Traffic Trace Info
DumpFile: 201201121400.dump
FileSize: 3449.78MB
Id: 201201121400
StartTime: Thu Jan 12 14:00:01 2012
EndTime: Thu Jan 12 14:15:01 2012
TotalTime: 899.83 seconds
TotalCapSize: -1393.99MB CapLen: 96 bytes
# of packets: 49005532 (29526.17MB)
AvgRate: 275.24Mbps stddev:41.80M
IP flow (unique src/dst pair) Information
# of flows: 2060715 (avg. 23.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.8% 9.8% 2.9% 1.3% 1.2% 1.1% 1.0% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 1520668
Top 10 bandwidth usage (bytes/total in %):
23.0% 13.0% 12.3% 10.2% 7.0% 4.4% 4.1% 3.4% 3.0% 2.9%
# of IPv6 addresses: 5374
Top 10 bandwidth usage (bytes/total in %):
25.3% 16.9% 16.9% 14.4% 10.3% 6.3% 3.5% 3.5% 3.3% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201201121400.pktlen.png)
detailed numbers
[ 32- 63]: 13134209
[ 64- 127]: 11893306
[ 128- 255]: 1421683
[ 256- 511]: 846329
[ 512- 1023]: 3980442
[ 1024- 2047]: 17729563
Protocol Breakdown
![[protocol breakdown chart]](201201121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 49005532 (100.00%) 30960437322 (100.00%) 631.77
ip 48656429 ( 99.29%) 30854143689 ( 99.66%) 634.12
tcp 40805565 ( 83.27%) 27592161311 ( 89.12%) 676.19
http(s) 16460259 ( 33.59%) 17076753980 ( 55.16%) 1037.45
http(c) 16671352 ( 34.02%) 8295486619 ( 26.79%) 497.59
squid 140316 ( 0.29%) 124549363 ( 0.40%) 887.63
smtp 112347 ( 0.23%) 75826860 ( 0.24%) 674.93
ftp 15186 ( 0.03%) 1192181 ( 0.00%) 78.51
pop3 17622 ( 0.04%) 9130351 ( 0.03%) 518.12
imap 2065 ( 0.00%) 288152 ( 0.00%) 139.54
telnet 660 ( 0.00%) 76528 ( 0.00%) 115.95
ssh 311448 ( 0.64%) 26411340 ( 0.09%) 84.80
dns 22661 ( 0.05%) 3853301 ( 0.01%) 170.04
bgp 645 ( 0.00%) 115723 ( 0.00%) 179.42
napster 98 ( 0.00%) 10258 ( 0.00%) 104.67
realaud 199 ( 0.00%) 13695 ( 0.00%) 68.82
rtsp 76614 ( 0.16%) 105193396 ( 0.34%) 1373.03
icecast 900 ( 0.00%) 99858 ( 0.00%) 110.95
hotline 24 ( 0.00%) 1504 ( 0.00%) 62.67
other 6973169 ( 14.23%) 1873158202 ( 6.05%) 268.62
udp 4884004 ( 9.97%) 2570932237 ( 8.30%) 526.40
dns 617081 ( 1.26%) 138884519 ( 0.45%) 225.07
realaud 18 ( 0.00%) 1827 ( 0.00%) 101.50
halflif 47 ( 0.00%) 5902 ( 0.00%) 125.57
starcra 391 ( 0.00%) 126643 ( 0.00%) 323.90
everque 1041 ( 0.00%) 172587 ( 0.00%) 165.79
unreal 54 ( 0.00%) 5304 ( 0.00%) 98.22
quake 26 ( 0.00%) 2222 ( 0.00%) 85.46
cuseeme 3 ( 0.00%) 487 ( 0.00%) 162.33
other 4242711 ( 8.66%) 2430354161 ( 7.85%) 572.83
icmp 1940857 ( 3.96%) 160296065 ( 0.52%) 82.59
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 13292 ( 0.03%) 2707080 ( 0.01%) 203.66
ip6 1005344 ( 2.05%) 526708634 ( 1.70%) 523.91
other 7182 ( 0.01%) 1319092 ( 0.00%) 183.67
frag 47655 ( 0.10%) 36430462 ( 0.12%) 764.46
ip6 349103 ( 0.71%) 106293633 ( 0.34%) 304.48
tcp6 239203 ( 0.49%) 75842712 ( 0.24%) 317.06
http(s) 34441 ( 0.07%) 40183276 ( 0.13%) 1166.73
http(c) 148576 ( 0.30%) 11819626 ( 0.04%) 79.55
squid 1120 ( 0.00%) 886921 ( 0.00%) 791.89
smtp 248 ( 0.00%) 108220 ( 0.00%) 436.37
dns 245 ( 0.00%) 51984 ( 0.00%) 212.18
bgp 88 ( 0.00%) 15386 ( 0.00%) 174.84
other 54485 ( 0.11%) 22777299 ( 0.07%) 418.05
udp6 86807 ( 0.18%) 24374205 ( 0.08%) 280.79
dns 60787 ( 0.12%) 18489265 ( 0.06%) 304.16
realaud 1 ( 0.00%) 108 ( 0.00%) 108.00
halflif 1 ( 0.00%) 97 ( 0.00%) 97.00
everque 39 ( 0.00%) 9018 ( 0.00%) 231.23
unreal 1 ( 0.00%) 98 ( 0.00%) 98.00
quake 2 ( 0.00%) 209 ( 0.00%) 104.50
other 25976 ( 0.05%) 5875410 ( 0.02%) 226.19
icmp6 19105 ( 0.04%) 3171234 ( 0.01%) 165.99
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3872 ( 0.01%) 2889686 ( 0.01%) 746.30
tcpdump file: 201201121400.dump.gz (1141.34 MB)