Traffic Trace Info
DumpFile: 201201131400.dump
FileSize: 3012.43MB
Id: 201201131400
StartTime: Fri Jan 13 14:00:01 2012
EndTime: Fri Jan 13 14:15:01 2012
TotalTime: 900.36 seconds
TotalCapSize: -1729.38MB CapLen: 96 bytes
# of packets: 42323067 (31423.72MB)
AvgRate: 292.78Mbps stddev:53.65M
IP flow (unique src/dst pair) Information
# of flows: 1883194 (avg. 22.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.3% 2.2% 1.8% 1.4% 1.3% 1.3% 1.3% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 1465989
Top 10 bandwidth usage (bytes/total in %):
21.4% 8.9% 7.3% 5.0% 4.1% 4.1% 3.8% 2.9% 2.8% 2.4%
# of IPv6 addresses: 5220
Top 10 bandwidth usage (bytes/total in %):
87.5% 74.0% 17.7% 2.4% 1.5% 1.2% 0.9% 0.8% 0.6% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201201131400.pktlen.png)
detailed numbers
[ 32- 63]: 7804306
[ 64- 127]: 10225537
[ 128- 255]: 1687887
[ 256- 511]: 891366
[ 512- 1023]: 1123457
[ 1024- 2047]: 20590514
Protocol Breakdown
![[protocol breakdown chart]](201201131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42323067 (100.00%) 32950161451 (100.00%) 778.54
ip 41732965 ( 98.61%) 32381583546 ( 98.27%) 775.92
tcp 34329717 ( 81.11%) 29046693857 ( 88.15%) 846.11
http(s) 15820750 ( 37.38%) 21390916879 ( 64.92%) 1352.08
http(c) 9909148 ( 23.41%) 1257214354 ( 3.82%) 126.87
squid 290258 ( 0.69%) 343424331 ( 1.04%) 1183.17
smtp 184020 ( 0.43%) 57328973 ( 0.17%) 311.54
ftp 6134 ( 0.01%) 531959 ( 0.00%) 86.72
pop3 4016 ( 0.01%) 1149699 ( 0.00%) 286.28
imap 1716 ( 0.00%) 196244 ( 0.00%) 114.36
telnet 96036 ( 0.23%) 7114474 ( 0.02%) 74.08
ssh 204589 ( 0.48%) 22156226 ( 0.07%) 108.30
dns 16540 ( 0.04%) 1310725 ( 0.00%) 79.25
bgp 658 ( 0.00%) 131053 ( 0.00%) 199.17
napster 294 ( 0.00%) 21326 ( 0.00%) 72.54
rtsp 6261 ( 0.01%) 7690010 ( 0.02%) 1228.24
icecast 16349 ( 0.04%) 12069620 ( 0.04%) 738.25
hotline 64 ( 0.00%) 4566 ( 0.00%) 71.34
other 7772884 ( 18.37%) 5945433418 ( 18.04%) 764.89
udp 4908071 ( 11.60%) 2535700541 ( 7.70%) 516.64
dns 592221 ( 1.40%) 133426556 ( 0.40%) 225.30
rip 1 ( 0.00%) 72 ( 0.00%) 72.00
realaud 16 ( 0.00%) 2273 ( 0.00%) 142.06
halflif 24 ( 0.00%) 3701 ( 0.00%) 154.21
starcra 523 ( 0.00%) 161918 ( 0.00%) 309.59
everque 574 ( 0.00%) 135438 ( 0.00%) 235.95
unreal 14 ( 0.00%) 1787 ( 0.00%) 127.64
quake 29 ( 0.00%) 2489 ( 0.00%) 85.83
cuseeme 6 ( 0.00%) 1112 ( 0.00%) 185.33
other 4314586 ( 10.19%) 2401929086 ( 7.29%) 556.70
icmp 1454324 ( 3.44%) 137247551 ( 0.42%) 94.37
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 28521 ( 0.07%) 15363206 ( 0.05%) 538.66
ip6 1004710 ( 2.37%) 643929158 ( 1.95%) 640.91
other 7437 ( 0.02%) 2629963 ( 0.01%) 353.63
frag 247 ( 0.00%) 246034 ( 0.00%) 996.09
ip6 590102 ( 1.39%) 568577905 ( 1.73%) 963.52
tcp6 508752 ( 1.20%) 546566846 ( 1.66%) 1074.33
http(s) 27475 ( 0.06%) 34043041 ( 0.10%) 1239.06
http(c) 38426 ( 0.09%) 3370518 ( 0.01%) 87.71
smtp 161 ( 0.00%) 46937 ( 0.00%) 291.53
imap 10 ( 0.00%) 1486 ( 0.00%) 148.60
dns 411 ( 0.00%) 98916 ( 0.00%) 240.67
bgp 90 ( 0.00%) 13259 ( 0.00%) 147.32
other 442179 ( 1.04%) 508992689 ( 1.54%) 1151.10
udp6 58914 ( 0.14%) 16669231 ( 0.05%) 282.94
dns 57389 ( 0.14%) 16468139 ( 0.05%) 286.96
realaud 1 ( 0.00%) 133 ( 0.00%) 133.00
starcra 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 2 ( 0.00%) 217 ( 0.00%) 108.50
other 1521 ( 0.00%) 200636 ( 0.00%) 131.91
icmp6 19570 ( 0.05%) 3133127 ( 0.01%) 160.10
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2753 ( 0.01%) 2193327 ( 0.01%) 796.70
tcpdump file: 201201131400.dump.gz (970.74 MB)