Traffic Trace Info
DumpFile: 201202141400.dump
FileSize: 3499.65MB
Id: 201202141400
StartTime: Tue Feb 14 14:00:01 2012
EndTime: Tue Feb 14 14:15:00 2012
TotalTime: 899.65 seconds
TotalCapSize: -1393.82MB CapLen: 96 bytes
# of packets: 52262938 (25566.07MB)
AvgRate: 238.42Mbps stddev:48.51M
IP flow (unique src/dst pair) Information
# of flows: 11273647 (avg. 4.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 4.2% 1.0% 0.9% 0.9% 0.9% 0.9% 0.6% 0.6% 0.6%
IP address Information
# of IPv4 addresses: 8790647
Top 10 bandwidth usage (bytes/total in %):
24.9% 12.8% 5.4% 4.2% 3.7% 3.6% 3.5% 3.0% 2.3% 2.3%
# of IPv6 addresses: 4853
Top 10 bandwidth usage (bytes/total in %):
25.8% 25.1% 16.6% 16.6% 13.3% 10.0% 9.3% 6.9% 6.0% 5.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201202141400.pktlen.png)
detailed numbers
[ 32- 63]: 21978523
[ 64- 127]: 11273228
[ 128- 255]: 1378855
[ 256- 511]: 957976
[ 512- 1023]: 822917
[ 1024- 2047]: 15851439
Protocol Breakdown
![[protocol breakdown chart]](201202141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 52262938 (100.00%) 26807972644 (100.00%) 512.94
ip 51997897 ( 99.49%) 26682833726 ( 99.53%) 513.15
tcp 31138438 ( 59.58%) 23532522184 ( 87.78%) 755.74
http(s) 13021564 ( 24.92%) 17683533480 ( 65.96%) 1358.02
http(c) 10377322 ( 19.86%) 1292934749 ( 4.82%) 124.59
squid 34738 ( 0.07%) 12410019 ( 0.05%) 357.25
smtp 94646 ( 0.18%) 56745396 ( 0.21%) 599.55
ftp 7330 ( 0.01%) 1407146 ( 0.01%) 191.97
pop3 11026 ( 0.02%) 5067906 ( 0.02%) 459.63
imap 5059 ( 0.01%) 2328017 ( 0.01%) 460.17
telnet 594 ( 0.00%) 73846 ( 0.00%) 124.32
ssh 196899 ( 0.38%) 25007808 ( 0.09%) 127.01
dns 21371 ( 0.04%) 1780755 ( 0.01%) 83.33
bgp 621 ( 0.00%) 118578 ( 0.00%) 190.95
napster 446 ( 0.00%) 35438 ( 0.00%) 79.46
realaud 16 ( 0.00%) 976 ( 0.00%) 61.00
rtsp 39484 ( 0.08%) 25597443 ( 0.10%) 648.30
icecast 74415 ( 0.14%) 62335257 ( 0.23%) 837.67
hotline 29 ( 0.00%) 9226 ( 0.00%) 318.14
other 7252878 ( 13.88%) 4363136144 ( 16.28%) 601.57
udp 4008374 ( 7.67%) 1629659506 ( 6.08%) 406.56
dns 503220 ( 0.96%) 124053288 ( 0.46%) 246.52
realaud 28 ( 0.00%) 4274 ( 0.00%) 152.64
halflif 24 ( 0.00%) 3669 ( 0.00%) 152.88
starcra 140 ( 0.00%) 12743 ( 0.00%) 91.02
everque 6933 ( 0.01%) 4626711 ( 0.02%) 667.35
unreal 673 ( 0.00%) 344064 ( 0.00%) 511.24
quake 6 ( 0.00%) 855 ( 0.00%) 142.50
cuseeme 7 ( 0.00%) 716 ( 0.00%) 102.29
other 3497278 ( 6.69%) 1500561433 ( 5.60%) 429.07
icmp 16104463 ( 30.81%) 1033841288 ( 3.86%) 64.20
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 24204 ( 0.05%) 6580264 ( 0.02%) 271.87
ip6 713438 ( 1.37%) 477330085 ( 1.78%) 669.06
other 8795 ( 0.02%) 2881129 ( 0.01%) 327.59
frag 444 ( 0.00%) 469452 ( 0.00%) 1057.32
ip6 265041 ( 0.51%) 125138918 ( 0.47%) 472.15
tcp6 128264 ( 0.25%) 52943411 ( 0.20%) 412.77
http(s) 19168 ( 0.04%) 22863083 ( 0.09%) 1192.77
http(c) 68017 ( 0.13%) 5678364 ( 0.02%) 83.48
squid 20 ( 0.00%) 3204 ( 0.00%) 160.20
smtp 110 ( 0.00%) 52830 ( 0.00%) 480.27
ftp 25 ( 0.00%) 1979 ( 0.00%) 79.16
dns 330 ( 0.00%) 59190 ( 0.00%) 179.36
bgp 91 ( 0.00%) 13075 ( 0.00%) 143.68
other 40503 ( 0.08%) 24271686 ( 0.09%) 599.26
udp6 115676 ( 0.22%) 66134246 ( 0.25%) 571.72
dns 58403 ( 0.11%) 15957930 ( 0.06%) 273.24
realaud 1 ( 0.00%) 96 ( 0.00%) 96.00
halflif 1 ( 0.00%) 112 ( 0.00%) 112.00
everque 1 ( 0.00%) 119 ( 0.00%) 119.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 57269 ( 0.11%) 50175882 ( 0.19%) 876.14
icmp6 16699 ( 0.03%) 2830842 ( 0.01%) 169.52
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4288 ( 0.01%) 3214927 ( 0.01%) 749.75
tcpdump file: 201202141400.dump.gz (1191.74 MB)