Traffic Trace Info
DumpFile: 201201171400.dump
FileSize: 3459.00MB
Id: 201201171400
StartTime: Tue Jan 17 14:00:01 2012
EndTime: Tue Jan 17 14:15:00 2012
TotalTime: 899.38 seconds
TotalCapSize: -1391.57MB CapLen: 96 bytes
# of packets: 49450818 (34390.58MB)
AvgRate: 320.73Mbps stddev:54.56M
IP flow (unique src/dst pair) Information
# of flows: 4628385 (avg. 10.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 2.1% 1.7% 1.4% 1.1% 1.1% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 2767677
Top 10 bandwidth usage (bytes/total in %):
19.7% 19.1% 3.4% 3.3% 3.0% 2.7% 2.4% 2.2% 2.2% 1.9%
# of IPv6 addresses: 5275
Top 10 bandwidth usage (bytes/total in %):
65.8% 65.8% 20.9% 20.4% 6.0% 2.0% 2.0% 1.9% 1.9% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201201171400.pktlen.png)
detailed numbers
[ 32- 63]: 11414900
[ 64- 127]: 11915333
[ 128- 255]: 1790177
[ 256- 511]: 921618
[ 512- 1023]: 990770
[ 1024- 2047]: 22418020
Protocol Breakdown
![[protocol breakdown chart]](201201171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 49450818 (100.00%) 36061138612 (100.00%) 729.23
ip 48185548 ( 97.44%) 34368336256 ( 95.31%) 713.25
tcp 35406751 ( 71.60%) 30526547380 ( 84.65%) 862.17
http(s) 18287795 ( 36.98%) 25308139383 ( 70.18%) 1383.88
http(c) 12236139 ( 24.74%) 1590412055 ( 4.41%) 129.98
squid 318415 ( 0.64%) 321699380 ( 0.89%) 1010.31
smtp 102034 ( 0.21%) 56171767 ( 0.16%) 550.52
ftp 16794 ( 0.03%) 1403681 ( 0.00%) 83.58
pop3 4435 ( 0.01%) 2496067 ( 0.01%) 562.81
imap 1959 ( 0.00%) 232328 ( 0.00%) 118.60
telnet 8357 ( 0.02%) 630655 ( 0.00%) 75.46
ssh 36240 ( 0.07%) 5805665 ( 0.02%) 160.20
dns 22336 ( 0.05%) 2256952 ( 0.01%) 101.05
bgp 1164 ( 0.00%) 609326 ( 0.00%) 523.48
napster 17 ( 0.00%) 2080 ( 0.00%) 122.35
realaud 54 ( 0.00%) 5583 ( 0.00%) 103.39
rtsp 12753 ( 0.03%) 12347882 ( 0.03%) 968.23
icecast 1839 ( 0.00%) 794295 ( 0.00%) 431.92
hotline 13 ( 0.00%) 1433 ( 0.00%) 110.23
other 4356405 ( 8.81%) 3223538684 ( 8.94%) 739.95
udp 6351247 ( 12.84%) 2889075217 ( 8.01%) 454.88
dns 1364538 ( 2.76%) 211596176 ( 0.59%) 155.07
rip 1 ( 0.00%) 70 ( 0.00%) 70.00
realaud 28 ( 0.00%) 2905 ( 0.00%) 103.75
halflif 38 ( 0.00%) 4060 ( 0.00%) 106.84
starcra 25 ( 0.00%) 3723 ( 0.00%) 148.92
everque 29580 ( 0.06%) 27797514 ( 0.08%) 939.74
unreal 23 ( 0.00%) 2799 ( 0.00%) 121.70
quake 68 ( 0.00%) 6872 ( 0.00%) 101.06
cuseeme 13 ( 0.00%) 1102 ( 0.00%) 84.77
other 4951439 ( 10.01%) 2649302905 ( 7.35%) 535.06
icmp 5387940 ( 10.90%) 434316180 ( 1.20%) 80.61
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 17098 ( 0.03%) 5069004 ( 0.01%) 296.47
ip6 1013957 ( 2.05%) 510522945 ( 1.42%) 503.50
other 8370 ( 0.02%) 2786260 ( 0.01%) 332.89
frag 12071 ( 0.02%) 9322788 ( 0.03%) 772.33
ip6 1265270 ( 2.56%) 1692802356 ( 4.69%) 1337.90
tcp6 1135515 ( 2.30%) 1603353967 ( 4.45%) 1412.01
http(s) 766918 ( 1.55%) 1145491406 ( 3.18%) 1493.63
http(c) 38821 ( 0.08%) 3289013 ( 0.01%) 84.72
smtp 199 ( 0.00%) 55520 ( 0.00%) 278.99
ftp 3 ( 0.00%) 222 ( 0.00%) 74.00
ssh 2 ( 0.00%) 172 ( 0.00%) 86.00
dns 555 ( 0.00%) 85257 ( 0.00%) 153.62
bgp 88 ( 0.00%) 15585 ( 0.00%) 177.10
realaud 11 ( 0.00%) 1949 ( 0.00%) 177.18
other 328918 ( 0.67%) 454414843 ( 1.26%) 1381.54
udp6 107333 ( 0.22%) 81847519 ( 0.23%) 762.56
dns 56172 ( 0.11%) 16509310 ( 0.05%) 293.91
everque 2 ( 0.00%) 221 ( 0.00%) 110.50
unreal 1 ( 0.00%) 94 ( 0.00%) 94.00
other 51158 ( 0.10%) 65337894 ( 0.18%) 1277.18
icmp6 21539 ( 0.04%) 6829928 ( 0.02%) 317.10
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 768 ( 0.00%) 755282 ( 0.00%) 983.44
tcpdump file: 201201171400.dump.gz (1142.81 MB)