Traffic Trace Info
DumpFile: 201201251400.dump
FileSize: 3174.31MB
Id: 201201251400
StartTime: Wed Jan 25 14:00:01 2012
EndTime: Wed Jan 25 14:15:00 2012
TotalTime: 899.25 seconds
TotalCapSize: -1613.89MB CapLen: 96 bytes
# of packets: 45363506 (29381.62MB)
AvgRate: 274.15Mbps stddev:55.00M
IP flow (unique src/dst pair) Information
# of flows: 2115931 (avg. 21.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.0% 1.0% 1.0% 0.9% 0.9% 0.9% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 1540939
Top 10 bandwidth usage (bytes/total in %):
21.4% 6.8% 5.0% 4.6% 4.1% 3.4% 2.9% 2.2% 2.2% 1.8%
# of IPv6 addresses: 4752
Top 10 bandwidth usage (bytes/total in %):
19.2% 19.2% 15.7% 10.7% 9.3% 5.8% 5.2% 5.1% 5.0% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201201251400.pktlen.png)
detailed numbers
[ 32- 63]: 10587376
[ 64- 127]: 12129846
[ 128- 255]: 1616541
[ 256- 511]: 938315
[ 512- 1023]: 1016041
[ 1024- 2047]: 19075387
Protocol Breakdown
![[protocol breakdown chart]](201201251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 45363506 (100.00%) 30808864948 (100.00%) 679.16
ip 45151062 ( 99.53%) 30726571243 ( 99.73%) 680.53
tcp 36392598 ( 80.22%) 26766128830 ( 86.88%) 735.48
http(s) 14661660 ( 32.32%) 19402118482 ( 62.98%) 1323.32
http(c) 11234109 ( 24.76%) 2100421790 ( 6.82%) 186.97
squid 88630 ( 0.20%) 35137359 ( 0.11%) 396.45
smtp 151906 ( 0.33%) 122454608 ( 0.40%) 806.12
ftp 27020 ( 0.06%) 2258701 ( 0.01%) 83.59
pop3 4249 ( 0.01%) 1857033 ( 0.01%) 437.05
imap 2300 ( 0.01%) 624263 ( 0.00%) 271.42
telnet 26654 ( 0.06%) 1987095 ( 0.01%) 74.55
ssh 809382 ( 1.78%) 164915509 ( 0.54%) 203.75
dns 23005 ( 0.05%) 2317085 ( 0.01%) 100.72
bgp 696 ( 0.00%) 166715 ( 0.00%) 239.53
napster 195 ( 0.00%) 15609 ( 0.00%) 80.05
realaud 106 ( 0.00%) 9013 ( 0.00%) 85.03
rtsp 15957 ( 0.04%) 20460932 ( 0.07%) 1282.25
icecast 36452 ( 0.08%) 32150987 ( 0.10%) 882.01
hotline 88 ( 0.00%) 5772 ( 0.00%) 65.59
other 9310180 ( 20.52%) 4879227291 ( 15.84%) 524.07
udp 6301554 ( 13.89%) 3278554464 ( 10.64%) 520.28
dns 549342 ( 1.21%) 112300206 ( 0.36%) 204.43
rip 1 ( 0.00%) 69 ( 0.00%) 69.00
realaud 25 ( 0.00%) 5659 ( 0.00%) 226.36
halflif 1732 ( 0.00%) 105368 ( 0.00%) 60.84
starcra 17 ( 0.00%) 2055 ( 0.00%) 120.88
everque 2123 ( 0.00%) 1497709 ( 0.00%) 705.47
unreal 27 ( 0.00%) 2803 ( 0.00%) 103.81
quake 24 ( 0.00%) 3819 ( 0.00%) 159.12
cuseeme 8 ( 0.00%) 912 ( 0.00%) 114.00
other 5748109 ( 12.67%) 3164587453 ( 10.27%) 550.54
icmp 1438542 ( 3.17%) 118128158 ( 0.38%) 82.12
ipip 186 ( 0.00%) 19380 ( 0.00%) 104.19
ipsec 19019 ( 0.04%) 2657394 ( 0.01%) 139.72
ip6 991473 ( 2.19%) 559834189 ( 1.82%) 564.65
other 7690 ( 0.02%) 1248828 ( 0.00%) 162.40
frag 1799 ( 0.00%) 1712237 ( 0.01%) 951.77
ip6 212444 ( 0.47%) 82293705 ( 0.27%) 387.37
tcp6 124091 ( 0.27%) 62052309 ( 0.20%) 500.05
http(s) 35858 ( 0.08%) 46608764 ( 0.15%) 1299.81
http(c) 44881 ( 0.10%) 4022863 ( 0.01%) 89.63
smtp 143 ( 0.00%) 68572 ( 0.00%) 479.52
ftp 24 ( 0.00%) 2141 ( 0.00%) 89.21
dns 265 ( 0.00%) 58577 ( 0.00%) 221.05
bgp 93 ( 0.00%) 24024 ( 0.00%) 258.32
other 42827 ( 0.09%) 11267368 ( 0.04%) 263.09
udp6 68156 ( 0.15%) 16412608 ( 0.05%) 240.81
dns 57009 ( 0.13%) 15360798 ( 0.05%) 269.45
realaud 2 ( 0.00%) 216 ( 0.00%) 108.00
everque 1 ( 0.00%) 102 ( 0.00%) 102.00
cuseeme 1 ( 0.00%) 108 ( 0.00%) 108.00
other 11143 ( 0.02%) 1051384 ( 0.00%) 94.35
icmp6 19275 ( 0.04%) 2999899 ( 0.01%) 155.64
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 807 ( 0.00%) 813261 ( 0.00%) 1007.76
tcpdump file: 201201251400.dump.gz (1078.15 MB)