Traffic Trace Info
DumpFile: 201202131400.dump
FileSize: 3959.72MB
Id: 201202131400
StartTime: Mon Feb 13 14:00:01 2012
EndTime: Mon Feb 13 14:15:00 2012
TotalTime: 899.50 seconds
TotalCapSize: -1026.85MB CapLen: 96 bytes
# of packets: 58363761 (29496.31MB)
AvgRate: 275.04Mbps stddev:54.16M
IP flow (unique src/dst pair) Information
# of flows: 11404862 (avg. 5.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 3.3% 2.5% 1.5% 0.9% 0.8% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 8822214
Top 10 bandwidth usage (bytes/total in %):
19.5% 5.9% 5.6% 4.4% 4.3% 3.7% 3.6% 3.5% 3.2% 3.0%
# of IPv6 addresses: 4804
Top 10 bandwidth usage (bytes/total in %):
77.5% 77.5% 9.7% 9.7% 5.5% 5.2% 2.3% 1.3% 1.2% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201202131400.pktlen.png)
detailed numbers
[ 32- 63]: 23175860
[ 64- 127]: 13155522
[ 128- 255]: 1655989
[ 256- 511]: 879624
[ 512- 1023]: 1139189
[ 1024- 2047]: 18357577
Protocol Breakdown
![[protocol breakdown chart]](201202131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 58363761 (100.00%) 30929127805 (100.00%) 529.94
ip 57257576 ( 98.10%) 29627998469 ( 95.79%) 517.45
tcp 36311656 ( 62.22%) 26489002787 ( 85.64%) 729.49
http(s) 14898473 ( 25.53%) 20298711346 ( 65.63%) 1362.47
http(c) 9882933 ( 16.93%) 1114594714 ( 3.60%) 112.78
squid 48572 ( 0.08%) 29226201 ( 0.09%) 601.71
smtp 117995 ( 0.20%) 53617296 ( 0.17%) 454.40
ftp 31539 ( 0.05%) 3454050 ( 0.01%) 109.52
pop3 6369 ( 0.01%) 2455519 ( 0.01%) 385.54
imap 4388 ( 0.01%) 2192626 ( 0.01%) 499.69
telnet 748 ( 0.00%) 82549 ( 0.00%) 110.36
ssh 2513967 ( 4.31%) 445917974 ( 1.44%) 177.38
dns 21976 ( 0.04%) 3482683 ( 0.01%) 158.48
bgp 628 ( 0.00%) 103739 ( 0.00%) 165.19
napster 118 ( 0.00%) 9736 ( 0.00%) 82.51
realaud 631 ( 0.00%) 40270 ( 0.00%) 63.82
rtsp 13557 ( 0.02%) 11929246 ( 0.04%) 879.93
icecast 73709 ( 0.13%) 62205663 ( 0.20%) 843.94
hotline 53 ( 0.00%) 5193 ( 0.00%) 97.98
other 8696000 ( 14.90%) 4460973982 ( 14.42%) 512.99
udp 3933397 ( 6.74%) 1501594559 ( 4.85%) 381.76
dns 567405 ( 0.97%) 132661416 ( 0.43%) 233.80
rip 1 ( 0.00%) 69 ( 0.00%) 69.00
realaud 111 ( 0.00%) 20876 ( 0.00%) 188.07
halflif 231 ( 0.00%) 18789 ( 0.00%) 81.34
starcra 154 ( 0.00%) 16336 ( 0.00%) 106.08
everque 551 ( 0.00%) 208097 ( 0.00%) 377.67
unreal 20 ( 0.00%) 3515 ( 0.00%) 175.75
quake 30 ( 0.00%) 4268 ( 0.00%) 142.27
cuseeme 3 ( 0.00%) 594 ( 0.00%) 198.00
other 3364852 ( 5.77%) 1368636417 ( 4.43%) 406.74
icmp 16096198 ( 27.58%) 1031745742 ( 3.34%) 64.10
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3760 ( 0.01%) 1110704 ( 0.00%) 295.40
ip6 906102 ( 1.55%) 603481121 ( 1.95%) 666.02
other 6278 ( 0.01%) 1044286 ( 0.00%) 166.34
frag 220 ( 0.00%) 228877 ( 0.00%) 1040.35
ip6 1106185 ( 1.90%) 1301129336 ( 4.21%) 1176.23
tcp6 1029535 ( 1.76%) 1281280250 ( 4.14%) 1244.52
http(s) 69587 ( 0.12%) 95246352 ( 0.31%) 1368.74
http(c) 114498 ( 0.20%) 9732668 ( 0.03%) 85.00
smtp 592 ( 0.00%) 245865 ( 0.00%) 415.31
ftp 120 ( 0.00%) 15927 ( 0.00%) 132.72
dns 355 ( 0.00%) 57364 ( 0.00%) 161.59
bgp 83 ( 0.00%) 12425 ( 0.00%) 149.70
other 844300 ( 1.45%) 1175969649 ( 3.80%) 1392.83
udp6 58595 ( 0.10%) 16541382 ( 0.05%) 282.30
dns 57113 ( 0.10%) 16334268 ( 0.05%) 286.00
realaud 1 ( 0.00%) 90 ( 0.00%) 90.00
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
starcra 1 ( 0.00%) 102 ( 0.00%) 102.00
everque 1 ( 0.00%) 110 ( 0.00%) 110.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 1477 ( 0.00%) 206600 ( 0.00%) 139.88
icmp6 17430 ( 0.03%) 2803186 ( 0.01%) 160.83
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 513 ( 0.00%) 489262 ( 0.00%) 953.73
tcpdump file: 201202131400.dump.gz (1375.90 MB)