Traffic Trace Info
DumpFile: 201202011400.dump
FileSize: 4397.25MB
Id: 201202011400
StartTime: Wed Feb 1 14:00:01 2012
EndTime: Wed Feb 1 14:15:01 2012
TotalTime: 900.12 seconds
TotalCapSize: -684.97MB CapLen: 96 bytes
# of packets: 64632346 (34396.06MB)
AvgRate: 320.55Mbps stddev:48.04M
IP flow (unique src/dst pair) Information
# of flows: 12531403 (avg. 5.16 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.9% 2.5% 2.1% 1.3% 1.1% 1.0% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 9870005
Top 10 bandwidth usage (bytes/total in %):
14.3% 11.2% 8.0% 8.0% 5.6% 3.2% 2.9% 2.8% 2.6% 2.5%
# of IPv6 addresses: 5418
Top 10 bandwidth usage (bytes/total in %):
19.0% 18.0% 17.7% 17.4% 10.8% 8.9% 5.8% 3.3% 3.0% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201202011400.pktlen.png)
detailed numbers
[ 32- 63]: 23156744
[ 64- 127]: 14588153
[ 128- 255]: 1666608
[ 256- 511]: 1203683
[ 512- 1023]: 2733487
[ 1024- 2047]: 21283671
Protocol Breakdown
![[protocol breakdown chart]](201202011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 64632346 (100.00%) 36066877940 (100.00%) 558.03
ip 64186728 ( 99.31%) 35842322779 ( 99.38%) 558.41
tcp 37140641 ( 57.46%) 30768878633 ( 85.31%) 828.44
http(s) 16185393 ( 25.04%) 21692002848 ( 60.14%) 1340.22
http(c) 10790663 ( 16.70%) 2523678232 ( 7.00%) 233.88
squid 307445 ( 0.48%) 258029179 ( 0.72%) 839.27
smtp 207086 ( 0.32%) 116831357 ( 0.32%) 564.17
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 7518 ( 0.01%) 617662 ( 0.00%) 82.16
pop3 4532 ( 0.01%) 1988461 ( 0.01%) 438.76
imap 3021 ( 0.00%) 540024 ( 0.00%) 178.76
telnet 13797 ( 0.02%) 1045790 ( 0.00%) 75.80
ssh 116622 ( 0.18%) 22856477 ( 0.06%) 195.99
dns 18008 ( 0.03%) 1780668 ( 0.00%) 98.88
bgp 645 ( 0.00%) 108500 ( 0.00%) 168.22
napster 73 ( 0.00%) 4548 ( 0.00%) 62.30
realaud 22 ( 0.00%) 1430 ( 0.00%) 65.00
rtsp 13761 ( 0.02%) 13784714 ( 0.04%) 1001.72
icecast 28787 ( 0.04%) 33502652 ( 0.09%) 1163.81
hotline 51 ( 0.00%) 25186 ( 0.00%) 493.84
other 9443216 ( 14.61%) 6102080843 ( 16.92%) 646.19
udp 5737316 ( 8.88%) 2902664714 ( 8.05%) 505.93
dns 548276 ( 0.85%) 132521158 ( 0.37%) 241.71
rip 6 ( 0.00%) 372 ( 0.00%) 62.00
realaud 39 ( 0.00%) 6601 ( 0.00%) 169.26
halflif 23 ( 0.00%) 3148 ( 0.00%) 136.87
starcra 46 ( 0.00%) 5595 ( 0.00%) 121.63
everque 320 ( 0.00%) 63114 ( 0.00%) 197.23
unreal 18 ( 0.00%) 1689 ( 0.00%) 93.83
quake 30 ( 0.00%) 7914 ( 0.00%) 263.80
cuseeme 18 ( 0.00%) 1691 ( 0.00%) 93.94
other 5187472 ( 8.03%) 2769835023 ( 7.68%) 533.95
icmp 20339377 ( 31.47%) 1322787030 ( 3.67%) 65.04
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2088 ( 0.00%) 641712 ( 0.00%) 307.33
ip6 960645 ( 1.49%) 846241909 ( 2.35%) 880.91
other 6476 ( 0.01%) 1089511 ( 0.00%) 168.24
frag 3620 ( 0.01%) 3302905 ( 0.01%) 912.40
ip6 445618 ( 0.69%) 224555161 ( 0.62%) 503.92
tcp6 242201 ( 0.37%) 107507832 ( 0.30%) 443.88
http(s) 44491 ( 0.07%) 57509759 ( 0.16%) 1292.62
http(c) 107975 ( 0.17%) 9519111 ( 0.03%) 88.16
smtp 501 ( 0.00%) 122521 ( 0.00%) 244.55
dns 498 ( 0.00%) 103543 ( 0.00%) 207.92
bgp 94 ( 0.00%) 15028 ( 0.00%) 159.87
other 88642 ( 0.14%) 40237870 ( 0.11%) 453.94
udp6 173065 ( 0.27%) 109211773 ( 0.30%) 631.04
dns 60127 ( 0.09%) 16118906 ( 0.04%) 268.08
starcra 1 ( 0.00%) 111 ( 0.00%) 111.00
everque 3 ( 0.00%) 328 ( 0.00%) 109.33
quake 2 ( 0.00%) 220 ( 0.00%) 110.00
other 112932 ( 0.17%) 93092208 ( 0.26%) 824.32
icmp6 24587 ( 0.04%) 3696394 ( 0.01%) 150.34
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 5650 ( 0.01%) 4123534 ( 0.01%) 729.83
tcpdump file: 201202011400.dump.gz (1422.79 MB)