Traffic Trace Info
DumpFile: 201202091400.dump
FileSize: 3352.02MB
Id: 201202091400
StartTime: Thu Feb 9 14:00:00 2012
EndTime: Thu Feb 9 14:15:01 2012
TotalTime: 900.44 seconds
TotalCapSize: -1508.95MB CapLen: 96 bytes
# of packets: 50132675 (23526.50MB)
AvgRate: 219.16Mbps stddev:41.38M
IP flow (unique src/dst pair) Information
# of flows: 11435141 (avg. 4.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.7% 1.5% 1.4% 1.4% 1.4% 1.3% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 8825149
Top 10 bandwidth usage (bytes/total in %):
24.8% 11.6% 7.3% 4.2% 3.9% 3.1% 2.6% 2.5% 1.9% 1.8%
# of IPv6 addresses: 5404
Top 10 bandwidth usage (bytes/total in %):
88.0% 85.4% 5.6% 5.6% 2.0% 0.9% 0.4% 0.4% 0.3% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201202091400.pktlen.png)
detailed numbers
[ 32- 63]: 23503622
[ 64- 127]: 9242921
[ 128- 255]: 1128842
[ 256- 511]: 818341
[ 512- 1023]: 1030091
[ 1024- 2047]: 14408858
Protocol Breakdown
![[protocol breakdown chart]](201202091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 50132675 (100.00%) 24669322263 (100.00%) 492.08
ip 49695783 ( 99.13%) 24187137493 ( 98.05%) 486.70
tcp 29203504 ( 58.25%) 21182014733 ( 85.86%) 725.32
http(s) 12379588 ( 24.69%) 16334109425 ( 66.21%) 1319.44
http(c) 9196451 ( 18.34%) 1640120865 ( 6.65%) 178.34
squid 113986 ( 0.23%) 63242796 ( 0.26%) 554.83
smtp 133415 ( 0.27%) 95677572 ( 0.39%) 717.14
ftp 9998 ( 0.02%) 813741 ( 0.00%) 81.39
pop3 2816 ( 0.01%) 559552 ( 0.00%) 198.70
imap 2324 ( 0.00%) 396839 ( 0.00%) 170.76
telnet 657 ( 0.00%) 77981 ( 0.00%) 118.69
ssh 84235 ( 0.17%) 104542823 ( 0.42%) 1241.09
dns 16878 ( 0.03%) 1437277 ( 0.01%) 85.16
bgp 645 ( 0.00%) 115040 ( 0.00%) 178.36
napster 2580 ( 0.01%) 157930 ( 0.00%) 61.21
realaud 62 ( 0.00%) 8129 ( 0.00%) 131.11
rtsp 16245 ( 0.03%) 19300076 ( 0.08%) 1188.06
icecast 1178 ( 0.00%) 416972 ( 0.00%) 353.97
hotline 39 ( 0.00%) 2434 ( 0.00%) 62.41
other 7242384 ( 14.45%) 2921033855 ( 11.84%) 403.32
udp 3561596 ( 7.10%) 1481857858 ( 6.01%) 416.07
dns 523656 ( 1.04%) 126436138 ( 0.51%) 241.45
rip 1 ( 0.00%) 68 ( 0.00%) 68.00
realaud 7 ( 0.00%) 482 ( 0.00%) 68.86
halflif 33 ( 0.00%) 3581 ( 0.00%) 108.52
starcra 75 ( 0.00%) 8876 ( 0.00%) 118.35
everque 1800 ( 0.00%) 1338098 ( 0.01%) 743.39
unreal 13 ( 0.00%) 3048 ( 0.00%) 234.46
quake 24 ( 0.00%) 3146 ( 0.00%) 131.08
cuseeme 4 ( 0.00%) 405 ( 0.00%) 101.25
other 3035918 ( 6.06%) 1354009491 ( 5.49%) 446.00
icmp 15944353 ( 31.80%) 1022593670 ( 4.15%) 64.14
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 1817 ( 0.00%) 531622 ( 0.00%) 292.58
ip6 978556 ( 1.95%) 499052885 ( 2.02%) 509.99
other 5773 ( 0.01%) 1067565 ( 0.00%) 184.92
frag 531 ( 0.00%) 531337 ( 0.00%) 1000.63
ip6 436892 ( 0.87%) 482184770 ( 1.95%) 1103.67
tcp6 361961 ( 0.72%) 463519413 ( 1.88%) 1280.58
http(s) 34791 ( 0.07%) 46062021 ( 0.19%) 1323.96
http(c) 33598 ( 0.07%) 3040541 ( 0.01%) 90.50
smtp 636 ( 0.00%) 215917 ( 0.00%) 339.49
ftp 125 ( 0.00%) 12638 ( 0.00%) 101.10
pop3 247 ( 0.00%) 119562 ( 0.00%) 484.06
dns 380 ( 0.00%) 75377 ( 0.00%) 198.36
bgp 99 ( 0.00%) 17260 ( 0.00%) 174.34
other 292085 ( 0.58%) 413976097 ( 1.68%) 1417.31
udp6 58306 ( 0.12%) 15274778 ( 0.06%) 261.98
dns 56567 ( 0.11%) 15013867 ( 0.06%) 265.42
realaud 1 ( 0.00%) 109 ( 0.00%) 109.00
everque 2 ( 0.00%) 203 ( 0.00%) 101.50
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 1735 ( 0.00%) 260491 ( 0.00%) 150.14
icmp6 15744 ( 0.03%) 2625652 ( 0.01%) 166.77
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 767 ( 0.00%) 749435 ( 0.00%) 977.10
tcpdump file: 201202091400.dump.gz (1155.94 MB)