Traffic Trace Info
DumpFile: 201202071400.dump
FileSize: 3705.19MB
Id: 201202071400
StartTime: Tue Feb 7 14:00:01 2012
EndTime: Tue Feb 7 14:15:01 2012
TotalTime: 900.10 seconds
TotalCapSize: -1235.01MB CapLen: 96 bytes
# of packets: 55324913 (26077.36MB)
AvgRate: 243.00Mbps stddev:46.21M
IP flow (unique src/dst pair) Information
# of flows: 12126820 (avg. 4.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.3% 1.6% 1.5% 1.1% 1.0% 1.0% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 9023835
Top 10 bandwidth usage (bytes/total in %):
14.4% 13.1% 12.7% 3.6% 3.5% 3.3% 3.1% 3.0% 2.8% 2.7%
# of IPv6 addresses: 5321
Top 10 bandwidth usage (bytes/total in %):
83.5% 83.5% 4.8% 3.6% 1.6% 0.8% 0.6% 0.6% 0.6% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201202071400.pktlen.png)
detailed numbers
[ 32- 63]: 23665834
[ 64- 127]: 11512110
[ 128- 255]: 1916302
[ 256- 511]: 1124296
[ 512- 1023]: 1066318
[ 1024- 2047]: 16040053
Protocol Breakdown
![[protocol breakdown chart]](201202071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 55324913 (100.00%) 27344096588 (100.00%) 494.25
ip 55032796 ( 99.47%) 27069401340 ( 99.00%) 491.88
tcp 32128417 ( 58.07%) 23052581645 ( 84.31%) 717.51
http(s) 10247385 ( 18.52%) 13525420847 ( 49.46%) 1319.89
http(c) 11051790 ( 19.98%) 2842199774 ( 10.39%) 257.17
squid 1033257 ( 1.87%) 1088032028 ( 3.98%) 1053.01
smtp 320648 ( 0.58%) 77060739 ( 0.28%) 240.33
nntp 4 ( 0.00%) 248 ( 0.00%) 62.00
ftp 6945 ( 0.01%) 1376093 ( 0.01%) 198.14
pop3 7687 ( 0.01%) 1861627 ( 0.01%) 242.18
imap 2971 ( 0.01%) 558748 ( 0.00%) 188.07
telnet 535 ( 0.00%) 70281 ( 0.00%) 131.37
ssh 78525 ( 0.14%) 6664307 ( 0.02%) 84.87
dns 18516 ( 0.03%) 1715342 ( 0.01%) 92.64
bgp 673 ( 0.00%) 144508 ( 0.00%) 214.72
napster 1084 ( 0.00%) 68181 ( 0.00%) 62.90
realaud 29 ( 0.00%) 1923 ( 0.00%) 66.31
rtsp 18628 ( 0.03%) 19453798 ( 0.07%) 1044.33
icecast 36611 ( 0.07%) 29478147 ( 0.11%) 805.17
hotline 56 ( 0.00%) 3600 ( 0.00%) 64.29
other 9303059 ( 16.82%) 5458470614 ( 19.96%) 586.74
udp 4810908 ( 8.70%) 2400222120 ( 8.78%) 498.91
dns 533671 ( 0.96%) 127515744 ( 0.47%) 238.94
realaud 8 ( 0.00%) 678 ( 0.00%) 84.75
halflif 40 ( 0.00%) 5446 ( 0.00%) 136.15
starcra 31 ( 0.00%) 3545 ( 0.00%) 114.35
everque 459 ( 0.00%) 113134 ( 0.00%) 246.48
unreal 11 ( 0.00%) 1539 ( 0.00%) 139.91
quake 13 ( 0.00%) 1126 ( 0.00%) 86.62
cuseeme 6 ( 0.00%) 848 ( 0.00%) 141.33
other 4275761 ( 7.73%) 2272467662 ( 8.31%) 531.48
icmp 17223561 ( 31.13%) 1100857961 ( 4.03%) 63.92
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1687 ( 0.00%) 400018 ( 0.00%) 237.12
ip6 861548 ( 1.56%) 514205571 ( 1.88%) 596.84
other 6490 ( 0.01%) 1114755 ( 0.00%) 171.77
frag 2307 ( 0.00%) 1461583 ( 0.01%) 633.54
ip6 292117 ( 0.53%) 274695248 ( 1.00%) 940.36
tcp6 202526 ( 0.37%) 252417648 ( 0.92%) 1246.35
http(s) 167708 ( 0.30%) 247754536 ( 0.91%) 1477.30
http(c) 24165 ( 0.04%) 2325309 ( 0.01%) 96.23
squid 24 ( 0.00%) 3360 ( 0.00%) 140.00
smtp 576 ( 0.00%) 195688 ( 0.00%) 339.74
dns 363 ( 0.00%) 69551 ( 0.00%) 191.60
bgp 90 ( 0.00%) 14169 ( 0.00%) 157.43
other 9600 ( 0.02%) 2055035 ( 0.01%) 214.07
udp6 67163 ( 0.12%) 18130160 ( 0.07%) 269.94
dns 62195 ( 0.11%) 17583388 ( 0.06%) 282.71
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 15 ( 0.00%) 1948 ( 0.00%) 129.87
quake 3 ( 0.00%) 315 ( 0.00%) 105.00
cuseeme 2 ( 0.00%) 215 ( 0.00%) 107.50
other 4947 ( 0.01%) 544187 ( 0.00%) 110.00
icmp6 21513 ( 0.04%) 3348606 ( 0.01%) 155.65
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 802 ( 0.00%) 783442 ( 0.00%) 976.86
tcpdump file: 201202071400.dump.gz (1262.53 MB)