Traffic Trace Info
DumpFile: 201202021400.dump
FileSize: 3881.69MB
Id: 201202021400
StartTime: Thu Feb 2 14:00:00 2012
EndTime: Thu Feb 2 14:15:00 2012
TotalTime: 899.88 seconds
TotalCapSize: -1094.57MB CapLen: 96 bytes
# of packets: 57688165 (27365.29MB)
AvgRate: 255.08Mbps stddev:47.99M
IP flow (unique src/dst pair) Information
# of flows: 12601937 (avg. 4.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 2.3% 1.8% 1.4% 1.3% 1.3% 0.9% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 9852060
Top 10 bandwidth usage (bytes/total in %):
21.1% 7.6% 6.1% 4.6% 4.3% 4.0% 3.5% 3.4% 2.9% 2.9%
# of IPv6 addresses: 5074
Top 10 bandwidth usage (bytes/total in %):
82.0% 82.0% 7.2% 5.4% 5.4% 3.6% 1.6% 1.1% 0.8% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201202021400.pktlen.png)
detailed numbers
[ 32- 63]: 24558472
[ 64- 127]: 12669073
[ 128- 255]: 1404931
[ 256- 511]: 1073995
[ 512- 1023]: 992486
[ 1024- 2047]: 16989208
Protocol Breakdown
![[protocol breakdown chart]](201202021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 57688165 (100.00%) 28694590005 (100.00%) 497.41
ip 56821156 ( 98.50%) 27803144686 ( 96.89%) 489.31
tcp 33354801 ( 57.82%) 23840240220 ( 83.08%) 714.75
http(s) 13129536 ( 22.76%) 17363538743 ( 60.51%) 1322.48
http(c) 10959671 ( 19.00%) 1493463891 ( 5.20%) 136.27
squid 1439730 ( 2.50%) 1693582828 ( 5.90%) 1176.32
smtp 94766 ( 0.16%) 58734123 ( 0.20%) 619.78
ftp 5305 ( 0.01%) 451541 ( 0.00%) 85.12
pop3 3165 ( 0.01%) 1234095 ( 0.00%) 389.92
imap 14276 ( 0.02%) 18759517 ( 0.07%) 1314.06
telnet 16679 ( 0.03%) 1256993 ( 0.00%) 75.36
ssh 93477 ( 0.16%) 7903722 ( 0.03%) 84.55
dns 19566 ( 0.03%) 1889153 ( 0.01%) 96.55
bgp 640 ( 0.00%) 117365 ( 0.00%) 183.38
napster 2343 ( 0.00%) 146801 ( 0.00%) 62.66
realaud 301 ( 0.00%) 19149 ( 0.00%) 63.62
rtsp 24622 ( 0.04%) 20023628 ( 0.07%) 813.24
icecast 31120 ( 0.05%) 19858703 ( 0.07%) 638.13
hotline 139 ( 0.00%) 16364 ( 0.00%) 117.73
other 7519465 ( 13.03%) 3159243604 ( 11.01%) 420.14
udp 4474000 ( 7.76%) 1963242666 ( 6.84%) 438.81
dns 556916 ( 0.97%) 130048491 ( 0.45%) 233.52
rip 1 ( 0.00%) 90 ( 0.00%) 90.00
realaud 27 ( 0.00%) 2660 ( 0.00%) 98.52
halflif 30 ( 0.00%) 3304 ( 0.00%) 110.13
starcra 32 ( 0.00%) 4111 ( 0.00%) 128.47
everque 18533 ( 0.03%) 17877121 ( 0.06%) 964.61
unreal 107 ( 0.00%) 15765 ( 0.00%) 147.34
quake 16 ( 0.00%) 2009 ( 0.00%) 125.56
cuseeme 4 ( 0.00%) 467 ( 0.00%) 116.75
other 3898252 ( 6.76%) 1815236157 ( 6.33%) 465.65
icmp 17857613 ( 30.96%) 1145641401 ( 3.99%) 64.15
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 3403 ( 0.01%) 1079490 ( 0.00%) 317.22
ip6 1122910 ( 1.95%) 850104728 ( 2.96%) 757.06
other 8245 ( 0.01%) 2817021 ( 0.01%) 341.66
frag 1554 ( 0.00%) 1888690 ( 0.01%) 1215.37
ip6 867007 ( 1.50%) 891445199 ( 3.11%) 1028.19
tcp6 709140 ( 1.23%) 820623351 ( 2.86%) 1157.21
http(s) 495194 ( 0.86%) 739649821 ( 2.58%) 1493.66
http(c) 119626 ( 0.21%) 10545721 ( 0.04%) 88.16
smtp 895 ( 0.00%) 367588 ( 0.00%) 410.71
ssh 66 ( 0.00%) 11532 ( 0.00%) 174.73
dns 302 ( 0.00%) 53435 ( 0.00%) 176.94
bgp 101 ( 0.00%) 23605 ( 0.00%) 233.71
other 92956 ( 0.16%) 69971649 ( 0.24%) 752.74
udp6 65116 ( 0.11%) 18417029 ( 0.06%) 282.83
dns 60663 ( 0.11%) 17163536 ( 0.06%) 282.93
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
halflif 2 ( 0.00%) 234 ( 0.00%) 117.00
everque 3 ( 0.00%) 265 ( 0.00%) 88.33
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 4446 ( 0.01%) 1252780 ( 0.00%) 281.78
icmp6 23275 ( 0.04%) 3505488 ( 0.01%) 150.61
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 69361 ( 0.12%) 48883721 ( 0.17%) 704.77
tcpdump file: 201202021400.dump.gz (1325.69 MB)