Traffic Trace Info
DumpFile: 201201061400.dump
FileSize: 2970.59MB
Id: 201201061400
StartTime: Fri Jan 6 14:00:00 2012
EndTime: Fri Jan 6 14:15:00 2012
TotalTime: 900.38 seconds
TotalCapSize: -1755.58MB CapLen: 96 bytes
# of packets: 41298452 (27487.69MB)
AvgRate: 256.08Mbps stddev:58.29M
IP flow (unique src/dst pair) Information
# of flows: 1999579 (avg. 20.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 3.0% 2.4% 2.0% 1.9% 1.6% 1.2% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1494933
Top 10 bandwidth usage (bytes/total in %):
27.6% 9.9% 5.1% 3.5% 3.2% 2.7% 2.6% 2.6% 2.3% 2.1%
# of IPv6 addresses: 5487
Top 10 bandwidth usage (bytes/total in %):
56.3% 55.3% 33.9% 33.9% 2.7% 1.3% 1.2% 1.0% 1.0% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201201061400.pktlen.png)
detailed numbers
[ 32- 63]: 10397965
[ 64- 127]: 10115481
[ 128- 255]: 1260504
[ 256- 511]: 824450
[ 512- 1023]: 839587
[ 1024- 2047]: 17860465
Protocol Breakdown
![[protocol breakdown chart]](201201061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41298452 (100.00%) 28822927657 (100.00%) 697.92
ip 39820621 ( 96.42%) 27110858058 ( 94.06%) 680.82
tcp 32851058 ( 79.55%) 24833125644 ( 86.16%) 755.93
http(s) 15086501 ( 36.53%) 20545418414 ( 71.28%) 1361.84
http(c) 10317211 ( 24.98%) 1267404204 ( 4.40%) 122.84
squid 34542 ( 0.08%) 20657211 ( 0.07%) 598.03
smtp 132125 ( 0.32%) 86959704 ( 0.30%) 658.16
ftp 6017 ( 0.01%) 487667 ( 0.00%) 81.05
pop3 6496 ( 0.02%) 4840637 ( 0.02%) 745.17
imap 940 ( 0.00%) 116915 ( 0.00%) 124.38
telnet 7525 ( 0.02%) 775124 ( 0.00%) 103.01
ssh 343732 ( 0.83%) 60793635 ( 0.21%) 176.86
dns 12841 ( 0.03%) 2700733 ( 0.01%) 210.32
bgp 655 ( 0.00%) 126253 ( 0.00%) 192.75
napster 114 ( 0.00%) 13796 ( 0.00%) 121.02
realaud 154 ( 0.00%) 10977 ( 0.00%) 71.28
rtsp 37856 ( 0.09%) 56225884 ( 0.20%) 1485.26
icecast 10136 ( 0.02%) 1133260 ( 0.00%) 111.81
hotline 48 ( 0.00%) 2992 ( 0.00%) 62.33
other 6854165 ( 16.60%) 2785458238 ( 9.66%) 406.39
udp 3941282 ( 9.54%) 1509068070 ( 5.24%) 382.89
dns 493961 ( 1.20%) 117747637 ( 0.41%) 238.37
realaud 917 ( 0.00%) 55826 ( 0.00%) 60.88
halflif 27 ( 0.00%) 3516 ( 0.00%) 130.22
starcra 219 ( 0.00%) 32139 ( 0.00%) 146.75
everque 1477 ( 0.00%) 824122 ( 0.00%) 557.97
unreal 25 ( 0.00%) 4985 ( 0.00%) 199.40
quake 18 ( 0.00%) 2544 ( 0.00%) 141.33
cuseeme 9 ( 0.00%) 1966 ( 0.00%) 218.44
other 3327830 ( 8.06%) 1383369433 ( 4.80%) 415.70
icmp 1619604 ( 3.92%) 154107447 ( 0.53%) 95.15
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 754 ( 0.00%) 205356 ( 0.00%) 272.36
ip6 1400715 ( 3.39%) 613148131 ( 2.13%) 437.74
other 7024 ( 0.02%) 1184250 ( 0.00%) 168.60
frag 243067 ( 0.59%) 185667650 ( 0.64%) 763.85
ip6 1477831 ( 3.58%) 1712069599 ( 5.94%) 1158.50
tcp6 1296801 ( 3.14%) 1639801866 ( 5.69%) 1264.50
http(s) 417348 ( 1.01%) 625857248 ( 2.17%) 1499.61
http(c) 39674 ( 0.10%) 3447396 ( 0.01%) 86.89
smtp 155 ( 0.00%) 128074 ( 0.00%) 826.28
ftp 53 ( 0.00%) 4758 ( 0.00%) 89.77
pop3 19 ( 0.00%) 1551 ( 0.00%) 81.63
imap 10 ( 0.00%) 1486 ( 0.00%) 148.60
dns 585 ( 0.00%) 104350 ( 0.00%) 178.38
bgp 87 ( 0.00%) 14317 ( 0.00%) 164.56
other 838870 ( 2.03%) 1010242686 ( 3.50%) 1204.29
udp6 139244 ( 0.34%) 55662132 ( 0.19%) 399.75
dns 56106 ( 0.14%) 16597136 ( 0.06%) 295.82
halflif 1 ( 0.00%) 109 ( 0.00%) 109.00
starcra 1 ( 0.00%) 111 ( 0.00%) 111.00
everque 1 ( 0.00%) 104 ( 0.00%) 104.00
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 83133 ( 0.20%) 39064461 ( 0.14%) 469.90
icmp6 23255 ( 0.06%) 3362905 ( 0.01%) 144.61
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 18415 ( 0.04%) 13226968 ( 0.05%) 718.27
tcpdump file: 201201061400.dump.gz (970.71 MB)