Traffic Trace Info
DumpFile: 201201051400.dump
FileSize: 3423.64MB
Id: 201201051400
StartTime: Thu Jan 5 14:00:00 2012
EndTime: Thu Jan 5 14:15:00 2012
TotalTime: 899.73 seconds
TotalCapSize: -1412.12MB CapLen: 96 bytes
# of packets: 48480933 (38576.79MB)
AvgRate: 359.65Mbps stddev:70.42M
IP flow (unique src/dst pair) Information
# of flows: 1899193 (avg. 25.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.1% 6.6% 5.9% 4.3% 3.6% 2.4% 2.1% 2.0% 1.5% 1.0%
IP address Information
# of IPv4 addresses: 1427577
Top 10 bandwidth usage (bytes/total in %):
23.8% 12.2% 12.2% 9.2% 7.2% 6.6% 6.6% 6.1% 5.5% 4.4%
# of IPv6 addresses: 5697
Top 10 bandwidth usage (bytes/total in %):
25.0% 23.0% 14.4% 11.6% 10.6% 7.8% 7.1% 6.8% 5.5% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201201051400.pktlen.png)
detailed numbers
[ 32- 63]: 11274872
[ 64- 127]: 8895027
[ 128- 255]: 1002178
[ 256- 511]: 616812
[ 512- 1023]: 902792
[ 1024- 2047]: 25789252
Protocol Breakdown
![[protocol breakdown chart]](201201051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 48480933 (100.00%) 40450692769 (100.00%) 834.36
ip 48161073 ( 99.34%) 40306519321 ( 99.64%) 836.91
tcp 42619249 ( 87.91%) 38381379185 ( 94.88%) 900.56
http(s) 22424630 ( 46.25%) 31314150765 ( 77.41%) 1396.42
http(c) 9686913 ( 19.98%) 1070219947 ( 2.65%) 110.48
squid 359545 ( 0.74%) 310579779 ( 0.77%) 863.81
smtp 62562 ( 0.13%) 32305953 ( 0.08%) 516.38
nntp 202 ( 0.00%) 12134 ( 0.00%) 60.07
ftp 42311 ( 0.09%) 35325999 ( 0.09%) 834.91
pop3 3503 ( 0.01%) 865234 ( 0.00%) 247.00
imap 3554 ( 0.01%) 2683580 ( 0.01%) 755.09
telnet 631 ( 0.00%) 74161 ( 0.00%) 117.53
ssh 53187 ( 0.11%) 8755200 ( 0.02%) 164.61
dns 11453 ( 0.02%) 1001166 ( 0.00%) 87.42
bgp 805 ( 0.00%) 117683 ( 0.00%) 146.19
napster 368 ( 0.00%) 23405 ( 0.00%) 63.60
realaud 49 ( 0.00%) 3066 ( 0.00%) 62.57
rtsp 40900 ( 0.08%) 57508653 ( 0.14%) 1406.08
icecast 10775 ( 0.02%) 1175253 ( 0.00%) 109.07
hotline 65 ( 0.00%) 4319 ( 0.00%) 66.45
other 9917796 ( 20.46%) 5546572888 ( 13.71%) 559.25
udp 3444324 ( 7.10%) 1405310818 ( 3.47%) 408.01
dns 497501 ( 1.03%) 143044535 ( 0.35%) 287.53
realaud 40 ( 0.00%) 3031 ( 0.00%) 75.78
halflif 29 ( 0.00%) 3382 ( 0.00%) 116.62
starcra 203 ( 0.00%) 30856 ( 0.00%) 152.00
everque 2298 ( 0.00%) 202700 ( 0.00%) 88.21
unreal 9 ( 0.00%) 1985 ( 0.00%) 220.56
quake 9 ( 0.00%) 823 ( 0.00%) 91.44
cuseeme 2 ( 0.00%) 170 ( 0.00%) 85.00
other 2847441 ( 5.87%) 1256175575 ( 3.11%) 441.16
icmp 1477924 ( 3.05%) 134586468 ( 0.33%) 91.06
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 41999 ( 0.09%) 9967994 ( 0.02%) 237.34
ip6 568295 ( 1.17%) 373845667 ( 0.92%) 657.84
other 9097 ( 0.02%) 1409919 ( 0.00%) 154.99
frag 193881 ( 0.40%) 148742331 ( 0.37%) 767.18
ip6 319860 ( 0.66%) 144173448 ( 0.36%) 450.74
tcp6 188673 ( 0.39%) 87622971 ( 0.22%) 464.42
http(s) 17062 ( 0.04%) 17742760 ( 0.04%) 1039.90
http(c) 38915 ( 0.08%) 3437958 ( 0.01%) 88.35
smtp 943 ( 0.00%) 651980 ( 0.00%) 691.39
ftp 43 ( 0.00%) 4193 ( 0.00%) 97.51
pop3 12 ( 0.00%) 1112 ( 0.00%) 92.67
dns 665 ( 0.00%) 90268 ( 0.00%) 135.74
bgp 87 ( 0.00%) 14461 ( 0.00%) 166.22
napster 12 ( 0.00%) 1554 ( 0.00%) 129.50
other 130934 ( 0.27%) 65678685 ( 0.16%) 501.62
udp6 71021 ( 0.15%) 28728942 ( 0.07%) 404.51
dns 46261 ( 0.10%) 12596587 ( 0.03%) 272.29
realaud 1 ( 0.00%) 101 ( 0.00%) 101.00
everque 1 ( 0.00%) 113 ( 0.00%) 113.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 24757 ( 0.05%) 16132033 ( 0.04%) 651.62
icmp6 25849 ( 0.05%) 3631911 ( 0.01%) 140.50
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 34203 ( 0.07%) 24174132 ( 0.06%) 706.78
tcpdump file: 201201051400.dump.gz (1089.92 MB)