Traffic Trace Info
DumpFile: 201202061400.dump
FileSize: 3417.79MB
Id: 201202061400
StartTime: Mon Feb 6 14:00:00 2012
EndTime: Mon Feb 6 14:15:01 2012
TotalTime: 900.26 seconds
TotalCapSize: -1462.52MB CapLen: 96 bytes
# of packets: 51400037 (24934.00MB)
AvgRate: 232.33Mbps stddev:48.90M
IP flow (unique src/dst pair) Information
# of flows: 11286649 (avg. 4.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 4.5% 1.6% 1.3% 1.0% 1.0% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 8793274
Top 10 bandwidth usage (bytes/total in %):
22.8% 6.1% 5.3% 4.8% 4.7% 4.6% 3.9% 3.7% 3.4% 3.1%
# of IPv6 addresses: 4521
Top 10 bandwidth usage (bytes/total in %):
46.4% 24.8% 19.6% 7.1% 6.6% 6.5% 5.6% 5.0% 4.1% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201202061400.pktlen.png)
detailed numbers
[ 32- 63]: 22395248
[ 64- 127]: 10040151
[ 128- 255]: 1517632
[ 256- 511]: 1087204
[ 512- 1023]: 817184
[ 1024- 2047]: 15542618
Protocol Breakdown
![[protocol breakdown chart]](201202061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 51400037 (100.00%) 26145190912 (100.00%) 508.66
ip 51246560 ( 99.70%) 26063799282 ( 99.69%) 508.60
tcp 29258679 ( 56.92%) 22462549674 ( 85.91%) 767.72
http(s) 12918056 ( 25.13%) 16758116879 ( 64.10%) 1297.26
http(c) 11140054 ( 21.67%) 3864214791 ( 14.78%) 346.88
squid 285861 ( 0.56%) 259633217 ( 0.99%) 908.25
smtp 82104 ( 0.16%) 39150274 ( 0.15%) 476.84
nntp 2 ( 0.00%) 134 ( 0.00%) 67.00
ftp 204935 ( 0.40%) 14571390 ( 0.06%) 71.10
pop3 11605 ( 0.02%) 7295676 ( 0.03%) 628.67
imap 2158 ( 0.00%) 352218 ( 0.00%) 163.22
telnet 9183 ( 0.02%) 682643 ( 0.00%) 74.34
ssh 8114 ( 0.02%) 3049370 ( 0.01%) 375.82
dns 19538 ( 0.04%) 3377646 ( 0.01%) 172.88
bgp 642 ( 0.00%) 113498 ( 0.00%) 176.79
napster 1025 ( 0.00%) 65184 ( 0.00%) 63.59
realaud 87 ( 0.00%) 5947 ( 0.00%) 68.36
rtsp 17631 ( 0.03%) 19353076 ( 0.07%) 1097.67
icecast 50253 ( 0.10%) 32266332 ( 0.12%) 642.08
hotline 38 ( 0.00%) 2374 ( 0.00%) 62.47
other 4507393 ( 8.77%) 1460299025 ( 5.59%) 323.98
udp 4788664 ( 9.32%) 2105939423 ( 8.05%) 439.78
dns 511111 ( 0.99%) 126784066 ( 0.48%) 248.06
realaud 85 ( 0.00%) 16877 ( 0.00%) 198.55
halflif 17 ( 0.00%) 1709 ( 0.00%) 100.53
starcra 20 ( 0.00%) 2014 ( 0.00%) 100.70
everque 6205 ( 0.01%) 5936167 ( 0.02%) 956.67
unreal 19 ( 0.00%) 2210 ( 0.00%) 116.32
quake 12 ( 0.00%) 2476 ( 0.00%) 206.33
cuseeme 5 ( 0.00%) 781 ( 0.00%) 156.20
other 4269850 ( 8.31%) 1973034962 ( 7.55%) 462.09
icmp 16305884 ( 31.72%) 1032590507 ( 3.95%) 63.33
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 19578 ( 0.04%) 3218860 ( 0.01%) 164.41
ip6 866621 ( 1.69%) 456815488 ( 1.75%) 527.12
other 6949 ( 0.01%) 2666060 ( 0.01%) 383.66
frag 4462 ( 0.01%) 3547727 ( 0.01%) 795.10
ip6 153477 ( 0.30%) 81391630 ( 0.31%) 530.32
tcp6 73568 ( 0.14%) 59419108 ( 0.23%) 807.68
http(s) 40464 ( 0.08%) 55370011 ( 0.21%) 1368.38
http(c) 24740 ( 0.05%) 2277031 ( 0.01%) 92.04
smtp 970 ( 0.00%) 303126 ( 0.00%) 312.50
dns 506 ( 0.00%) 78724 ( 0.00%) 155.58
bgp 99 ( 0.00%) 19462 ( 0.00%) 196.59
other 6789 ( 0.01%) 1370754 ( 0.01%) 201.91
udp6 62161 ( 0.12%) 17358370 ( 0.07%) 279.25
dns 59211 ( 0.12%) 17033318 ( 0.07%) 287.67
starcra 1 ( 0.00%) 115 ( 0.00%) 115.00
everque 1 ( 0.00%) 111 ( 0.00%) 111.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
cuseeme 1 ( 0.00%) 106 ( 0.00%) 106.00
other 2946 ( 0.01%) 324613 ( 0.00%) 110.19
icmp6 15089 ( 0.03%) 2629777 ( 0.01%) 174.28
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2545 ( 0.00%) 1968883 ( 0.01%) 773.63
tcpdump file: 201202061400.dump.gz (1167.60 MB)