Traffic Trace Info
DumpFile: 201202201400.dump
FileSize: 2775.48MB
Id: 201202201400
StartTime: Mon Feb 20 14:00:01 2012
EndTime: Mon Feb 20 14:15:01 2012
TotalTime: 900.22 seconds
TotalCapSize: -1913.54MB CapLen: 96 bytes
# of packets: 38863481 (27041.74MB)
AvgRate: 251.95Mbps stddev:58.95M
IP flow (unique src/dst pair) Information
# of flows: 1078775 (avg. 36.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 2.1% 1.4% 1.3% 1.1% 1.0% 1.0% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 537311
Top 10 bandwidth usage (bytes/total in %):
27.5% 7.4% 6.2% 4.9% 4.2% 4.1% 3.6% 3.2% 3.0% 2.9%
# of IPv6 addresses: 5104
Top 10 bandwidth usage (bytes/total in %):
44.1% 17.2% 14.5% 9.7% 9.7% 7.5% 6.3% 5.7% 5.7% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201202201400.pktlen.png)
detailed numbers
[ 32- 63]: 7022365
[ 64- 127]: 11192355
[ 128- 255]: 1431579
[ 256- 511]: 893115
[ 512- 1023]: 814616
[ 1024- 2047]: 17509451
Protocol Breakdown
![[protocol breakdown chart]](201202201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38863481 (100.00%) 28355316787 (100.00%) 729.61
ip 38421561 ( 98.86%) 28239171863 ( 99.59%) 734.98
tcp 28422770 ( 73.13%) 23970617855 ( 84.54%) 843.36
http(s) 15048691 ( 38.72%) 20700199186 ( 73.00%) 1375.55
http(c) 9056836 ( 23.30%) 1018777030 ( 3.59%) 112.49
squid 51147 ( 0.13%) 16775313 ( 0.06%) 327.98
smtp 84663 ( 0.22%) 32693648 ( 0.12%) 386.16
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 9350 ( 0.02%) 769875 ( 0.00%) 82.34
pop3 26566 ( 0.07%) 2812101 ( 0.01%) 105.85
imap 6143 ( 0.02%) 2145027 ( 0.01%) 349.18
telnet 114030 ( 0.29%) 8230032 ( 0.03%) 72.17
ssh 642979 ( 1.65%) 58781780 ( 0.21%) 91.42
dns 20325 ( 0.05%) 1753216 ( 0.01%) 86.26
bgp 637 ( 0.00%) 109845 ( 0.00%) 172.44
napster 230 ( 0.00%) 24729 ( 0.00%) 107.52
realaud 41 ( 0.00%) 6221 ( 0.00%) 151.73
rtsp 1604 ( 0.00%) 108142 ( 0.00%) 67.42
icecast 30982 ( 0.08%) 19687737 ( 0.07%) 635.46
hotline 16 ( 0.00%) 2147 ( 0.00%) 134.19
other 3328528 ( 8.56%) 2107741706 ( 7.43%) 633.24
udp 6513071 ( 16.76%) 2632807381 ( 9.29%) 404.23
dns 567448 ( 1.46%) 135869060 ( 0.48%) 239.44
realaud 5 ( 0.00%) 753 ( 0.00%) 150.60
halflif 26 ( 0.00%) 2870 ( 0.00%) 110.38
starcra 44 ( 0.00%) 5683 ( 0.00%) 129.16
everque 546 ( 0.00%) 219056 ( 0.00%) 401.20
unreal 7 ( 0.00%) 887 ( 0.00%) 126.71
quake 111 ( 0.00%) 11915 ( 0.00%) 107.34
cuseeme 4 ( 0.00%) 795 ( 0.00%) 198.75
other 5091449 ( 13.10%) 2442482313 ( 8.61%) 479.72
icmp 508126 ( 1.31%) 88581906 ( 0.31%) 174.33
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2524 ( 0.01%) 759896 ( 0.00%) 301.07
ip6 2967335 ( 7.64%) 1545113963 ( 5.45%) 520.71
other 7551 ( 0.02%) 1271702 ( 0.00%) 168.42
frag 1733140 ( 4.46%) 1313536969 ( 4.63%) 757.89
ip6 441920 ( 1.14%) 116144924 ( 0.41%) 262.82
tcp6 351981 ( 0.91%) 92420634 ( 0.33%) 262.57
http(s) 26364 ( 0.07%) 33505240 ( 0.12%) 1270.87
http(c) 79107 ( 0.20%) 6698461 ( 0.02%) 84.68
smtp 190 ( 0.00%) 63851 ( 0.00%) 336.06
ftp 204 ( 0.00%) 20605 ( 0.00%) 101.00
pop3 14 ( 0.00%) 1177 ( 0.00%) 84.07
dns 259 ( 0.00%) 51142 ( 0.00%) 197.46
bgp 84 ( 0.00%) 11987 ( 0.00%) 142.70
other 245759 ( 0.63%) 52068171 ( 0.18%) 211.87
udp6 70374 ( 0.18%) 20036135 ( 0.07%) 284.71
dns 61246 ( 0.16%) 15821495 ( 0.06%) 258.33
quake 3 ( 0.00%) 333 ( 0.00%) 111.00
other 9125 ( 0.02%) 4214307 ( 0.01%) 461.84
icmp6 18568 ( 0.05%) 2900601 ( 0.01%) 156.22
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 883 ( 0.00%) 772062 ( 0.00%) 874.36
tcpdump file: 201202201400.dump.gz (930.41 MB)