Traffic Trace Info
DumpFile: 201202111400.dump
FileSize: 2850.31MB
Id: 201202111400
StartTime: Sat Feb 11 14:00:00 2012
EndTime: Sat Feb 11 14:15:00 2012
TotalTime: 899.45 seconds
TotalCapSize: -1905.00MB CapLen: 96 bytes
# of packets: 43208670 (21142.07MB)
AvgRate: 197.19Mbps stddev:49.60M
IP flow (unique src/dst pair) Information
# of flows: 11170924 (avg. 3.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.3% 2.8% 2.2% 1.8% 1.3% 1.1% 1.1% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 8726928
Top 10 bandwidth usage (bytes/total in %):
17.8% 16.5% 15.7% 9.9% 4.3% 4.2% 2.9% 2.9% 2.2% 2.1%
# of IPv6 addresses: 4998
Top 10 bandwidth usage (bytes/total in %):
59.7% 57.0% 33.2% 33.2% 1.6% 1.6% 1.4% 1.2% 0.6% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201202111400.pktlen.png)
detailed numbers
[ 32- 63]: 20589731
[ 64- 127]: 6940185
[ 128- 255]: 1006196
[ 256- 511]: 854258
[ 512- 1023]: 598651
[ 1024- 2047]: 13219649
Protocol Breakdown
![[protocol breakdown chart]](201202111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 43208670 (100.00%) 22169067938 (100.00%) 513.07
ip 42572690 ( 98.53%) 21452808704 ( 96.77%) 503.91
tcp 21618951 ( 50.03%) 18340319582 ( 82.73%) 848.34
http(s) 11112337 ( 25.72%) 15065406564 ( 67.96%) 1355.74
http(c) 6451034 ( 14.93%) 1336324448 ( 6.03%) 207.15
squid 47959 ( 0.11%) 40161509 ( 0.18%) 837.41
smtp 53780 ( 0.12%) 14598365 ( 0.07%) 271.45
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 7581 ( 0.02%) 634713 ( 0.00%) 83.72
pop3 2545 ( 0.01%) 721451 ( 0.00%) 283.48
imap 1739 ( 0.00%) 449243 ( 0.00%) 258.33
telnet 10158 ( 0.02%) 713681 ( 0.00%) 70.26
ssh 66335 ( 0.15%) 6662270 ( 0.03%) 100.43
dns 18937 ( 0.04%) 1460697 ( 0.01%) 77.13
bgp 665 ( 0.00%) 124115 ( 0.00%) 186.64
napster 56 ( 0.00%) 9270 ( 0.00%) 165.54
realaud 260 ( 0.00%) 16108 ( 0.00%) 61.95
rtsp 24353 ( 0.06%) 36271130 ( 0.16%) 1489.39
icecast 1295 ( 0.00%) 743331 ( 0.00%) 574.00
hotline 23 ( 0.00%) 1968 ( 0.00%) 85.57
other 3819893 ( 8.84%) 1836020659 ( 8.28%) 480.65
udp 3913185 ( 9.06%) 1605194962 ( 7.24%) 410.20
dns 406454 ( 0.94%) 86164418 ( 0.39%) 211.99
realaud 63 ( 0.00%) 12634 ( 0.00%) 200.54
halflif 185 ( 0.00%) 16986 ( 0.00%) 91.82
starcra 72 ( 0.00%) 7646 ( 0.00%) 106.19
everque 4209 ( 0.01%) 4018167 ( 0.02%) 954.66
unreal 17 ( 0.00%) 3552 ( 0.00%) 208.94
quake 22 ( 0.00%) 5872 ( 0.00%) 266.91
cuseeme 4 ( 0.00%) 371 ( 0.00%) 92.75
other 3501888 ( 8.10%) 1514926342 ( 6.83%) 432.60
icmp 15808941 ( 36.59%) 1017175666 ( 4.59%) 64.34
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 8530 ( 0.02%) 3477724 ( 0.02%) 407.71
ip6 1215702 ( 2.81%) 483846084 ( 2.18%) 398.00
other 7197 ( 0.02%) 2775526 ( 0.01%) 385.65
frag 891 ( 0.00%) 747359 ( 0.00%) 838.79
ip6 635980 ( 1.47%) 716259234 ( 3.23%) 1126.23
tcp6 562417 ( 1.30%) 696917222 ( 3.14%) 1239.15
http(s) 20584 ( 0.05%) 27171878 ( 0.12%) 1320.05
http(c) 86820 ( 0.20%) 7260661 ( 0.03%) 83.63
smtp 117 ( 0.00%) 96286 ( 0.00%) 822.96
ftp 26 ( 0.00%) 2053 ( 0.00%) 78.96
imap 28 ( 0.00%) 2681 ( 0.00%) 95.75
dns 419 ( 0.00%) 73963 ( 0.00%) 176.52
bgp 87 ( 0.00%) 12867 ( 0.00%) 147.90
other 454336 ( 1.05%) 662296833 ( 2.99%) 1457.72
udp6 48798 ( 0.11%) 13727853 ( 0.06%) 281.32
dns 41847 ( 0.10%) 10796436 ( 0.05%) 258.00
halflif 2 ( 0.00%) 206 ( 0.00%) 103.00
cuseeme 1 ( 0.00%) 96 ( 0.00%) 96.00
other 6948 ( 0.02%) 2931115 ( 0.01%) 421.86
icmp6 21512 ( 0.05%) 3246809 ( 0.01%) 150.93
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3139 ( 0.01%) 2351858 ( 0.01%) 749.24
tcpdump file: 201202111400.dump.gz (950.53 MB)