Traffic Trace Info
DumpFile: 201201191400.dump
FileSize: 3259.21MB
Id: 201201191400
StartTime: Thu Jan 19 14:00:01 2012
EndTime: Thu Jan 19 14:15:01 2012
TotalTime: 900.28 seconds
TotalCapSize: -1539.56MB CapLen: 96 bytes
# of packets: 46056430 (26310.94MB)
AvgRate: 245.11Mbps stddev:50.32M
IP flow (unique src/dst pair) Information
# of flows: 1889427 (avg. 24.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 3.9% 1.7% 1.1% 1.1% 1.0% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 1413710
Top 10 bandwidth usage (bytes/total in %):
22.1% 7.0% 4.4% 4.2% 4.0% 3.7% 3.7% 2.9% 2.7% 2.5%
# of IPv6 addresses: 5586
Top 10 bandwidth usage (bytes/total in %):
20.3% 19.4% 18.2% 10.4% 8.5% 8.1% 7.7% 5.8% 4.4% 4.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201201191400.pktlen.png)
detailed numbers
[ 32- 63]: 11014245
[ 64- 127]: 14127946
[ 128- 255]: 2120692
[ 256- 511]: 1035626
[ 512- 1023]: 1252419
[ 1024- 2047]: 16505502
Protocol Breakdown
![[protocol breakdown chart]](201201191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 46056430 (100.00%) 27589018854 (100.00%) 599.03
ip 45802952 ( 99.45%) 27479319058 ( 99.60%) 599.95
tcp 37408626 ( 81.22%) 23474306788 ( 85.09%) 627.51
http(s) 13004923 ( 28.24%) 17252284296 ( 62.53%) 1326.60
http(c) 11065540 ( 24.03%) 1402644036 ( 5.08%) 126.76
squid 411067 ( 0.89%) 440866574 ( 1.60%) 1072.49
smtp 99752 ( 0.22%) 51894848 ( 0.19%) 520.24
ftp 8732 ( 0.02%) 1664134 ( 0.01%) 190.58
pop3 5886 ( 0.01%) 4357226 ( 0.02%) 740.27
imap 1786 ( 0.00%) 492826 ( 0.00%) 275.94
telnet 2739 ( 0.01%) 696879 ( 0.00%) 254.43
ssh 5246380 ( 11.39%) 802474395 ( 2.91%) 152.96
dns 22712 ( 0.05%) 3860135 ( 0.01%) 169.96
bgp 654 ( 0.00%) 121476 ( 0.00%) 185.74
napster 212 ( 0.00%) 23894 ( 0.00%) 112.71
realaud 182 ( 0.00%) 13418 ( 0.00%) 73.73
rtsp 15524 ( 0.03%) 19914591 ( 0.07%) 1282.83
icecast 27664 ( 0.06%) 16549734 ( 0.06%) 598.24
hotline 48 ( 0.00%) 4043 ( 0.00%) 84.23
other 7494825 ( 16.27%) 3476444283 ( 12.60%) 463.85
udp 5781924 ( 12.55%) 3341038425 ( 12.11%) 577.84
dns 609217 ( 1.32%) 137421340 ( 0.50%) 225.57
realaud 15 ( 0.00%) 1944 ( 0.00%) 129.60
halflif 274 ( 0.00%) 17846 ( 0.00%) 65.13
starcra 34 ( 0.00%) 4978 ( 0.00%) 146.41
everque 712 ( 0.00%) 135640 ( 0.00%) 190.51
unreal 13 ( 0.00%) 2197 ( 0.00%) 169.00
quake 49 ( 0.00%) 4173 ( 0.00%) 85.16
cuseeme 3 ( 0.00%) 306 ( 0.00%) 102.00
other 5148777 ( 11.18%) 3201965640 ( 11.61%) 621.89
icmp 1573290 ( 3.42%) 164617815 ( 0.60%) 104.63
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 761 ( 0.00%) 504630 ( 0.00%) 663.11
ip6 1031535 ( 2.24%) 497764898 ( 1.80%) 482.55
other 6631 ( 0.01%) 1067232 ( 0.00%) 160.95
frag 49189 ( 0.11%) 37581704 ( 0.14%) 764.03
ip6 253478 ( 0.55%) 109699796 ( 0.40%) 432.78
tcp6 121662 ( 0.26%) 67873245 ( 0.25%) 557.88
http(s) 34335 ( 0.07%) 40346151 ( 0.15%) 1175.07
http(c) 38444 ( 0.08%) 3410510 ( 0.01%) 88.71
smtp 324 ( 0.00%) 143970 ( 0.00%) 444.35
ftp 16 ( 0.00%) 1402 ( 0.00%) 87.62
pop3 43 ( 0.00%) 5757 ( 0.00%) 133.88
dns 409 ( 0.00%) 70905 ( 0.00%) 173.36
bgp 89 ( 0.00%) 15470 ( 0.00%) 173.82
other 48002 ( 0.10%) 23879080 ( 0.09%) 497.46
udp6 89361 ( 0.19%) 24043435 ( 0.09%) 269.06
dns 62207 ( 0.14%) 18219803 ( 0.07%) 292.89
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
starcra 7 ( 0.00%) 663 ( 0.00%) 94.71
unreal 1 ( 0.00%) 109 ( 0.00%) 109.00
other 27145 ( 0.06%) 5822754 ( 0.02%) 214.51
icmp6 22326 ( 0.05%) 3535471 ( 0.01%) 158.36
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 20015 ( 0.04%) 14232153 ( 0.05%) 711.07
tcpdump file: 201201191400.dump.gz (1148.48 MB)