Traffic Trace Info
DumpFile: 201201271400.dump
FileSize: 3938.00MB
Id: 201201271400
StartTime: Fri Jan 27 14:00:01 2012
EndTime: Fri Jan 27 14:15:00 2012
TotalTime: 899.53 seconds
TotalCapSize: -1022.36MB CapLen: 96 bytes
# of packets: 56646143 (35607.03MB)
AvgRate: 332.02Mbps stddev:61.80M
IP flow (unique src/dst pair) Information
# of flows: 1787216 (avg. 31.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
28.6% 1.4% 1.3% 1.0% 0.9% 0.9% 0.6% 0.6% 0.5% 0.5%
IP address Information
# of IPv4 addresses: 1346857
Top 10 bandwidth usage (bytes/total in %):
33.3% 30.0% 26.7% 2.8% 2.5% 2.2% 2.1% 1.9% 1.5% 1.4%
# of IPv6 addresses: 5349
Top 10 bandwidth usage (bytes/total in %):
63.3% 62.2% 14.7% 13.0% 13.0% 11.7% 2.5% 2.0% 1.2% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201201271400.pktlen.png)
detailed numbers
[ 32- 63]: 16287148
[ 64- 127]: 11402960
[ 128- 255]: 1111716
[ 256- 511]: 818360
[ 512- 1023]: 5999991
[ 1024- 2047]: 21025968
Protocol Breakdown
![[protocol breakdown chart]](201201271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 56646143 (100.00%) 37336680504 (100.00%) 659.12
ip 56069947 ( 98.98%) 36730569668 ( 98.38%) 655.08
tcp 49609145 ( 87.58%) 34120419061 ( 91.39%) 687.78
http(s) 19964322 ( 35.24%) 19238422920 ( 51.53%) 963.64
http(c) 22440739 ( 39.62%) 12697662390 ( 34.01%) 565.83
squid 63789 ( 0.11%) 37054595 ( 0.10%) 580.89
smtp 68729 ( 0.12%) 42475116 ( 0.11%) 618.01
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 15938 ( 0.03%) 1329083 ( 0.00%) 83.39
pop3 3780 ( 0.01%) 1223003 ( 0.00%) 323.55
imap 7162 ( 0.01%) 3148721 ( 0.01%) 439.64
telnet 12321 ( 0.02%) 905705 ( 0.00%) 73.51
ssh 76361 ( 0.13%) 13100748 ( 0.04%) 171.56
dns 22485 ( 0.04%) 3821232 ( 0.01%) 169.95
bgp 671 ( 0.00%) 134719 ( 0.00%) 200.77
napster 295 ( 0.00%) 23047 ( 0.00%) 78.13
realaud 47 ( 0.00%) 2908 ( 0.00%) 61.87
rtsp 11456 ( 0.02%) 13538050 ( 0.04%) 1181.74
icecast 2362 ( 0.00%) 829749 ( 0.00%) 351.29
hotline 44 ( 0.00%) 2726 ( 0.00%) 61.95
other 6918638 ( 12.21%) 2066743975 ( 5.54%) 298.72
udp 4214089 ( 7.44%) 2038671438 ( 5.46%) 483.78
dns 514202 ( 0.91%) 108383374 ( 0.29%) 210.78
realaud 33 ( 0.00%) 5072 ( 0.00%) 153.70
halflif 62 ( 0.00%) 5804 ( 0.00%) 93.61
starcra 47 ( 0.00%) 7852 ( 0.00%) 167.06
everque 418 ( 0.00%) 90733 ( 0.00%) 217.06
unreal 11 ( 0.00%) 1756 ( 0.00%) 159.64
quake 59 ( 0.00%) 5887 ( 0.00%) 99.78
cuseeme 7 ( 0.00%) 752 ( 0.00%) 107.43
other 3698062 ( 6.53%) 1929958341 ( 5.17%) 521.88
icmp 1447812 ( 2.56%) 123422882 ( 0.33%) 85.25
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 34950 ( 0.06%) 7481332 ( 0.02%) 214.06
ip6 757396 ( 1.34%) 439444795 ( 1.18%) 580.20
other 6371 ( 0.01%) 1111000 ( 0.00%) 174.38
frag 26101 ( 0.05%) 19612279 ( 0.05%) 751.40
ip6 576196 ( 1.02%) 606110836 ( 1.62%) 1051.92
tcp6 374588 ( 0.66%) 433436372 ( 1.16%) 1157.10
http(s) 23453 ( 0.04%) 27217597 ( 0.07%) 1160.52
http(c) 19717 ( 0.03%) 1926603 ( 0.01%) 97.71
smtp 777 ( 0.00%) 88646 ( 0.00%) 114.09
ftp 70 ( 0.00%) 9426 ( 0.00%) 134.66
dns 628 ( 0.00%) 98259 ( 0.00%) 156.46
bgp 89 ( 0.00%) 16394 ( 0.00%) 184.20
other 329854 ( 0.58%) 404079447 ( 1.08%) 1225.03
udp6 173126 ( 0.31%) 164453695 ( 0.44%) 949.91
dns 55419 ( 0.10%) 14876081 ( 0.04%) 268.43
halflif 1 ( 0.00%) 119 ( 0.00%) 119.00
everque 2 ( 0.00%) 216 ( 0.00%) 108.00
unreal 1 ( 0.00%) 104 ( 0.00%) 104.00
other 117703 ( 0.21%) 149577175 ( 0.40%) 1270.80
icmp6 21599 ( 0.04%) 3270277 ( 0.01%) 151.41
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6769 ( 0.01%) 4935000 ( 0.01%) 729.06
tcpdump file: 201201271400.dump.gz (1291.12 MB)