Traffic Trace Info
DumpFile: 201202151400.dump
FileSize: 3043.78MB
Id: 201202151400
StartTime: Wed Feb 15 14:00:01 2012
EndTime: Wed Feb 15 14:15:00 2012
TotalTime: 899.17 seconds
TotalCapSize: -1699.42MB CapLen: 96 bytes
# of packets: 42414299 (28443.35MB)
AvgRate: 265.35Mbps stddev:47.63M
IP flow (unique src/dst pair) Information
# of flows: 872481 (avg. 48.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 1.4% 1.2% 0.9% 0.9% 0.8% 0.8% 0.7% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 479564
Top 10 bandwidth usage (bytes/total in %):
26.7% 11.0% 6.5% 5.0% 4.8% 4.2% 3.2% 3.1% 1.9% 1.5%
# of IPv6 addresses: 4890
Top 10 bandwidth usage (bytes/total in %):
27.8% 25.8% 12.8% 9.5% 7.7% 7.4% 6.2% 4.7% 3.9% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201202151400.pktlen.png)
detailed numbers
[ 32- 63]: 8655090
[ 64- 127]: 11476616
[ 128- 255]: 1724573
[ 256- 511]: 1234772
[ 512- 1023]: 1218288
[ 1024- 2047]: 18104960
Protocol Breakdown
![[protocol breakdown chart]](201202151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42414299 (100.00%) 29825017205 (100.00%) 703.18
ip 42224858 ( 99.55%) 29757737895 ( 99.77%) 704.74
tcp 33710369 ( 79.48%) 26823703171 ( 89.94%) 795.71
http(s) 16377379 ( 38.61%) 22299459970 ( 74.77%) 1361.60
http(c) 9556398 ( 22.53%) 1259576324 ( 4.22%) 131.80
squid 41540 ( 0.10%) 21040666 ( 0.07%) 506.52
smtp 79000 ( 0.19%) 37959290 ( 0.13%) 480.50
ftp 12632 ( 0.03%) 1039739 ( 0.00%) 82.31
pop3 3368 ( 0.01%) 732992 ( 0.00%) 217.63
imap 1979 ( 0.00%) 271609 ( 0.00%) 137.25
telnet 928 ( 0.00%) 96710 ( 0.00%) 104.21
ssh 42890 ( 0.10%) 8358378 ( 0.03%) 194.88
dns 25060 ( 0.06%) 5420258 ( 0.02%) 216.29
bgp 624 ( 0.00%) 121892 ( 0.00%) 195.34
napster 166 ( 0.00%) 17918 ( 0.00%) 107.94
realaud 52 ( 0.00%) 3556 ( 0.00%) 68.38
rtsp 8866 ( 0.02%) 11572251 ( 0.04%) 1305.24
icecast 54539 ( 0.13%) 52969686 ( 0.18%) 971.23
hotline 31 ( 0.00%) 1952 ( 0.00%) 62.97
other 7504910 ( 17.69%) 3125056998 ( 10.48%) 416.40
udp 4877728 ( 11.50%) 1500739754 ( 5.03%) 307.67
dns 522505 ( 1.23%) 126044239 ( 0.42%) 241.23
realaud 8 ( 0.00%) 669 ( 0.00%) 83.62
halflif 303 ( 0.00%) 103753 ( 0.00%) 342.42
starcra 38 ( 0.00%) 3876 ( 0.00%) 102.00
everque 6618 ( 0.02%) 6550813 ( 0.02%) 989.85
unreal 9 ( 0.00%) 1250 ( 0.00%) 138.89
quake 17 ( 0.00%) 1630 ( 0.00%) 95.88
cuseeme 4 ( 0.00%) 327 ( 0.00%) 81.75
other 4348108 ( 10.25%) 1367943617 ( 4.59%) 314.61
icmp 546625 ( 1.29%) 91241552 ( 0.31%) 166.92
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 25365 ( 0.06%) 3906478 ( 0.01%) 154.01
ip6 3058790 ( 7.21%) 1337001475 ( 4.48%) 437.10
other 5796 ( 0.01%) 1126195 ( 0.00%) 194.31
frag 569 ( 0.00%) 633950 ( 0.00%) 1114.15
ip6 189441 ( 0.45%) 67279310 ( 0.23%) 355.15
tcp6 87908 ( 0.21%) 30574785 ( 0.10%) 347.80
http(s) 14151 ( 0.03%) 14861860 ( 0.05%) 1050.23
http(c) 47787 ( 0.11%) 4071999 ( 0.01%) 85.21
smtp 115 ( 0.00%) 45686 ( 0.00%) 397.27
ftp 58 ( 0.00%) 5095 ( 0.00%) 87.84
dns 375 ( 0.00%) 69003 ( 0.00%) 184.01
bgp 88 ( 0.00%) 15068 ( 0.00%) 171.23
other 25334 ( 0.06%) 11506074 ( 0.04%) 454.18
udp6 69358 ( 0.16%) 21570263 ( 0.07%) 311.00
dns 59261 ( 0.14%) 15858471 ( 0.05%) 267.60
halflif 2 ( 0.00%) 228 ( 0.00%) 114.00
starcra 1 ( 0.00%) 109 ( 0.00%) 109.00
everque 4 ( 0.00%) 436 ( 0.00%) 109.00
quake 1 ( 0.00%) 118 ( 0.00%) 118.00
other 10089 ( 0.02%) 5710901 ( 0.02%) 566.05
icmp6 14247 ( 0.03%) 2523133 ( 0.01%) 177.10
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 17813 ( 0.04%) 12595501 ( 0.04%) 707.10
tcpdump file: 201202151400.dump.gz (1074.52 MB)