Traffic Trace Info
DumpFile: 201201291400.dump
FileSize: 2112.07MB
Id: 201201291400
StartTime: Sun Jan 29 14:00:00 2012
EndTime: Sun Jan 29 14:15:01 2012
TotalTime: 900.39 seconds
TotalCapSize: 1650.14MB CapLen: 96 bytes
# of packets: 30272267 (22606.95MB)
AvgRate: 210.61Mbps stddev:43.30M
IP flow (unique src/dst pair) Information
# of flows: 1763993 (avg. 17.16 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 3.7% 2.6% 2.6% 1.8% 1.4% 1.2% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 1383665
Top 10 bandwidth usage (bytes/total in %):
18.8% 18.1% 8.1% 6.0% 5.6% 3.8% 3.4% 3.2% 3.0% 2.6%
# of IPv6 addresses: 5171
Top 10 bandwidth usage (bytes/total in %):
27.0% 25.2% 24.7% 19.1% 11.2% 10.9% 9.0% 7.6% 4.3% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201201291400.pktlen.png)
detailed numbers
[ 32- 63]: 6756801
[ 64- 127]: 6210988
[ 128- 255]: 1230929
[ 256- 511]: 650670
[ 512- 1023]: 701101
[ 1024- 2047]: 14721778
Protocol Breakdown
![[protocol breakdown chart]](201201291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30272267 (100.00%) 23705108747 (100.00%) 783.06
ip 30084624 ( 99.38%) 23586121431 ( 99.50%) 783.99
tcp 23285052 ( 76.92%) 21196905489 ( 89.42%) 910.32
http(s) 13224221 ( 43.68%) 18372211730 ( 77.50%) 1389.28
http(c) 5892170 ( 19.46%) 1304764314 ( 5.50%) 221.44
squid 56435 ( 0.19%) 21806934 ( 0.09%) 386.41
smtp 63790 ( 0.21%) 21152179 ( 0.09%) 331.59
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 4584 ( 0.02%) 385336 ( 0.00%) 84.06
pop3 239123 ( 0.79%) 164079194 ( 0.69%) 686.17
imap 346 ( 0.00%) 58329 ( 0.00%) 168.58
telnet 5959 ( 0.02%) 453820 ( 0.00%) 76.16
ssh 42302 ( 0.14%) 6183398 ( 0.03%) 146.17
dns 13952 ( 0.05%) 2780616 ( 0.01%) 199.30
bgp 642 ( 0.00%) 126035 ( 0.00%) 196.32
napster 47 ( 0.00%) 3421 ( 0.00%) 72.79
realaud 20 ( 0.00%) 1657 ( 0.00%) 82.85
rtsp 47782 ( 0.16%) 68519168 ( 0.29%) 1434.00
icecast 2891 ( 0.01%) 260767 ( 0.00%) 90.20
hotline 13 ( 0.00%) 1209 ( 0.00%) 93.00
other 3690768 ( 12.19%) 1234116948 ( 5.21%) 334.38
udp 4351850 ( 14.38%) 1810456087 ( 7.64%) 416.02
dns 401063 ( 1.32%) 93974097 ( 0.40%) 234.31
rip 1 ( 0.00%) 68 ( 0.00%) 68.00
realaud 10 ( 0.00%) 1196 ( 0.00%) 119.60
halflif 46 ( 0.00%) 3687 ( 0.00%) 80.15
starcra 14 ( 0.00%) 1886 ( 0.00%) 134.71
everque 432 ( 0.00%) 67132 ( 0.00%) 155.40
unreal 33 ( 0.00%) 3367 ( 0.00%) 102.03
quake 28 ( 0.00%) 3162 ( 0.00%) 112.93
cuseeme 12 ( 0.00%) 1573 ( 0.00%) 131.08
other 3950001 ( 13.05%) 1716340287 ( 7.24%) 434.52
icmp 1552495 ( 5.13%) 135461474 ( 0.57%) 87.25
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1928 ( 0.01%) 642848 ( 0.00%) 333.43
ip6 886644 ( 2.93%) 440092369 ( 1.86%) 496.36
other 6470 ( 0.02%) 2543894 ( 0.01%) 393.18
frag 36950 ( 0.12%) 27419526 ( 0.12%) 742.07
ip6 187643 ( 0.62%) 118987316 ( 0.50%) 634.12
tcp6 87302 ( 0.29%) 68834450 ( 0.29%) 788.46
http(s) 6484 ( 0.02%) 7582316 ( 0.03%) 1169.39
http(c) 16909 ( 0.06%) 1681322 ( 0.01%) 99.43
squid 56 ( 0.00%) 5048 ( 0.00%) 90.14
smtp 52 ( 0.00%) 8189 ( 0.00%) 157.48
imap 26 ( 0.00%) 2499 ( 0.00%) 96.12
dns 594 ( 0.00%) 113220 ( 0.00%) 190.61
bgp 96 ( 0.00%) 14988 ( 0.00%) 156.12
other 63085 ( 0.21%) 59426868 ( 0.25%) 942.01
udp6 70128 ( 0.23%) 40644377 ( 0.17%) 579.57
dns 39154 ( 0.13%) 9736620 ( 0.04%) 248.67
halflif 1 ( 0.00%) 114 ( 0.00%) 114.00
other 30973 ( 0.10%) 30907643 ( 0.13%) 997.89
icmp6 28924 ( 0.10%) 8511558 ( 0.04%) 294.27
ip6 81 ( 0.00%) 11008 ( 0.00%) 135.90
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1178 ( 0.00%) 981843 ( 0.00%) 833.48
tcpdump file: 201201291400.dump.gz (690.95 MB)