Traffic Trace Info
DumpFile: 201201181400.dump
FileSize: 3164.99MB
Id: 201201181400
StartTime: Wed Jan 18 14:00:00 2012
EndTime: Wed Jan 18 14:15:00 2012
TotalTime: 900.23 seconds
TotalCapSize: -1615.39MB CapLen: 96 bytes
# of packets: 44850495 (27773.25MB)
AvgRate: 258.79Mbps stddev:56.13M
IP flow (unique src/dst pair) Information
# of flows: 3530088 (avg. 12.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 4.5% 3.6% 1.0% 0.9% 0.7% 0.7% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 2283659
Top 10 bandwidth usage (bytes/total in %):
18.6% 7.2% 5.1% 4.9% 4.5% 4.5% 3.7% 3.7% 3.7% 3.7%
# of IPv6 addresses: 4820
Top 10 bandwidth usage (bytes/total in %):
33.2% 33.2% 23.8% 10.7% 8.5% 8.4% 8.1% 6.1% 6.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201201181400.pktlen.png)
detailed numbers
[ 32- 63]: 11863042
[ 64- 127]: 11714636
[ 128- 255]: 1389955
[ 256- 511]: 1054902
[ 512- 1023]: 984440
[ 1024- 2047]: 17843520
Protocol Breakdown
![[protocol breakdown chart]](201201181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44850495 (100.00%) 29122364741 (100.00%) 649.32
ip 44534082 ( 99.29%) 28963686189 ( 99.46%) 650.37
tcp 36110090 ( 80.51%) 25917847842 ( 89.00%) 717.75
http(s) 15272622 ( 34.05%) 20415330954 ( 70.10%) 1336.73
http(c) 10992964 ( 24.51%) 1506037583 ( 5.17%) 137.00
squid 374024 ( 0.83%) 364556048 ( 1.25%) 974.69
smtp 228748 ( 0.51%) 111971315 ( 0.38%) 489.50
ftp 6295 ( 0.01%) 473110 ( 0.00%) 75.16
pop3 3684 ( 0.01%) 773975 ( 0.00%) 210.09
imap 2396 ( 0.01%) 328873 ( 0.00%) 137.26
telnet 1238 ( 0.00%) 121009 ( 0.00%) 97.75
ssh 25560 ( 0.06%) 3617500 ( 0.01%) 141.53
dns 26490 ( 0.06%) 2734261 ( 0.01%) 103.22
bgp 690 ( 0.00%) 144207 ( 0.00%) 209.00
napster 220 ( 0.00%) 17165 ( 0.00%) 78.02
realaud 70 ( 0.00%) 5231 ( 0.00%) 74.73
rtsp 85002 ( 0.19%) 116012994 ( 0.40%) 1364.83
icecast 22797 ( 0.05%) 16138302 ( 0.06%) 707.91
hotline 65 ( 0.00%) 10121 ( 0.00%) 155.71
other 9067211 ( 20.22%) 3379574354 ( 11.60%) 372.72
udp 4473703 ( 9.97%) 2172897873 ( 7.46%) 485.70
dns 612727 ( 1.37%) 143644173 ( 0.49%) 234.43
realaud 21 ( 0.00%) 2141 ( 0.00%) 101.95
halflif 21 ( 0.00%) 4475 ( 0.00%) 213.10
starcra 49 ( 0.00%) 5509 ( 0.00%) 112.43
everque 428 ( 0.00%) 122693 ( 0.00%) 286.67
unreal 13 ( 0.00%) 1648 ( 0.00%) 126.77
quake 64 ( 0.00%) 4839 ( 0.00%) 75.61
cuseeme 4 ( 0.00%) 668 ( 0.00%) 167.00
other 3859286 ( 8.60%) 2029022352 ( 6.97%) 525.75
icmp 3026412 ( 6.75%) 224674634 ( 0.77%) 74.24
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 8047 ( 0.02%) 2358506 ( 0.01%) 293.09
ip6 905524 ( 2.02%) 644344879 ( 2.21%) 711.57
other 10122 ( 0.02%) 1543295 ( 0.01%) 152.47
frag 4074 ( 0.01%) 2783609 ( 0.01%) 683.26
ip6 316413 ( 0.71%) 158678552 ( 0.54%) 501.49
tcp6 163555 ( 0.36%) 84704665 ( 0.29%) 517.90
http(s) 57418 ( 0.13%) 73084534 ( 0.25%) 1272.85
http(c) 97033 ( 0.22%) 8562636 ( 0.03%) 88.24
smtp 741 ( 0.00%) 412418 ( 0.00%) 556.57
dns 647 ( 0.00%) 102162 ( 0.00%) 157.90
bgp 87 ( 0.00%) 13030 ( 0.00%) 149.77
other 7629 ( 0.02%) 2529885 ( 0.01%) 331.61
udp6 58999 ( 0.13%) 17428647 ( 0.06%) 295.41
dns 56200 ( 0.13%) 17070161 ( 0.06%) 303.74
realaud 1 ( 0.00%) 113 ( 0.00%) 113.00
halflif 1 ( 0.00%) 103 ( 0.00%) 103.00
everque 3 ( 0.00%) 319 ( 0.00%) 106.33
unreal 2 ( 0.00%) 204 ( 0.00%) 102.00
quake 2 ( 0.00%) 206 ( 0.00%) 103.00
other 2790 ( 0.01%) 357541 ( 0.00%) 128.15
icmp6 17874 ( 0.04%) 3053693 ( 0.01%) 170.85
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 75870 ( 0.17%) 53475919 ( 0.18%) 704.84
tcpdump file: 201201181400.dump.gz (1083.32 MB)