Traffic Trace Info
DumpFile: 201202181400.dump
FileSize: 2343.78MB
Id: 201202181400
StartTime: Sat Feb 18 14:00:01 2012
EndTime: Sat Feb 18 14:15:01 2012
TotalTime: 900.01 seconds
TotalCapSize: 1851.32MB CapLen: 96 bytes
# of packets: 32273722 (22747.79MB)
AvgRate: 211.97Mbps stddev:55.13M
IP flow (unique src/dst pair) Information
# of flows: 686107 (avg. 47.04 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.7% 1.9% 1.9% 1.6% 1.6% 1.3% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 447685
Top 10 bandwidth usage (bytes/total in %):
20.3% 14.7% 10.0% 6.8% 5.2% 3.6% 3.0% 2.5% 2.3% 2.1%
# of IPv6 addresses: 5060
Top 10 bandwidth usage (bytes/total in %):
86.0% 78.4% 3.4% 2.2% 1.4% 1.2% 1.1% 0.9% 0.8% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201202181400.pktlen.png)
detailed numbers
[ 32- 63]: 5123621
[ 64- 127]: 9065735
[ 128- 255]: 1663575
[ 256- 511]: 909755
[ 512- 1023]: 796952
[ 1024- 2047]: 14714084
Protocol Breakdown
![[protocol breakdown chart]](201202181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32273722 (100.00%) 23852786526 (100.00%) 739.08
ip 31935936 ( 98.95%) 23598976862 ( 98.94%) 738.95
tcp 23173547 ( 71.80%) 20728411228 ( 86.90%) 894.49
http(s) 11732293 ( 36.35%) 15857747534 ( 66.48%) 1351.63
http(c) 6867547 ( 21.28%) 1356716705 ( 5.69%) 197.55
squid 104962 ( 0.33%) 15170523 ( 0.06%) 144.53
smtp 59742 ( 0.19%) 22756792 ( 0.10%) 380.92
ftp 7793 ( 0.02%) 663916 ( 0.00%) 85.19
pop3 2272 ( 0.01%) 703395 ( 0.00%) 309.59
imap 1539 ( 0.00%) 540224 ( 0.00%) 351.02
telnet 495 ( 0.00%) 66072 ( 0.00%) 133.48
ssh 174081 ( 0.54%) 154216549 ( 0.65%) 885.89
dns 17947 ( 0.06%) 1446244 ( 0.01%) 80.58
bgp 622 ( 0.00%) 101727 ( 0.00%) 163.55
napster 25 ( 0.00%) 3141 ( 0.00%) 125.64
realaud 8 ( 0.00%) 500 ( 0.00%) 62.50
rtsp 3 ( 0.00%) 180 ( 0.00%) 60.00
icecast 18610 ( 0.06%) 12408018 ( 0.05%) 666.74
hotline 11 ( 0.00%) 716 ( 0.00%) 65.09
other 4185334 ( 12.97%) 3305853212 ( 13.86%) 789.87
udp 5070100 ( 15.71%) 1497849174 ( 6.28%) 295.43
dns 517247 ( 1.60%) 100048682 ( 0.42%) 193.43
realaud 15 ( 0.00%) 2315 ( 0.00%) 154.33
halflif 45 ( 0.00%) 4176 ( 0.00%) 92.80
starcra 29 ( 0.00%) 3134 ( 0.00%) 108.07
everque 458 ( 0.00%) 96576 ( 0.00%) 210.86
unreal 6 ( 0.00%) 1377 ( 0.00%) 229.50
quake 13 ( 0.00%) 1322 ( 0.00%) 101.69
other 4552224 ( 14.11%) 1397650945 ( 5.86%) 307.03
icmp 422738 ( 1.31%) 67230847 ( 0.28%) 159.04
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3093 ( 0.01%) 1685966 ( 0.01%) 545.09
ip6 3261032 ( 10.10%) 1302833340 ( 5.46%) 399.52
other 5241 ( 0.02%) 947037 ( 0.00%) 180.70
frag 849 ( 0.00%) 759021 ( 0.00%) 894.02
ip6 337786 ( 1.05%) 253809664 ( 1.06%) 751.39
tcp6 259477 ( 0.80%) 235234821 ( 0.99%) 906.57
http(s) 14856 ( 0.05%) 16724347 ( 0.07%) 1125.76
http(c) 51070 ( 0.16%) 4343974 ( 0.02%) 85.06
smtp 536 ( 0.00%) 214518 ( 0.00%) 400.22
ftp 25 ( 0.00%) 2015 ( 0.00%) 80.60
dns 314 ( 0.00%) 76060 ( 0.00%) 242.23
bgp 94 ( 0.00%) 16957 ( 0.00%) 180.39
other 192582 ( 0.60%) 213856950 ( 0.90%) 1110.47
udp6 55125 ( 0.17%) 14143593 ( 0.06%) 256.57
dns 45678 ( 0.14%) 11777990 ( 0.05%) 257.85
quake 2 ( 0.00%) 225 ( 0.00%) 112.50
other 9445 ( 0.03%) 2365378 ( 0.01%) 250.44
icmp6 22208 ( 0.07%) 3660050 ( 0.02%) 164.81
ip6 87 ( 0.00%) 11816 ( 0.00%) 135.82
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 858 ( 0.00%) 755168 ( 0.00%) 880.15
tcpdump file: 201202181400.dump.gz (786.17 MB)