Traffic Trace Info
DumpFile: 201202121400.dump
FileSize: 3060.01MB
Id: 201202121400
StartTime: Sun Feb 12 14:00:00 2012
EndTime: Sun Feb 12 14:15:00 2012
TotalTime: 900.39 seconds
TotalCapSize: -1738.29MB CapLen: 96 bytes
# of packets: 46024907 (21863.42MB)
AvgRate: 203.65Mbps stddev:58.88M
IP flow (unique src/dst pair) Information
# of flows: 11330450 (avg. 4.06 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.9% 3.1% 1.5% 1.5% 1.2% 1.2% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 8803691
Top 10 bandwidth usage (bytes/total in %):
18.0% 17.5% 15.2% 8.5% 5.7% 4.4% 3.2% 3.2% 3.0% 2.9%
# of IPv6 addresses: 5368
Top 10 bandwidth usage (bytes/total in %):
41.5% 19.6% 11.3% 11.2% 7.5% 6.2% 6.0% 5.3% 3.9% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201202121400.pktlen.png)
detailed numbers
[ 32- 63]: 21244940
[ 64- 127]: 8905636
[ 128- 255]: 1039246
[ 256- 511]: 605075
[ 512- 1023]: 622300
[ 1024- 2047]: 13607710
Protocol Breakdown
![[protocol breakdown chart]](201202121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 46024907 (100.00%) 22925458946 (100.00%) 498.11
ip 45830077 ( 99.58%) 22857465084 ( 99.70%) 498.74
tcp 23982529 ( 52.11%) 19760889832 ( 86.20%) 823.97
http(s) 13093212 ( 28.45%) 16986395776 ( 74.09%) 1297.34
http(c) 7046233 ( 15.31%) 1325574047 ( 5.78%) 188.13
squid 70967 ( 0.15%) 70483069 ( 0.31%) 993.18
smtp 90249 ( 0.20%) 48015848 ( 0.21%) 532.04
ftp 7479 ( 0.02%) 617514 ( 0.00%) 82.57
pop3 14048 ( 0.03%) 1028268 ( 0.00%) 73.20
imap 1943 ( 0.00%) 694223 ( 0.00%) 357.29
telnet 530 ( 0.00%) 68812 ( 0.00%) 129.83
ssh 720288 ( 1.56%) 108918316 ( 0.48%) 151.21
dns 14723 ( 0.03%) 1190506 ( 0.01%) 80.86
bgp 629 ( 0.00%) 109028 ( 0.00%) 173.34
napster 345 ( 0.00%) 21178 ( 0.00%) 61.39
realaud 58 ( 0.00%) 4258 ( 0.00%) 73.41
rtsp 2539 ( 0.01%) 1810255 ( 0.01%) 712.98
icecast 2589 ( 0.01%) 748160 ( 0.00%) 288.98
hotline 44 ( 0.00%) 3190 ( 0.00%) 72.50
other 2916653 ( 6.34%) 1215207384 ( 5.30%) 416.64
udp 3442601 ( 7.48%) 1326660591 ( 5.79%) 385.37
dns 326770 ( 0.71%) 70628140 ( 0.31%) 216.14
realaud 4 ( 0.00%) 392 ( 0.00%) 98.00
halflif 27 ( 0.00%) 3407 ( 0.00%) 126.19
starcra 50 ( 0.00%) 7292 ( 0.00%) 145.84
everque 2497 ( 0.01%) 2137723 ( 0.01%) 856.12
unreal 22 ( 0.00%) 2031 ( 0.00%) 92.32
quake 5 ( 0.00%) 463 ( 0.00%) 92.60
cuseeme 7 ( 0.00%) 1159 ( 0.00%) 165.57
other 3113177 ( 6.76%) 1253859563 ( 5.47%) 402.76
icmp 16840160 ( 36.59%) 1084847189 ( 4.73%) 64.42
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3515 ( 0.01%) 966450 ( 0.00%) 274.95
ip6 1554119 ( 3.38%) 681468031 ( 2.97%) 438.49
other 6968 ( 0.02%) 2613721 ( 0.01%) 375.10
frag 264 ( 0.00%) 279556 ( 0.00%) 1058.92
ip6 194830 ( 0.42%) 67993862 ( 0.30%) 348.99
tcp6 115233 ( 0.25%) 44496870 ( 0.19%) 386.15
http(s) 16086 ( 0.03%) 21320371 ( 0.09%) 1325.40
http(c) 52224 ( 0.11%) 4515889 ( 0.02%) 86.47
smtp 808 ( 0.00%) 279864 ( 0.00%) 346.37
ftp 26 ( 0.00%) 2053 ( 0.00%) 78.96
dns 260 ( 0.00%) 53917 ( 0.00%) 207.37
bgp 89 ( 0.00%) 13905 ( 0.00%) 156.24
other 45740 ( 0.10%) 18310871 ( 0.08%) 400.33
udp6 52508 ( 0.11%) 16051988 ( 0.07%) 305.71
dns 40360 ( 0.09%) 10291561 ( 0.04%) 254.99
realaud 2 ( 0.00%) 207 ( 0.00%) 103.50
halflif 2 ( 0.00%) 207 ( 0.00%) 103.50
everque 4 ( 0.00%) 348 ( 0.00%) 87.00
unreal 2 ( 0.00%) 213 ( 0.00%) 106.50
quake 3 ( 0.00%) 316 ( 0.00%) 105.33
cuseeme 1 ( 0.00%) 108 ( 0.00%) 108.00
other 12134 ( 0.03%) 5759028 ( 0.03%) 474.62
icmp6 20797 ( 0.05%) 3014719 ( 0.01%) 144.96
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 6177 ( 0.01%) 4414657 ( 0.02%) 714.69
tcpdump file: 201202121400.dump.gz (1004.56 MB)