Traffic Trace Info
DumpFile: 201202041400.dump
FileSize: 3475.20MB
Id: 201202041400
StartTime: Sat Feb 4 14:00:00 2012
EndTime: Sat Feb 4 14:15:01 2012
TotalTime: 900.77 seconds
TotalCapSize: -1406.72MB CapLen: 96 bytes
# of packets: 51505191 (23542.45MB)
AvgRate: 219.24Mbps stddev:50.67M
IP flow (unique src/dst pair) Information
# of flows: 12203386 (avg. 4.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.5% 1.5% 1.4% 1.2% 1.0% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 9681731
Top 10 bandwidth usage (bytes/total in %):
32.3% 13.6% 4.9% 4.7% 3.2% 2.2% 1.9% 1.8% 1.8% 1.7%
# of IPv6 addresses: 4066
Top 10 bandwidth usage (bytes/total in %):
26.8% 19.8% 19.8% 19.2% 14.9% 7.7% 6.7% 5.0% 4.6% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201202041400.pktlen.png)
detailed numbers
[ 32- 63]: 22262894
[ 64- 127]: 12161357
[ 128- 255]: 1110678
[ 256- 511]: 746485
[ 512- 1023]: 692783
[ 1024- 2047]: 14530994
Protocol Breakdown
![[protocol breakdown chart]](201202041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 51505191 (100.00%) 24686052867 (100.00%) 479.29
ip 51282223 ( 99.57%) 24556015749 ( 99.47%) 478.84
tcp 25987914 ( 50.46%) 21323778485 ( 86.38%) 820.53
http(s) 12292778 ( 23.87%) 16850113602 ( 68.26%) 1370.73
http(c) 8085678 ( 15.70%) 2395313586 ( 9.70%) 296.24
squid 389298 ( 0.76%) 381036029 ( 1.54%) 978.78
smtp 48048 ( 0.09%) 8681952 ( 0.04%) 180.69
ftp 4555 ( 0.01%) 401096 ( 0.00%) 88.06
pop3 1615 ( 0.00%) 233721 ( 0.00%) 144.72
imap 2230 ( 0.00%) 650693 ( 0.00%) 291.79
telnet 745 ( 0.00%) 186765 ( 0.00%) 250.69
ssh 117646 ( 0.23%) 22666104 ( 0.09%) 192.66
dns 18181 ( 0.04%) 3260471 ( 0.01%) 179.33
bgp 647 ( 0.00%) 120504 ( 0.00%) 186.25
napster 222 ( 0.00%) 14921 ( 0.00%) 67.21
realaud 36 ( 0.00%) 3041 ( 0.00%) 84.47
rtsp 9663 ( 0.02%) 7883904 ( 0.03%) 815.89
icecast 957 ( 0.00%) 514608 ( 0.00%) 537.73
hotline 641 ( 0.00%) 40812 ( 0.00%) 63.67
other 5014973 ( 9.74%) 1652655854 ( 6.69%) 329.54
udp 3602718 ( 6.99%) 1343707005 ( 5.44%) 372.97
dns 420702 ( 0.82%) 95334706 ( 0.39%) 226.61
realaud 21 ( 0.00%) 1641 ( 0.00%) 78.14
halflif 34 ( 0.00%) 3406 ( 0.00%) 100.18
starcra 31 ( 0.00%) 3065 ( 0.00%) 98.87
everque 377 ( 0.00%) 52126 ( 0.00%) 138.27
unreal 6 ( 0.00%) 595 ( 0.00%) 99.17
quake 47 ( 0.00%) 3518 ( 0.00%) 74.85
cuseeme 1 ( 0.00%) 98 ( 0.00%) 98.00
other 3181393 ( 6.18%) 1248219957 ( 5.06%) 392.35
icmp 20306131 ( 39.43%) 1317006467 ( 5.34%) 64.86
ipip 186 ( 0.00%) 19380 ( 0.00%) 104.19
ipsec 904 ( 0.00%) 326928 ( 0.00%) 361.65
ip6 1377517 ( 2.67%) 568605324 ( 2.30%) 412.78
other 6853 ( 0.01%) 2572160 ( 0.01%) 375.33
frag 503 ( 0.00%) 556788 ( 0.00%) 1106.93
ip6 222968 ( 0.43%) 130037118 ( 0.53%) 583.21
tcp6 130103 ( 0.25%) 94447132 ( 0.38%) 725.94
http(s) 9993 ( 0.02%) 12439691 ( 0.05%) 1244.84
http(c) 37735 ( 0.07%) 3340056 ( 0.01%) 88.51
smtp 80 ( 0.00%) 32139 ( 0.00%) 401.74
dns 385 ( 0.00%) 78526 ( 0.00%) 203.96
bgp 93 ( 0.00%) 14754 ( 0.00%) 158.65
other 81817 ( 0.16%) 78541966 ( 0.32%) 959.97
udp6 56456 ( 0.11%) 19233609 ( 0.08%) 340.68
dns 45310 ( 0.09%) 12382917 ( 0.05%) 273.29
everque 11 ( 0.00%) 1435 ( 0.00%) 130.45
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 11134 ( 0.02%) 6849153 ( 0.03%) 615.16
icmp6 15703 ( 0.03%) 2635065 ( 0.01%) 167.81
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 20594 ( 0.04%) 13706056 ( 0.06%) 665.54
tcpdump file: 201202041400.dump.gz (1130.00 MB)