Traffic Trace Info
DumpFile: 201202101400.dump
FileSize: 3358.82MB
Id: 201202101400
StartTime: Fri Feb 10 14:00:01 2012
EndTime: Fri Feb 10 14:15:00 2012
TotalTime: 899.70 seconds
TotalCapSize: -1504.18MB CapLen: 96 bytes
# of packets: 50265666 (23358.41MB)
AvgRate: 217.83Mbps stddev:52.27M
IP flow (unique src/dst pair) Information
# of flows: 11435244 (avg. 4.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.7% 5.0% 4.9% 3.3% 1.7% 1.6% 1.4% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 8828710
Top 10 bandwidth usage (bytes/total in %):
16.4% 12.4% 9.8% 6.9% 5.6% 5.3% 5.1% 5.0% 4.1% 3.7%
# of IPv6 addresses: 5361
Top 10 bandwidth usage (bytes/total in %):
60.6% 60.4% 15.3% 7.9% 6.0% 5.1% 3.3% 2.0% 1.7% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201202101400.pktlen.png)
detailed numbers
[ 32- 63]: 22103295
[ 64- 127]: 10974574
[ 128- 255]: 1188726
[ 256- 511]: 894466
[ 512- 1023]: 753633
[ 1024- 2047]: 14350972
Protocol Breakdown
![[protocol breakdown chart]](201202101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 50265666 (100.00%) 24493072667 (100.00%) 487.27
ip 49975350 ( 99.42%) 24281834949 ( 99.14%) 485.88
tcp 29880674 ( 59.45%) 21395868219 ( 87.35%) 716.04
http(s) 13050419 ( 25.96%) 17733906517 ( 72.40%) 1358.88
http(c) 10088271 ( 20.07%) 1222292507 ( 4.99%) 121.16
squid 59517 ( 0.12%) 32211978 ( 0.13%) 541.22
smtp 111423 ( 0.22%) 47116347 ( 0.19%) 422.86
ftp 26974 ( 0.05%) 2769888 ( 0.01%) 102.69
pop3 4712 ( 0.01%) 2102770 ( 0.01%) 446.26
imap 3100 ( 0.01%) 921066 ( 0.00%) 297.12
telnet 79563 ( 0.16%) 5905015 ( 0.02%) 74.22
ssh 375145 ( 0.75%) 59574992 ( 0.24%) 158.81
dns 19482 ( 0.04%) 3616818 ( 0.01%) 185.65
bgp 687 ( 0.00%) 148306 ( 0.00%) 215.87
napster 633 ( 0.00%) 40497 ( 0.00%) 63.98
realaud 144 ( 0.00%) 9221 ( 0.00%) 64.03
rtsp 56010 ( 0.11%) 17677684 ( 0.07%) 315.62
icecast 7598 ( 0.02%) 5972870 ( 0.02%) 786.11
hotline 16 ( 0.00%) 1337 ( 0.00%) 83.56
other 5996980 ( 11.93%) 2261600406 ( 9.23%) 377.12
udp 3624860 ( 7.21%) 1526512236 ( 6.23%) 421.12
dns 586657 ( 1.17%) 139841615 ( 0.57%) 238.37
realaud 9 ( 0.00%) 1147 ( 0.00%) 127.44
halflif 57 ( 0.00%) 4584 ( 0.00%) 80.42
starcra 54 ( 0.00%) 5081 ( 0.00%) 94.09
everque 3652 ( 0.01%) 2823475 ( 0.01%) 773.13
unreal 22 ( 0.00%) 3287 ( 0.00%) 149.41
quake 33 ( 0.00%) 3230 ( 0.00%) 97.88
cuseeme 18 ( 0.00%) 1330 ( 0.00%) 73.89
other 3034312 ( 6.04%) 1383800945 ( 5.65%) 456.05
icmp 15606418 ( 31.05%) 994660916 ( 4.06%) 63.73
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 26470 ( 0.05%) 9013652 ( 0.04%) 340.52
ip6 831051 ( 1.65%) 354705168 ( 1.45%) 426.82
other 5692 ( 0.01%) 1055488 ( 0.00%) 185.43
frag 450 ( 0.00%) 428302 ( 0.00%) 951.78
ip6 290316 ( 0.58%) 211237718 ( 0.86%) 727.61
tcp6 156828 ( 0.31%) 157599363 ( 0.64%) 1004.92
http(s) 14829 ( 0.03%) 18152767 ( 0.07%) 1224.14
http(c) 36182 ( 0.07%) 3335113 ( 0.01%) 92.18
smtp 121 ( 0.00%) 78811 ( 0.00%) 651.33
pop3 74 ( 0.00%) 6785 ( 0.00%) 91.69
dns 336 ( 0.00%) 69198 ( 0.00%) 205.95
bgp 91 ( 0.00%) 15249 ( 0.00%) 167.57
other 105195 ( 0.21%) 135941440 ( 0.56%) 1292.28
udp6 71005 ( 0.14%) 20444750 ( 0.08%) 287.93
dns 60777 ( 0.12%) 18194525 ( 0.07%) 299.37
halflif 1 ( 0.00%) 108 ( 0.00%) 108.00
everque 2 ( 0.00%) 217 ( 0.00%) 108.50
quake 1 ( 0.00%) 118 ( 0.00%) 118.00
other 10224 ( 0.02%) 2249782 ( 0.01%) 220.05
icmp6 19682 ( 0.04%) 3038209 ( 0.01%) 154.36
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 42686 ( 0.08%) 30139768 ( 0.12%) 706.08
tcpdump file: 201202101400.dump.gz (1149.27 MB)