Traffic Trace Info
DumpFile: 201202031400.dump
FileSize: 3974.87MB
Id: 201202031400
StartTime: Fri Feb 3 14:00:00 2012
EndTime: Fri Feb 3 14:15:00 2012
TotalTime: 899.83 seconds
TotalCapSize: -1028.63MB CapLen: 96 bytes
# of packets: 59473273 (28930.18MB)
AvgRate: 269.69Mbps stddev:64.69M
IP flow (unique src/dst pair) Information
# of flows: 12676138 (avg. 4.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 1.4% 1.1% 1.1% 1.0% 1.0% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 9892820
Top 10 bandwidth usage (bytes/total in %):
23.3% 9.7% 5.3% 4.1% 4.0% 3.7% 3.4% 3.4% 3.0% 2.7%
# of IPv6 addresses: 4811
Top 10 bandwidth usage (bytes/total in %):
50.2% 50.2% 11.2% 9.6% 6.7% 5.2% 5.2% 4.6% 4.3% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201202031400.pktlen.png)
detailed numbers
[ 32- 63]: 24856659
[ 64- 127]: 12301591
[ 128- 255]: 1821623
[ 256- 511]: 953925
[ 512- 1023]: 1589567
[ 1024- 2047]: 17949908
Protocol Breakdown
![[protocol breakdown chart]](201202031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 59473273 (100.00%) 30335496950 (100.00%) 510.07
ip 59136786 ( 99.43%) 30049447152 ( 99.06%) 508.13
tcp 34352287 ( 57.76%) 25386068788 ( 83.68%) 738.99
http(s) 13299318 ( 22.36%) 17429501664 ( 57.46%) 1310.56
http(c) 10636339 ( 17.88%) 2030534817 ( 6.69%) 190.91
squid 744463 ( 1.25%) 797866393 ( 2.63%) 1071.73
smtp 79145 ( 0.13%) 30337219 ( 0.10%) 383.31
ftp 5353 ( 0.01%) 497531 ( 0.00%) 92.94
pop3 3160 ( 0.01%) 824101 ( 0.00%) 260.79
imap 3806 ( 0.01%) 1111635 ( 0.00%) 292.07
telnet 113638 ( 0.19%) 8277267 ( 0.03%) 72.84
ssh 12356 ( 0.02%) 3380831 ( 0.01%) 273.62
dns 20907 ( 0.04%) 3571151 ( 0.01%) 170.81
bgp 651 ( 0.00%) 114558 ( 0.00%) 175.97
napster 517 ( 0.00%) 33867 ( 0.00%) 65.51
realaud 2414 ( 0.00%) 166466 ( 0.00%) 68.96
rtsp 23012 ( 0.04%) 25616501 ( 0.08%) 1113.18
icecast 37171 ( 0.06%) 22921453 ( 0.08%) 616.65
hotline 32 ( 0.00%) 2008 ( 0.00%) 62.75
other 9370001 ( 15.75%) 5031311002 ( 16.59%) 536.96
udp 5136832 ( 8.64%) 2464962781 ( 8.13%) 479.86
dns 484559 ( 0.81%) 117076715 ( 0.39%) 241.61
realaud 16 ( 0.00%) 1892 ( 0.00%) 118.25
halflif 1885 ( 0.00%) 153787 ( 0.00%) 81.58
starcra 34 ( 0.00%) 4622 ( 0.00%) 135.94
everque 290 ( 0.00%) 58496 ( 0.00%) 201.71
unreal 10 ( 0.00%) 2330 ( 0.00%) 233.00
quake 24 ( 0.00%) 3125 ( 0.00%) 130.21
cuseeme 12 ( 0.00%) 2228 ( 0.00%) 185.67
other 4648313 ( 7.82%) 2347308506 ( 7.74%) 504.98
icmp 18479708 ( 31.07%) 1290652562 ( 4.25%) 69.84
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 20899 ( 0.04%) 3442930 ( 0.01%) 164.74
ip6 1138037 ( 1.91%) 901511961 ( 2.97%) 792.16
other 8838 ( 0.01%) 2788860 ( 0.01%) 315.55
frag 8970 ( 0.02%) 6651266 ( 0.02%) 741.50
ip6 336485 ( 0.57%) 286049678 ( 0.94%) 850.11
tcp6 237801 ( 0.40%) 251873691 ( 0.83%) 1059.18
http(s) 43745 ( 0.07%) 61268368 ( 0.20%) 1400.58
http(c) 46347 ( 0.08%) 4108667 ( 0.01%) 88.65
squid 3 ( 0.00%) 234 ( 0.00%) 78.00
smtp 981 ( 0.00%) 474835 ( 0.00%) 484.03
dns 382 ( 0.00%) 75886 ( 0.00%) 198.65
bgp 94 ( 0.00%) 15711 ( 0.00%) 167.14
other 146249 ( 0.25%) 185929990 ( 0.61%) 1271.32
udp6 76666 ( 0.13%) 27510697 ( 0.09%) 358.84
dns 56267 ( 0.09%) 16410957 ( 0.05%) 291.66
realaud 1 ( 0.00%) 117 ( 0.00%) 117.00
halflif 1 ( 0.00%) 110 ( 0.00%) 110.00
starcra 1 ( 0.00%) 110 ( 0.00%) 110.00
everque 12 ( 0.00%) 1878 ( 0.00%) 156.50
unreal 1 ( 0.00%) 108 ( 0.00%) 108.00
other 20383 ( 0.03%) 11097417 ( 0.04%) 544.44
icmp6 16253 ( 0.03%) 2716183 ( 0.01%) 167.12
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 5650 ( 0.01%) 3933479 ( 0.01%) 696.19
tcpdump file: 201202031400.dump.gz (1358.09 MB)