Traffic Trace Info
DumpFile: 201201151400.dump
FileSize: 2614.56MB
Id: 201201151400
StartTime: Sun Jan 15 14:00:00 2012
EndTime: Sun Jan 15 14:15:00 2012
TotalTime: 900.24 seconds
TotalCapSize: -2042.12MB CapLen: 96 bytes
# of packets: 36744360 (31013.13MB)
AvgRate: 289.04Mbps stddev:55.09M
IP flow (unique src/dst pair) Information
# of flows: 1793776 (avg. 20.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 5.1% 3.4% 2.8% 2.4% 2.1% 1.8% 1.5% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 1433124
Top 10 bandwidth usage (bytes/total in %):
23.0% 14.4% 11.0% 7.7% 7.7% 5.6% 5.2% 3.8% 3.4% 2.9%
# of IPv6 addresses: 4082
Top 10 bandwidth usage (bytes/total in %):
27.1% 17.5% 14.0% 11.0% 7.5% 7.1% 5.8% 5.4% 5.2% 4.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201201151400.pktlen.png)
detailed numbers
[ 32- 63]: 5999307
[ 64- 127]: 7545791
[ 128- 255]: 1196586
[ 256- 511]: 707408
[ 512- 1023]: 735302
[ 1024- 2047]: 20559966
Protocol Breakdown
![[protocol breakdown chart]](201201151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36744360 (100.00%) 32519623041 (100.00%) 885.02
ip 36522353 ( 99.40%) 32432976803 ( 99.73%) 888.03
tcp 29623623 ( 80.62%) 30450580511 ( 93.64%) 1027.92
http(s) 16107468 ( 43.84%) 22575335508 ( 69.42%) 1401.54
http(c) 6940508 ( 18.89%) 1035216189 ( 3.18%) 149.16
squid 942160 ( 2.56%) 1283909112 ( 3.95%) 1362.73
smtp 47812 ( 0.13%) 12134319 ( 0.04%) 253.79
nntp 3 ( 0.00%) 194 ( 0.00%) 64.67
ftp 4351 ( 0.01%) 383934 ( 0.00%) 88.24
pop3 2850 ( 0.01%) 2306741 ( 0.01%) 809.38
imap 1913 ( 0.01%) 221977 ( 0.00%) 116.04
telnet 494 ( 0.00%) 66570 ( 0.00%) 134.76
ssh 114606 ( 0.31%) 18142535 ( 0.06%) 158.30
dns 13530 ( 0.04%) 2696753 ( 0.01%) 199.32
bgp 653 ( 0.00%) 108945 ( 0.00%) 166.84
napster 26 ( 0.00%) 1858 ( 0.00%) 71.46
realaud 331 ( 0.00%) 20595 ( 0.00%) 62.22
rtsp 63557 ( 0.17%) 92645668 ( 0.28%) 1457.68
icecast 6474 ( 0.02%) 4997134 ( 0.02%) 771.88
hotline 3 ( 0.00%) 184 ( 0.00%) 61.33
other 5376884 ( 14.63%) 5422392295 ( 16.67%) 1008.46
udp 4181394 ( 11.38%) 1450551336 ( 4.46%) 346.91
dns 1077399 ( 2.93%) 142601544 ( 0.44%) 132.36
rip 4 ( 0.00%) 297 ( 0.00%) 74.25
realaud 28 ( 0.00%) 2620 ( 0.00%) 93.57
halflif 55 ( 0.00%) 6921 ( 0.00%) 125.84
starcra 20 ( 0.00%) 1991 ( 0.00%) 99.55
everque 367 ( 0.00%) 106901 ( 0.00%) 291.28
unreal 10 ( 0.00%) 811 ( 0.00%) 81.10
quake 55 ( 0.00%) 5353 ( 0.00%) 97.33
cuseeme 10 ( 0.00%) 890 ( 0.00%) 89.00
other 3103421 ( 8.45%) 1307810428 ( 4.02%) 421.41
icmp 2115868 ( 5.76%) 219003203 ( 0.67%) 103.51
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 6778 ( 0.02%) 3080908 ( 0.01%) 454.55
ip6 576042 ( 1.57%) 305817276 ( 0.94%) 530.89
other 18464 ( 0.05%) 3924409 ( 0.01%) 212.54
frag 155 ( 0.00%) 165290 ( 0.00%) 1066.39
ip6 222007 ( 0.60%) 86646238 ( 0.27%) 390.29
tcp6 115499 ( 0.31%) 48329016 ( 0.15%) 418.44
http(s) 7416 ( 0.02%) 8865474 ( 0.03%) 1195.45
http(c) 20993 ( 0.06%) 1894557 ( 0.01%) 90.25
smtp 54 ( 0.00%) 7990 ( 0.00%) 147.96
ftp 25 ( 0.00%) 2296 ( 0.00%) 91.84
dns 428 ( 0.00%) 77438 ( 0.00%) 180.93
bgp 72 ( 0.00%) 9811 ( 0.00%) 136.26
other 86511 ( 0.24%) 37471450 ( 0.12%) 433.14
udp6 56594 ( 0.15%) 20372179 ( 0.06%) 359.97
dns 36947 ( 0.10%) 9525936 ( 0.03%) 257.83
realaud 1 ( 0.00%) 103 ( 0.00%) 103.00
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
other 19644 ( 0.05%) 10845928 ( 0.03%) 552.12
icmp6 30618 ( 0.08%) 4342617 ( 0.01%) 141.83
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 19181 ( 0.05%) 13586798 ( 0.04%) 708.35
tcpdump file: 201201151400.dump.gz (808.36 MB)