 2.5% 2.0% 1.9% 1.6% 1.5% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1740968
Top 10 bandwidth usage (bytes/total in %):
30.3% 15.4% 6.9% 5.4% 4.5% 4.5% 4.4% 3.0% 2.8% 2.6%
# of IPv6 addresses: 5150
Top 10 bandwidth usage (bytes/total in %):
27.2% 19.5% 16.1% 14.5% 12.1% 7.7% 7.2% 7.2% 5.3% 5.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201201021400.pktlen.png)
detailed numbers
[ 32- 63]: 9672411
[ 64- 127]: 6431745
[ 128- 255]: 834505
[ 256- 511]: 455470
[ 512- 1023]: 447563
[ 1024- 2047]: 12730347
Protocol Breakdown
![[protocol breakdown chart]](201201021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30572041 (100.00%) 20490967860 (100.00%) 670.25
ip 30381818 ( 99.38%) 20393088952 ( 99.52%) 671.23
tcp 24208589 ( 79.19%) 18329346537 ( 89.45%) 757.14
http(s) 9207196 ( 30.12%) 12717288424 ( 62.06%) 1381.23
http(c) 3791812 ( 12.40%) 334717970 ( 1.63%) 88.27
squid 75301 ( 0.25%) 55898473 ( 0.27%) 742.33
smtp 58528 ( 0.19%) 26434531 ( 0.13%) 451.66
ftp 13495 ( 0.04%) 1192611 ( 0.01%) 88.37
pop3 834 ( 0.00%) 105443 ( 0.00%) 126.43
imap 503 ( 0.00%) 273383 ( 0.00%) 543.50
telnet 144354 ( 0.47%) 10699681 ( 0.05%) 74.12
ssh 29518 ( 0.10%) 4747982 ( 0.02%) 160.85
dns 10465 ( 0.03%) 892400 ( 0.00%) 85.27
bgp 628 ( 0.00%) 107694 ( 0.00%) 171.49
napster 392 ( 0.00%) 24736 ( 0.00%) 63.10
realaud 56 ( 0.00%) 3480 ( 0.00%) 62.14
icecast 12490 ( 0.04%) 1172879 ( 0.01%) 93.91
hotline 132 ( 0.00%) 8628 ( 0.00%) 65.36
other 10862885 ( 35.53%) 5175778222 ( 25.26%) 476.46
udp 3357677 ( 10.98%) 1507786676 ( 7.36%) 449.06
dns 328037 ( 1.07%) 92725646 ( 0.45%) 282.67
realaud 5 ( 0.00%) 503 ( 0.00%) 100.60
halflif 290 ( 0.00%) 17675 ( 0.00%) 60.95
starcra 163 ( 0.00%) 29471 ( 0.00%) 180.80
everque 194 ( 0.00%) 33386 ( 0.00%) 172.09
unreal 34 ( 0.00%) 3590 ( 0.00%) 105.59
quake 9 ( 0.00%) 1576 ( 0.00%) 175.11
cuseeme 4 ( 0.00%) 635 ( 0.00%) 158.75
other 2996130 ( 9.80%) 1412858667 ( 6.90%) 471.56
icmp 2127701 ( 6.96%) 139945025 ( 0.68%) 65.77
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 5144 ( 0.02%) 1256160 ( 0.01%) 244.20
ip6 674776 ( 2.21%) 412819199 ( 2.01%) 611.79
other 7746 ( 0.03%) 1916085 ( 0.01%) 247.36
frag 66710 ( 0.22%) 50632028 ( 0.25%) 758.99
ip6 190223 ( 0.62%) 97878908 ( 0.48%) 514.55
tcp6 94312 ( 0.31%) 61220767 ( 0.30%) 649.13
http(s) 8461 ( 0.03%) 10024886 ( 0.05%) 1184.83
http(c) 26381 ( 0.09%) 2306998 ( 0.01%) 87.45
smtp 27 ( 0.00%) 3111 ( 0.00%) 115.22
imap 26 ( 0.00%) 3443 ( 0.00%) 132.42
ssh 3 ( 0.00%) 294 ( 0.00%) 98.00
dns 277 ( 0.00%) 59637 ( 0.00%) 215.30
bgp 86 ( 0.00%) 13184 ( 0.00%) 153.30
other 59051 ( 0.19%) 48809214 ( 0.24%) 826.56
udp6 51204 ( 0.17%) 21533179 ( 0.11%) 420.54
dns 28665 ( 0.09%) 7479945 ( 0.04%) 260.94
halflif 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 1 ( 0.00%) 118 ( 0.00%) 118.00
other 22537 ( 0.07%) 14053008 ( 0.07%) 623.55
icmp6 28578 ( 0.09%) 3793730 ( 0.02%) 132.75
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 16017 ( 0.05%) 11315976 ( 0.06%) 706.50
tcpdump file: 201201021400.dump.gz (718.95 MB)