Traffic Trace Info
DumpFile: 201202051400.dump
FileSize: 3330.88MB
Id: 201202051400
StartTime: Sun Feb 5 14:00:01 2012
EndTime: Sun Feb 5 14:15:00 2012
TotalTime: 899.50 seconds
TotalCapSize: -1535.16MB CapLen: 96 bytes
# of packets: 50464438 (28932.50MB)
AvgRate: 269.79Mbps stddev:53.13M
IP flow (unique src/dst pair) Information
# of flows: 11258592 (avg. 4.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.2% 2.3% 1.8% 1.6% 1.3% 1.2% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 8789160
Top 10 bandwidth usage (bytes/total in %):
35.8% 8.1% 7.5% 7.0% 5.8% 3.4% 3.1% 2.7% 1.9% 1.8%
# of IPv6 addresses: 3862
Top 10 bandwidth usage (bytes/total in %):
92.1% 91.3% 2.6% 2.1% 1.9% 1.8% 0.9% 0.6% 0.6% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201202051400.pktlen.png)
detailed numbers
[ 32- 63]: 21744619
[ 64- 127]: 7324468
[ 128- 255]: 1446553
[ 256- 511]: 659626
[ 512- 1023]: 606555
[ 1024- 2047]: 18682617
Protocol Breakdown
![[protocol breakdown chart]](201202051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 50464438 (100.00%) 30337920826 (100.00%) 601.17
ip 49751545 ( 98.59%) 29587477689 ( 97.53%) 594.70
tcp 28026688 ( 55.54%) 25416381982 ( 83.78%) 906.86
http(s) 14494263 ( 28.72%) 20396223149 ( 67.23%) 1407.19
http(c) 8409967 ( 16.67%) 1680634096 ( 5.54%) 199.84
squid 1379344 ( 2.73%) 1746921613 ( 5.76%) 1266.49
smtp 50296 ( 0.10%) 8833895 ( 0.03%) 175.64
ftp 11121 ( 0.02%) 937123 ( 0.00%) 84.27
pop3 936 ( 0.00%) 123674 ( 0.00%) 132.13
imap 2080 ( 0.00%) 725989 ( 0.00%) 349.03
telnet 9973 ( 0.02%) 830105 ( 0.00%) 83.24
ssh 30432 ( 0.06%) 3760467 ( 0.01%) 123.57
dns 13995 ( 0.03%) 2767723 ( 0.01%) 197.77
bgp 627 ( 0.00%) 108453 ( 0.00%) 172.97
napster 39 ( 0.00%) 3350 ( 0.00%) 85.90
realaud 11 ( 0.00%) 1125 ( 0.00%) 102.27
rtsp 25096 ( 0.05%) 23265693 ( 0.08%) 927.07
icecast 1397 ( 0.00%) 540511 ( 0.00%) 386.91
hotline 291 ( 0.00%) 18942 ( 0.00%) 65.09
other 3596819 ( 7.13%) 1550686014 ( 5.11%) 431.13
udp 4577871 ( 9.07%) 2122636052 ( 7.00%) 463.67
dns 299545 ( 0.59%) 68157495 ( 0.22%) 227.54
realaud 11 ( 0.00%) 1497 ( 0.00%) 136.09
halflif 370 ( 0.00%) 22893 ( 0.00%) 61.87
starcra 39 ( 0.00%) 5282 ( 0.00%) 135.44
everque 12135 ( 0.02%) 12361682 ( 0.04%) 1018.68
unreal 3 ( 0.00%) 286 ( 0.00%) 95.33
quake 11 ( 0.00%) 2571 ( 0.00%) 233.73
cuseeme 6 ( 0.00%) 1662 ( 0.00%) 277.00
other 4265735 ( 8.45%) 2042074547 ( 6.73%) 478.72
icmp 15684747 ( 31.08%) 1007532374 ( 3.32%) 64.24
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 998 ( 0.00%) 379604 ( 0.00%) 380.36
ip6 1454590 ( 2.88%) 1039492056 ( 3.43%) 714.63
other 6466 ( 0.01%) 1036351 ( 0.00%) 160.28
frag 156 ( 0.00%) 163531 ( 0.00%) 1048.28
ip6 712893 ( 1.41%) 750443137 ( 2.47%) 1052.67
tcp6 616441 ( 1.22%) 712291490 ( 2.35%) 1155.49
http(s) 12063 ( 0.02%) 16839222 ( 0.06%) 1395.94
http(c) 9445 ( 0.02%) 929326 ( 0.00%) 98.39
smtp 118 ( 0.00%) 36082 ( 0.00%) 305.78
ftp 9 ( 0.00%) 762 ( 0.00%) 84.67
pop3 8 ( 0.00%) 706 ( 0.00%) 88.25
dns 285 ( 0.00%) 56377 ( 0.00%) 197.81
bgp 96 ( 0.00%) 17351 ( 0.00%) 180.74
other 594417 ( 1.18%) 694411664 ( 2.29%) 1168.22
udp6 76652 ( 0.15%) 30431028 ( 0.10%) 397.00
dns 40827 ( 0.08%) 10938512 ( 0.04%) 267.92
everque 33 ( 0.00%) 5307 ( 0.00%) 160.82
quake 2 ( 0.00%) 205 ( 0.00%) 102.50
other 35790 ( 0.07%) 19487004 ( 0.06%) 544.48
icmp6 11915 ( 0.02%) 2338714 ( 0.01%) 196.28
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 7770 ( 0.02%) 5366277 ( 0.02%) 690.64
tcpdump file: 201202051400.dump.gz (1095.94 MB)