Traffic Trace Info
DumpFile: 201201201400.dump
FileSize: 3626.82MB
Id: 201201201400
StartTime: Fri Jan 20 14:00:01 2012
EndTime: Fri Jan 20 14:15:00 2012
TotalTime: 899.35 seconds
TotalCapSize: -1253.18MB CapLen: 96 bytes
# of packets: 51379616 (36047.71MB)
AvgRate: 336.25Mbps stddev:52.74M
IP flow (unique src/dst pair) Information
# of flows: 2016773 (avg. 25.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.1% 1.6% 1.5% 1.4% 1.2% 1.1% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 1520430
Top 10 bandwidth usage (bytes/total in %):
20.3% 12.7% 7.7% 5.6% 3.4% 3.2% 3.1% 3.1% 2.6% 2.4%
# of IPv6 addresses: 5201
Top 10 bandwidth usage (bytes/total in %):
37.2% 15.4% 12.4% 11.9% 10.0% 9.4% 5.7% 5.6% 5.4% 5.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201201201400.pktlen.png)
detailed numbers
[ 32- 63]: 13113927
[ 64- 127]: 11107809
[ 128- 255]: 1335532
[ 256- 511]: 954898
[ 512- 1023]: 1149803
[ 1024- 2047]: 23717647
Protocol Breakdown
![[protocol breakdown chart]](201201201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 51379616 (100.00%) 37798768504 (100.00%) 735.68
ip 51040834 ( 99.34%) 37589116551 ( 99.45%) 736.45
tcp 42526658 ( 82.77%) 33398447648 ( 88.36%) 785.35
http(s) 18115871 ( 35.26%) 24666735171 ( 65.26%) 1361.61
http(c) 13179148 ( 25.65%) 2184731119 ( 5.78%) 165.77
squid 73206 ( 0.14%) 38828294 ( 0.10%) 530.40
smtp 57225 ( 0.11%) 23428591 ( 0.06%) 409.41
ftp 14004 ( 0.03%) 11820497 ( 0.03%) 844.08
pop3 5039 ( 0.01%) 1440869 ( 0.00%) 285.94
imap 5749 ( 0.01%) 4078427 ( 0.01%) 709.42
telnet 537 ( 0.00%) 68628 ( 0.00%) 127.80
ssh 395853 ( 0.77%) 175749760 ( 0.46%) 443.98
dns 23059 ( 0.04%) 3917483 ( 0.01%) 169.89
bgp 653 ( 0.00%) 124426 ( 0.00%) 190.55
napster 817 ( 0.00%) 51028 ( 0.00%) 62.46
realaud 82 ( 0.00%) 6366 ( 0.00%) 77.63
rtsp 15273 ( 0.03%) 15624187 ( 0.04%) 1022.99
icecast 25446 ( 0.05%) 15921030 ( 0.04%) 625.68
hotline 48 ( 0.00%) 5002 ( 0.00%) 104.21
other 10614648 ( 20.66%) 6255916770 ( 16.55%) 589.37
udp 5487065 ( 10.68%) 3143074180 ( 8.32%) 572.82
dns 560566 ( 1.09%) 126967946 ( 0.34%) 226.50
realaud 9 ( 0.00%) 1397 ( 0.00%) 155.22
halflif 163 ( 0.00%) 12039 ( 0.00%) 73.86
starcra 28 ( 0.00%) 4115 ( 0.00%) 146.96
everque 449 ( 0.00%) 98415 ( 0.00%) 219.19
unreal 12 ( 0.00%) 1898 ( 0.00%) 158.17
quake 16 ( 0.00%) 2754 ( 0.00%) 172.12
cuseeme 4 ( 0.00%) 635 ( 0.00%) 158.75
other 4860715 ( 9.46%) 3012020520 ( 7.97%) 619.67
icmp 1893461 ( 3.69%) 183878214 ( 0.49%) 97.11
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 12711 ( 0.02%) 3279018 ( 0.01%) 257.97
ip6 1110965 ( 2.16%) 857398605 ( 2.27%) 771.76
other 9789 ( 0.02%) 3019616 ( 0.01%) 308.47
frag 152359 ( 0.30%) 114471505 ( 0.30%) 751.33
ip6 338782 ( 0.66%) 209651953 ( 0.55%) 618.84
tcp6 207154 ( 0.40%) 157803676 ( 0.42%) 761.77
http(s) 40298 ( 0.08%) 47063370 ( 0.12%) 1167.88
http(c) 30796 ( 0.06%) 2777954 ( 0.01%) 90.21
squid 1 ( 0.00%) 86 ( 0.00%) 86.00
smtp 98 ( 0.00%) 75822 ( 0.00%) 773.69
ftp 76 ( 0.00%) 6500 ( 0.00%) 85.53
imap 182 ( 0.00%) 213500 ( 0.00%) 1173.08
dns 663 ( 0.00%) 114782 ( 0.00%) 173.13
bgp 96 ( 0.00%) 15730 ( 0.00%) 163.85
other 134944 ( 0.26%) 107535932 ( 0.28%) 796.89
udp6 91040 ( 0.18%) 37065752 ( 0.10%) 407.14
dns 63900 ( 0.12%) 17358648 ( 0.05%) 271.65
realaud 2 ( 0.00%) 221 ( 0.00%) 110.50
everque 2 ( 0.00%) 234 ( 0.00%) 117.00
quake 3 ( 0.00%) 325 ( 0.00%) 108.33
other 27133 ( 0.05%) 19706324 ( 0.05%) 726.29
icmp6 24856 ( 0.05%) 3582071 ( 0.01%) 144.11
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 15619 ( 0.03%) 11185062 ( 0.03%) 716.12
tcpdump file: 201201201400.dump.gz (1183.67 MB)