Traffic Trace Info
DumpFile: 201201081400.dump
FileSize: 2918.11MB
Id: 201201081400
StartTime: Sun Jan 8 14:00:00 2012
EndTime: Sun Jan 8 14:15:00 2012
TotalTime: 899.96 seconds
TotalCapSize: -1821.20MB CapLen: 96 bytes
# of packets: 42159325 (30767.27MB)
AvgRate: 286.78Mbps stddev:58.46M
IP flow (unique src/dst pair) Information
# of flows: 1815671 (avg. 23.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
21.3% 6.8% 5.0% 3.0% 1.2% 1.2% 1.0% 0.8% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 1421726
Top 10 bandwidth usage (bytes/total in %):
31.3% 21.8% 18.5% 9.9% 9.9% 5.2% 4.1% 2.8% 2.0% 1.8%
# of IPv6 addresses: 4800
Top 10 bandwidth usage (bytes/total in %):
36.5% 23.1% 9.4% 8.1% 7.4% 6.7% 6.3% 4.1% 3.6% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201201081400.pktlen.png)
detailed numbers
[ 32- 63]: 11438297
[ 64- 127]: 7710913
[ 128- 255]: 1143975
[ 256- 511]: 611922
[ 512- 1023]: 871748
[ 1024- 2047]: 20382470
Protocol Breakdown
![[protocol breakdown chart]](201201081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42159325 (100.00%) 32261824215 (100.00%) 765.24
ip 41891049 ( 99.36%) 32151722407 ( 99.66%) 767.51
tcp 35206782 ( 83.51%) 29495543743 ( 91.43%) 837.78
http(s) 15102748 ( 35.82%) 20885397398 ( 64.74%) 1382.89
http(c) 8184029 ( 19.41%) 1121427358 ( 3.48%) 137.03
squid 182553 ( 0.43%) 171392436 ( 0.53%) 938.86
smtp 46775 ( 0.11%) 12029765 ( 0.04%) 257.18
ftp 93002 ( 0.22%) 7366235 ( 0.02%) 79.21
pop3 2186 ( 0.01%) 1270134 ( 0.00%) 581.03
imap 1766 ( 0.00%) 223824 ( 0.00%) 126.74
telnet 504 ( 0.00%) 66580 ( 0.00%) 132.10
ssh 20190 ( 0.05%) 4189576 ( 0.01%) 207.51
dns 13070 ( 0.03%) 1261411 ( 0.00%) 96.51
bgp 632 ( 0.00%) 117647 ( 0.00%) 186.15
napster 93 ( 0.00%) 10686 ( 0.00%) 114.90
realaud 218 ( 0.00%) 13486 ( 0.00%) 61.86
rtsp 819 ( 0.00%) 693715 ( 0.00%) 847.03
icecast 17701 ( 0.04%) 12447052 ( 0.04%) 703.18
hotline 21 ( 0.00%) 1302 ( 0.00%) 62.00
other 11540475 ( 27.37%) 7277635138 ( 22.56%) 630.62
udp 4259406 ( 10.10%) 1930251401 ( 5.98%) 453.17
dns 476473 ( 1.13%) 97616381 ( 0.30%) 204.87
realaud 23 ( 0.00%) 2565 ( 0.00%) 111.52
halflif 80 ( 0.00%) 6021 ( 0.00%) 75.26
starcra 192 ( 0.00%) 28288 ( 0.00%) 147.33
everque 21808 ( 0.05%) 19283056 ( 0.06%) 884.22
unreal 8 ( 0.00%) 586 ( 0.00%) 73.25
quake 22 ( 0.00%) 1812 ( 0.00%) 82.36
cuseeme 5 ( 0.00%) 693 ( 0.00%) 138.60
other 3748483 ( 8.89%) 1812500633 ( 5.62%) 483.53
icmp 1472420 ( 3.49%) 134757058 ( 0.42%) 91.52
ipip 185 ( 0.00%) 19413 ( 0.00%) 104.94
ipsec 7796 ( 0.02%) 2167528 ( 0.01%) 278.03
ip6 935642 ( 2.22%) 586007398 ( 1.82%) 626.32
other 8818 ( 0.02%) 2975866 ( 0.01%) 337.48
frag 26598 ( 0.06%) 20467245 ( 0.06%) 769.50
ip6 268276 ( 0.64%) 110101808 ( 0.34%) 410.40
tcp6 138373 ( 0.33%) 56049044 ( 0.17%) 405.06
http(s) 2642 ( 0.01%) 2120938 ( 0.01%) 802.78
http(c) 26779 ( 0.06%) 2361548 ( 0.01%) 88.19
smtp 236 ( 0.00%) 275266 ( 0.00%) 1166.38
ftp 26 ( 0.00%) 2313 ( 0.00%) 88.96
dns 370 ( 0.00%) 64616 ( 0.00%) 174.64
bgp 87 ( 0.00%) 12946 ( 0.00%) 148.80
other 108233 ( 0.26%) 51211417 ( 0.16%) 473.16
udp6 56291 ( 0.13%) 11822530 ( 0.04%) 210.03
dns 36345 ( 0.09%) 9974832 ( 0.03%) 274.45
everque 2 ( 0.00%) 213 ( 0.00%) 106.50
quake 1 ( 0.00%) 109 ( 0.00%) 109.00
other 19943 ( 0.05%) 1847376 ( 0.01%) 92.63
icmp6 23393 ( 0.06%) 3142595 ( 0.01%) 134.34
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 50106 ( 0.12%) 39072215 ( 0.12%) 779.79
tcpdump file: 201201081400.dump.gz (934.24 MB)