Traffic Trace Info
DumpFile: 201202171400.dump
FileSize: 2809.28MB
Id: 201202171400
StartTime: Fri Feb 17 14:00:00 2012
EndTime: Fri Feb 17 14:15:00 2012
TotalTime: 900.14 seconds
TotalCapSize: -1881.74MB CapLen: 96 bytes
# of packets: 38994707 (27216.26MB)
AvgRate: 253.63Mbps stddev:63.59M
IP flow (unique src/dst pair) Information
# of flows: 1100882 (avg. 35.42 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 1.9% 1.5% 1.5% 1.2% 1.1% 1.0% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 704786
Top 10 bandwidth usage (bytes/total in %):
27.5% 7.9% 7.8% 4.9% 4.4% 3.4% 3.3% 2.6% 2.5% 2.5%
# of IPv6 addresses: 4700
Top 10 bandwidth usage (bytes/total in %):
89.2% 84.4% 2.5% 2.3% 2.2% 1.9% 1.7% 1.0% 0.8% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201202171400.pktlen.png)
detailed numbers
[ 32- 63]: 8089064
[ 64- 127]: 9316511
[ 128- 255]: 1704530
[ 256- 511]: 1349133
[ 512- 1023]: 1011160
[ 1024- 2047]: 17524309
Protocol Breakdown
![[protocol breakdown chart]](201202171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38994707 (100.00%) 28538312568 (100.00%) 731.85
ip 38469685 ( 98.65%) 28033978249 ( 98.23%) 728.73
tcp 29537965 ( 75.75%) 24968971194 ( 87.49%) 845.32
http(s) 14190935 ( 36.39%) 19185386904 ( 67.23%) 1351.95
http(c) 7816546 ( 20.05%) 893007037 ( 3.13%) 114.25
squid 26810 ( 0.07%) 12690320 ( 0.04%) 473.34
smtp 83906 ( 0.22%) 35975973 ( 0.13%) 428.77
ftp 6680 ( 0.02%) 515747 ( 0.00%) 77.21
pop3 4571 ( 0.01%) 1576252 ( 0.01%) 344.84
imap 3613 ( 0.01%) 414307 ( 0.00%) 114.67
telnet 4958 ( 0.01%) 379751 ( 0.00%) 76.59
ssh 78050 ( 0.20%) 32320567 ( 0.11%) 414.10
dns 20009 ( 0.05%) 1706634 ( 0.01%) 85.29
bgp 679 ( 0.00%) 157111 ( 0.00%) 231.39
napster 284 ( 0.00%) 19090 ( 0.00%) 67.22
realaud 126 ( 0.00%) 8337 ( 0.00%) 66.17
rtsp 13711 ( 0.04%) 9425481 ( 0.03%) 687.44
icecast 5739 ( 0.01%) 449800 ( 0.00%) 78.38
hotline 4 ( 0.00%) 252 ( 0.00%) 63.00
other 7281344 ( 18.67%) 4794937631 ( 16.80%) 658.52
udp 4770707 ( 12.23%) 1494765921 ( 5.24%) 313.32
dns 476378 ( 1.22%) 121378116 ( 0.43%) 254.79
realaud 101 ( 0.00%) 18151 ( 0.00%) 179.71
halflif 19 ( 0.00%) 2253 ( 0.00%) 118.58
starcra 47 ( 0.00%) 5381 ( 0.00%) 114.49
everque 376 ( 0.00%) 69715 ( 0.00%) 185.41
unreal 4 ( 0.00%) 662 ( 0.00%) 165.50
quake 45 ( 0.00%) 4336 ( 0.00%) 96.36
cuseeme 59 ( 0.00%) 6443 ( 0.00%) 109.20
other 4293602 ( 11.01%) 1373243846 ( 4.81%) 319.83
icmp 780921 ( 2.00%) 107773752 ( 0.38%) 138.01
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 26162 ( 0.07%) 9639692 ( 0.03%) 368.46
ip6 3347644 ( 8.58%) 1451733062 ( 5.09%) 433.66
other 6101 ( 0.02%) 1075358 ( 0.00%) 176.26
frag 387 ( 0.00%) 417733 ( 0.00%) 1079.41
ip6 525022 ( 1.35%) 504334319 ( 1.77%) 960.60
tcp6 439946 ( 1.13%) 484316636 ( 1.70%) 1100.85
http(s) 15991 ( 0.04%) 20842794 ( 0.07%) 1303.41
http(c) 37046 ( 0.10%) 3356301 ( 0.01%) 90.60
smtp 824 ( 0.00%) 296169 ( 0.00%) 359.43
ftp 68 ( 0.00%) 7939 ( 0.00%) 116.75
pop3 13 ( 0.00%) 1190 ( 0.00%) 91.54
dns 407 ( 0.00%) 76606 ( 0.00%) 188.22
bgp 91 ( 0.00%) 17595 ( 0.00%) 193.35
other 385506 ( 0.99%) 459718042 ( 1.61%) 1192.51
udp6 58117 ( 0.15%) 15564306 ( 0.05%) 267.81
dns 56541 ( 0.14%) 15388442 ( 0.05%) 272.16
everque 1 ( 0.00%) 116 ( 0.00%) 116.00
other 1575 ( 0.00%) 175748 ( 0.00%) 111.59
icmp6 26273 ( 0.07%) 3899403 ( 0.01%) 148.42
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 571 ( 0.00%) 538364 ( 0.00%) 942.84
tcpdump file: 201202171400.dump.gz (961.10 MB)