Traffic Trace Info
DumpFile: 201201231400.dump
FileSize: 2705.52MB
Id: 201201231400
StartTime: Mon Jan 23 14:00:00 2012
EndTime: Mon Jan 23 14:15:01 2012
TotalTime: 900.54 seconds
TotalCapSize: -1982.05MB CapLen: 96 bytes
# of packets: 38768403 (23855.61MB)
AvgRate: 222.21Mbps stddev:34.71M
IP flow (unique src/dst pair) Information
# of flows: 3478990 (avg. 11.14 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 2.6% 1.6% 1.3% 1.2% 1.1% 1.1% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 2299058
Top 10 bandwidth usage (bytes/total in %):
9.6% 9.3% 9.2% 7.8% 6.5% 3.7% 3.5% 3.1% 2.9% 2.8%
# of IPv6 addresses: 4926
Top 10 bandwidth usage (bytes/total in %):
40.9% 40.7% 17.7% 17.7% 13.9% 11.7% 5.5% 3.8% 3.8% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201201231400.pktlen.png)
detailed numbers
[ 32- 63]: 10580345
[ 64- 127]: 9922399
[ 128- 255]: 1209454
[ 256- 511]: 799469
[ 512- 1023]: 933148
[ 1024- 2047]: 15323588
Protocol Breakdown
![[protocol breakdown chart]](201201231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38768403 (100.00%) 25014420924 (100.00%) 645.23
ip 38227051 ( 98.60%) 24615552663 ( 98.41%) 643.93
tcp 28306595 ( 73.01%) 19714320175 ( 78.81%) 696.46
http(s) 11392325 ( 29.39%) 15080980501 ( 60.29%) 1323.78
http(c) 9568903 ( 24.68%) 1247027360 ( 4.99%) 130.32
squid 136353 ( 0.35%) 101910831 ( 0.41%) 747.40
smtp 90252 ( 0.23%) 66676102 ( 0.27%) 738.78
ftp 13960 ( 0.04%) 1036488 ( 0.00%) 74.25
pop3 3088 ( 0.01%) 987786 ( 0.00%) 319.88
imap 2443 ( 0.01%) 508827 ( 0.00%) 208.28
telnet 18562 ( 0.05%) 1372723 ( 0.01%) 73.95
ssh 14608 ( 0.04%) 2859574 ( 0.01%) 195.75
dns 25255 ( 0.07%) 4187938 ( 0.02%) 165.83
bgp 633 ( 0.00%) 119255 ( 0.00%) 188.40
napster 5025 ( 0.01%) 317045 ( 0.00%) 63.09
realaud 96 ( 0.00%) 8089 ( 0.00%) 84.26
rtsp 6242 ( 0.02%) 7686957 ( 0.03%) 1231.49
icecast 31483 ( 0.08%) 17095414 ( 0.07%) 543.00
hotline 30 ( 0.00%) 1866 ( 0.00%) 62.20
other 6997330 ( 18.05%) 3181542845 ( 12.72%) 454.68
udp 5982686 ( 15.43%) 4034935503 ( 16.13%) 674.44
dns 467346 ( 1.21%) 93204561 ( 0.37%) 199.43
realaud 17 ( 0.00%) 1974 ( 0.00%) 116.12
halflif 559 ( 0.00%) 46575 ( 0.00%) 83.32
starcra 75 ( 0.00%) 13288 ( 0.00%) 177.17
everque 481 ( 0.00%) 126266 ( 0.00%) 262.51
unreal 25 ( 0.00%) 3964 ( 0.00%) 158.56
quake 35 ( 0.00%) 2810 ( 0.00%) 80.29
cuseeme 3 ( 0.00%) 537 ( 0.00%) 179.00
other 5501915 ( 14.19%) 3940516102 ( 15.75%) 716.21
icmp 3022982 ( 7.80%) 221789785 ( 0.89%) 73.37
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3440 ( 0.01%) 1790560 ( 0.01%) 520.51
ip6 903068 ( 2.33%) 639865712 ( 2.56%) 708.55
other 8095 ( 0.02%) 2831658 ( 0.01%) 349.80
frag 59726 ( 0.15%) 44904717 ( 0.18%) 751.85
ip6 541352 ( 1.40%) 398868261 ( 1.59%) 736.80
tcp6 211802 ( 0.55%) 205281509 ( 0.82%) 969.21
http(s) 77742 ( 0.20%) 109605217 ( 0.44%) 1409.86
http(c) 18968 ( 0.05%) 1690171 ( 0.01%) 89.11
squid 99 ( 0.00%) 57546 ( 0.00%) 581.27
smtp 186 ( 0.00%) 112820 ( 0.00%) 606.56
ftp 26 ( 0.00%) 2313 ( 0.00%) 88.96
dns 352 ( 0.00%) 75711 ( 0.00%) 215.09
bgp 92 ( 0.00%) 16487 ( 0.00%) 179.21
other 114337 ( 0.29%) 93721244 ( 0.37%) 819.69
udp6 73340 ( 0.19%) 25166851 ( 0.10%) 343.15
dns 60309 ( 0.16%) 16032211 ( 0.06%) 265.83
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
unreal 1 ( 0.00%) 97 ( 0.00%) 97.00
other 13028 ( 0.03%) 9134325 ( 0.04%) 701.13
icmp6 21196 ( 0.05%) 3316641 ( 0.01%) 156.47
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 234902 ( 0.61%) 165088004 ( 0.66%) 702.80
tcpdump file: 201201231400.dump.gz (892.24 MB)