Traffic Trace Info
DumpFile: 201201301400.dump
FileSize: 2923.62MB
Id: 201201301400
StartTime: Mon Jan 30 14:00:01 2012
EndTime: Mon Jan 30 14:15:00 2012
TotalTime: 899.32 seconds
TotalCapSize: -1809.76MB CapLen: 96 bytes
# of packets: 41771101 (28351.74MB)
AvgRate: 264.43Mbps stddev:50.07M
IP flow (unique src/dst pair) Information
# of flows: 1815148 (avg. 23.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 3.3% 2.0% 1.9% 1.8% 1.7% 1.7% 1.5% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1401766
Top 10 bandwidth usage (bytes/total in %):
19.1% 8.0% 6.3% 4.5% 4.3% 4.0% 3.8% 3.6% 3.6% 3.3%
# of IPv6 addresses: 5757
Top 10 bandwidth usage (bytes/total in %):
22.5% 22.4% 22.4% 16.7% 10.8% 6.0% 6.0% 5.6% 4.6% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201201301400.pktlen.png)
detailed numbers
[ 32- 63]: 9196846
[ 64- 127]: 10718810
[ 128- 255]: 1585731
[ 256- 511]: 941610
[ 512- 1023]: 829451
[ 1024- 2047]: 18498653
Protocol Breakdown
![[protocol breakdown chart]](201201301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41771101 (100.00%) 29728956248 (100.00%) 711.71
ip 41518519 ( 99.40%) 29617064393 ( 99.62%) 713.35
tcp 31772252 ( 76.06%) 24362141856 ( 81.95%) 766.77
http(s) 14876317 ( 35.61%) 20064996537 ( 67.49%) 1348.79
http(c) 12098833 ( 28.96%) 1691106378 ( 5.69%) 139.77
squid 64485 ( 0.15%) 33802852 ( 0.11%) 524.20
smtp 74157 ( 0.18%) 26478385 ( 0.09%) 357.06
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 37775 ( 0.09%) 2778131 ( 0.01%) 73.54
pop3 3194 ( 0.01%) 435220 ( 0.00%) 136.26
imap 1619 ( 0.00%) 261765 ( 0.00%) 161.68
telnet 37669 ( 0.09%) 2787575 ( 0.01%) 74.00
ssh 13252 ( 0.03%) 2309530 ( 0.01%) 174.28
dns 17822 ( 0.04%) 1767576 ( 0.01%) 99.18
bgp 655 ( 0.00%) 129454 ( 0.00%) 197.64
napster 180 ( 0.00%) 15991 ( 0.00%) 88.84
realaud 18 ( 0.00%) 1096 ( 0.00%) 60.89
rtsp 7408 ( 0.02%) 7746415 ( 0.03%) 1045.68
icecast 27673 ( 0.07%) 23513673 ( 0.08%) 849.70
hotline 258 ( 0.00%) 18569 ( 0.00%) 71.97
other 4510934 ( 10.80%) 2503992529 ( 8.42%) 555.09
udp 7125152 ( 17.06%) 4624258640 ( 15.55%) 649.00
dns 542899 ( 1.30%) 129605322 ( 0.44%) 238.73
realaud 16 ( 0.00%) 1640 ( 0.00%) 102.50
halflif 553 ( 0.00%) 33927 ( 0.00%) 61.35
starcra 30 ( 0.00%) 4226 ( 0.00%) 140.87
everque 582 ( 0.00%) 158178 ( 0.00%) 271.78
unreal 41 ( 0.00%) 7320 ( 0.00%) 178.54
quake 45 ( 0.00%) 3665 ( 0.00%) 81.44
cuseeme 3 ( 0.00%) 252 ( 0.00%) 84.00
other 6580262 ( 15.75%) 4494314657 ( 15.12%) 683.00
icmp 1576670 ( 3.77%) 153537423 ( 0.52%) 97.38
igmp 16 ( 0.00%) 5250 ( 0.00%) 328.12
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 26234 ( 0.06%) 4281836 ( 0.01%) 163.22
ip6 1009734 ( 2.42%) 471554975 ( 1.59%) 467.01
other 8277 ( 0.02%) 1265253 ( 0.00%) 152.86
frag 4685 ( 0.01%) 3860618 ( 0.01%) 824.04
ip6 252582 ( 0.60%) 111891855 ( 0.38%) 442.99
tcp6 140121 ( 0.34%) 80851491 ( 0.27%) 577.01
http(s) 35361 ( 0.08%) 48682917 ( 0.16%) 1376.74
http(c) 19513 ( 0.05%) 1770995 ( 0.01%) 90.76
smtp 247 ( 0.00%) 68424 ( 0.00%) 277.02
imap 1284 ( 0.00%) 1843156 ( 0.01%) 1435.48
dns 364 ( 0.00%) 65595 ( 0.00%) 180.21
bgp 94 ( 0.00%) 16393 ( 0.00%) 174.39
other 83258 ( 0.20%) 28404011 ( 0.10%) 341.16
udp6 83098 ( 0.20%) 24953922 ( 0.08%) 300.30
dns 61144 ( 0.15%) 16360180 ( 0.06%) 267.57
everque 2 ( 0.00%) 207 ( 0.00%) 103.50
quake 4 ( 0.00%) 422 ( 0.00%) 105.50
cuseeme 1 ( 0.00%) 105 ( 0.00%) 105.00
other 21947 ( 0.05%) 8593008 ( 0.03%) 391.53
icmp6 26025 ( 0.06%) 3634339 ( 0.01%) 139.65
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3224 ( 0.01%) 2436611 ( 0.01%) 755.77
tcpdump file: 201201301400.dump.gz (940.89 MB)