Traffic Trace Info
DumpFile: 201201311400.dump
FileSize: 3119.73MB
Id: 201201311400
StartTime: Tue Jan 31 14:00:00 2012
EndTime: Tue Jan 31 14:15:01 2012
TotalTime: 900.61 seconds
TotalCapSize: -1649.76MB CapLen: 96 bytes
# of packets: 44137429 (30314.34MB)
AvgRate: 282.39Mbps stddev:56.09M
IP flow (unique src/dst pair) Information
# of flows: 1947603 (avg. 22.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 1.2% 1.1% 1.0% 0.7% 0.7% 0.7% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 1479681
Top 10 bandwidth usage (bytes/total in %):
26.4% 7.1% 4.7% 3.2% 2.9% 2.9% 2.8% 2.8% 2.5% 2.2%
# of IPv6 addresses: 6096
Top 10 bandwidth usage (bytes/total in %):
36.7% 20.2% 20.2% 13.1% 10.8% 10.8% 9.7% 3.4% 3.3% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201201311400.pktlen.png)
detailed numbers
[ 32- 63]: 9766962
[ 64- 127]: 10971153
[ 128- 255]: 1662748
[ 256- 511]: 1014244
[ 512- 1023]: 1022968
[ 1024- 2047]: 19699354
Protocol Breakdown
![[protocol breakdown chart]](201201311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44137429 (100.00%) 31786892397 (100.00%) 720.18
ip 43660231 ( 98.92%) 31526264527 ( 99.18%) 722.08
tcp 36208618 ( 82.04%) 28766684355 ( 90.50%) 794.47
http(s) 16694919 ( 37.82%) 22416356875 ( 70.52%) 1342.71
http(c) 12486946 ( 28.29%) 3083134959 ( 9.70%) 246.91
squid 316990 ( 0.72%) 230131258 ( 0.72%) 725.99
smtp 112301 ( 0.25%) 42945801 ( 0.14%) 382.42
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 4570 ( 0.01%) 401218 ( 0.00%) 87.79
pop3 38630 ( 0.09%) 49150318 ( 0.15%) 1272.34
imap 2513 ( 0.01%) 310653 ( 0.00%) 123.62
telnet 512 ( 0.00%) 67809 ( 0.00%) 132.44
ssh 172039 ( 0.39%) 19790359 ( 0.06%) 115.03
dns 22678 ( 0.05%) 3936451 ( 0.01%) 173.58
bgp 655 ( 0.00%) 119523 ( 0.00%) 182.48
napster 471 ( 0.00%) 30054 ( 0.00%) 63.81
realaud 75 ( 0.00%) 6310 ( 0.00%) 84.13
rtsp 15130 ( 0.03%) 17382692 ( 0.05%) 1148.89
icecast 31044 ( 0.07%) 33663011 ( 0.11%) 1084.36
hotline 12 ( 0.00%) 842 ( 0.00%) 70.17
other 6309132 ( 14.29%) 2869256162 ( 9.03%) 454.78
udp 4970107 ( 11.26%) 2066136115 ( 6.50%) 415.71
dns 577649 ( 1.31%) 134006382 ( 0.42%) 231.99
rip 5 ( 0.00%) 440 ( 0.00%) 88.00
realaud 16 ( 0.00%) 1898 ( 0.00%) 118.62
halflif 145 ( 0.00%) 10932 ( 0.00%) 75.39
starcra 44 ( 0.00%) 7011 ( 0.00%) 159.34
everque 369 ( 0.00%) 96474 ( 0.00%) 261.45
unreal 43 ( 0.00%) 4388 ( 0.00%) 102.05
quake 24 ( 0.00%) 3261 ( 0.00%) 135.88
cuseeme 81 ( 0.00%) 28904 ( 0.00%) 356.84
other 4391522 ( 9.95%) 1931884502 ( 6.08%) 439.91
icmp 1609221 ( 3.65%) 158309743 ( 0.50%) 98.38
igmp 1 ( 0.00%) 60 ( 0.00%) 60.00
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 31485 ( 0.07%) 7981086 ( 0.03%) 253.49
ip6 751835 ( 1.70%) 514652134 ( 1.62%) 684.53
other 88779 ( 0.20%) 12481764 ( 0.04%) 140.59
frag 3222 ( 0.01%) 2651026 ( 0.01%) 822.79
ip6 477198 ( 1.08%) 260627870 ( 0.82%) 546.16
tcp6 283524 ( 0.64%) 157797507 ( 0.50%) 556.56
http(s) 61924 ( 0.14%) 81296693 ( 0.26%) 1312.85
http(c) 147346 ( 0.33%) 12088788 ( 0.04%) 82.04
smtp 540 ( 0.00%) 381686 ( 0.00%) 706.83
ftp 123 ( 0.00%) 11513 ( 0.00%) 93.60
imap 30 ( 0.00%) 2580 ( 0.00%) 86.00
ssh 45 ( 0.00%) 5310 ( 0.00%) 118.00
dns 395 ( 0.00%) 84119 ( 0.00%) 212.96
bgp 94 ( 0.00%) 19566 ( 0.00%) 208.15
other 73027 ( 0.17%) 63907252 ( 0.20%) 875.12
udp6 104494 ( 0.24%) 52084141 ( 0.16%) 498.44
dns 55427 ( 0.13%) 15729069 ( 0.05%) 283.78
realaud 2 ( 0.00%) 220 ( 0.00%) 110.00
starcra 1 ( 0.00%) 112 ( 0.00%) 112.00
cuseeme 1 ( 0.00%) 108 ( 0.00%) 108.00
other 49063 ( 0.11%) 36354632 ( 0.11%) 740.98
icmp6 21910 ( 0.05%) 3202474 ( 0.01%) 146.16
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 67155 ( 0.15%) 47528088 ( 0.15%) 707.74
tcpdump file: 201201311400.dump.gz (1039.16 MB)