Traffic Trace Info
DumpFile: 201201041400.dump
FileSize: 2218.32MB
Id: 201201041400
StartTime: Wed Jan 4 14:00:00 2012
EndTime: Wed Jan 4 14:15:00 2012
TotalTime: 900.46 seconds
TotalCapSize: 1736.42MB CapLen: 96 bytes
# of packets: 31580761 (21350.14MB)
AvgRate: 198.82Mbps stddev:48.11M
IP flow (unique src/dst pair) Information
# of flows: 2043781 (avg. 15.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 2.5% 1.8% 1.6% 1.3% 1.2% 1.2% 1.1% 0.9% 0.7%
IP address Information
# of IPv4 addresses: 1538597
Top 10 bandwidth usage (bytes/total in %):
36.3% 8.3% 3.6% 3.5% 3.5% 3.2% 3.0% 2.5% 2.3% 2.2%
# of IPv6 addresses: 4544
Top 10 bandwidth usage (bytes/total in %):
69.8% 69.4% 17.6% 7.1% 6.4% 5.8% 4.3% 1.0% 1.0% 1.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201201041400.pktlen.png)
detailed numbers
[ 32- 63]: 8035976
[ 64- 127]: 7684351
[ 128- 255]: 806052
[ 256- 511]: 567934
[ 512- 1023]: 649330
[ 1024- 2047]: 13837118
Protocol Breakdown
![[protocol breakdown chart]](201201041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31580761 (100.00%) 22387243559 (100.00%) 708.89
ip 31057334 ( 98.34%) 21868895484 ( 97.68%) 704.15
tcp 24798074 ( 78.52%) 19577425609 ( 87.45%) 789.47
http(s) 11852511 ( 37.53%) 16288665116 ( 72.76%) 1374.28
http(c) 6200712 ( 19.63%) 667628326 ( 2.98%) 107.67
squid 537666 ( 1.70%) 642197932 ( 2.87%) 1194.42
smtp 65194 ( 0.21%) 26863296 ( 0.12%) 412.05
ftp 17066 ( 0.05%) 1420299 ( 0.01%) 83.22
pop3 1867 ( 0.01%) 697522 ( 0.00%) 373.61
imap 2129 ( 0.01%) 404987 ( 0.00%) 190.22
telnet 1151 ( 0.00%) 105670 ( 0.00%) 91.81
ssh 54927 ( 0.17%) 52427210 ( 0.23%) 954.49
dns 10354 ( 0.03%) 847778 ( 0.00%) 81.88
bgp 666 ( 0.00%) 119224 ( 0.00%) 179.02
napster 207 ( 0.00%) 16466 ( 0.00%) 79.55
realaud 104 ( 0.00%) 6747 ( 0.00%) 64.88
rtsp 39160 ( 0.12%) 58332864 ( 0.26%) 1489.60
icecast 10022 ( 0.03%) 1098443 ( 0.00%) 109.60
hotline 52 ( 0.00%) 3422 ( 0.00%) 65.81
other 6004286 ( 19.01%) 1836590307 ( 8.20%) 305.88
udp 3812311 ( 12.07%) 1641287281 ( 7.33%) 430.52
dns 453300 ( 1.44%) 135016850 ( 0.60%) 297.85
realaud 6 ( 0.00%) 755 ( 0.00%) 125.83
halflif 24 ( 0.00%) 3927 ( 0.00%) 163.62
starcra 446 ( 0.00%) 57099 ( 0.00%) 128.02
everque 465 ( 0.00%) 237197 ( 0.00%) 510.10
unreal 24 ( 0.00%) 5246 ( 0.00%) 218.58
quake 16 ( 0.00%) 1843 ( 0.00%) 115.19
cuseeme 3 ( 0.00%) 536 ( 0.00%) 178.67
other 3342043 ( 10.58%) 1504994071 ( 6.72%) 450.32
icmp 1366225 ( 4.33%) 94331236 ( 0.42%) 69.05
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 4268 ( 0.01%) 1214472 ( 0.01%) 284.55
ip6 1065645 ( 3.37%) 552859067 ( 2.47%) 518.80
other 10627 ( 0.03%) 1758659 ( 0.01%) 165.49
frag 34010 ( 0.11%) 26069028 ( 0.12%) 766.51
ip6 523427 ( 1.66%) 518348075 ( 2.32%) 990.30
tcp6 438615 ( 1.39%) 488419077 ( 2.18%) 1113.55
http(s) 16803 ( 0.05%) 10230169 ( 0.05%) 608.83
http(c) 37204 ( 0.12%) 3425902 ( 0.02%) 92.08
smtp 68 ( 0.00%) 15540 ( 0.00%) 228.53
pop3 14 ( 0.00%) 1181 ( 0.00%) 84.36
dns 531 ( 0.00%) 80628 ( 0.00%) 151.84
bgp 118 ( 0.00%) 51982 ( 0.00%) 440.53
other 383877 ( 1.22%) 474613675 ( 2.12%) 1236.37
udp6 53227 ( 0.17%) 21313764 ( 0.10%) 400.43
dns 38097 ( 0.12%) 10393840 ( 0.05%) 272.83
realaud 1 ( 0.00%) 117 ( 0.00%) 117.00
quake 1 ( 0.00%) 116 ( 0.00%) 116.00
other 15128 ( 0.05%) 10919691 ( 0.05%) 721.82
icmp6 23957 ( 0.08%) 3307092 ( 0.01%) 138.04
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 7516 ( 0.02%) 5292886 ( 0.02%) 704.22
tcpdump file: 201201041400.dump.gz (743.27 MB)