Traffic Trace Info
DumpFile: 201202211400.dump
FileSize: 2568.65MB
Id: 201202211400
StartTime: Tue Feb 21 14:00:01 2012
EndTime: Tue Feb 21 14:15:00 2012
TotalTime: 899.37 seconds
TotalCapSize: 2030.93MB CapLen: 96 bytes
# of packets: 35239549 (23523.34MB)
AvgRate: 219.40Mbps stddev:49.28M
IP flow (unique src/dst pair) Information
# of flows: 1013168 (avg. 34.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.8% 2.0% 1.7% 1.5% 1.5% 1.5% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 540603
Top 10 bandwidth usage (bytes/total in %):
18.6% 14.0% 8.5% 5.5% 5.1% 4.0% 3.0% 2.9% 2.2% 2.1%
# of IPv6 addresses: 5646
Top 10 bandwidth usage (bytes/total in %):
83.8% 72.0% 15.3% 5.6% 1.5% 1.4% 1.2% 1.1% 1.0% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201202211400.pktlen.png)
detailed numbers
[ 32- 63]: 6683589
[ 64- 127]: 9964739
[ 128- 255]: 1602955
[ 256- 511]: 950146
[ 512- 1023]: 1043939
[ 1024- 2047]: 14994181
Protocol Breakdown
![[protocol breakdown chart]](201202211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35239549 (100.00%) 24666007750 (100.00%) 699.95
ip 34655365 ( 98.34%) 24069821332 ( 97.58%) 694.55
tcp 25865738 ( 73.40%) 20777775204 ( 84.24%) 803.29
http(s) 12963660 ( 36.79%) 17237394156 ( 69.88%) 1329.67
http(c) 7713773 ( 21.89%) 1466837083 ( 5.95%) 190.16
squid 51168 ( 0.15%) 19859213 ( 0.08%) 388.12
smtp 77435 ( 0.22%) 25326282 ( 0.10%) 327.07
nntp 5 ( 0.00%) 314 ( 0.00%) 62.80
ftp 55647 ( 0.16%) 71070967 ( 0.29%) 1277.18
pop3 8975 ( 0.03%) 5991001 ( 0.02%) 667.52
imap 9874 ( 0.03%) 3073677 ( 0.01%) 311.29
telnet 12805 ( 0.04%) 969412 ( 0.00%) 75.71
ssh 169604 ( 0.48%) 24761531 ( 0.10%) 146.00
dns 21215 ( 0.06%) 3438321 ( 0.01%) 162.07
bgp 615 ( 0.00%) 115173 ( 0.00%) 187.27
napster 27 ( 0.00%) 1674 ( 0.00%) 62.00
realaud 12 ( 0.00%) 748 ( 0.00%) 62.33
rtsp 15200 ( 0.04%) 18385885 ( 0.07%) 1209.60
icecast 1853 ( 0.01%) 793295 ( 0.00%) 428.11
hotline 50 ( 0.00%) 3387 ( 0.00%) 67.74
other 4763820 ( 13.52%) 1899753085 ( 7.70%) 398.79
udp 4774562 ( 13.55%) 1577350969 ( 6.39%) 330.37
dns 487407 ( 1.38%) 123247795 ( 0.50%) 252.86
realaud 11 ( 0.00%) 1284 ( 0.00%) 116.73
halflif 19 ( 0.00%) 1996 ( 0.00%) 105.05
starcra 25 ( 0.00%) 3564 ( 0.00%) 142.56
everque 2873 ( 0.01%) 2517061 ( 0.01%) 876.11
unreal 2 ( 0.00%) 120 ( 0.00%) 60.00
quake 54 ( 0.00%) 12447 ( 0.00%) 230.50
cuseeme 2 ( 0.00%) 182 ( 0.00%) 91.00
other 4284136 ( 12.16%) 1451549322 ( 5.88%) 338.82
icmp 627218 ( 1.78%) 111977569 ( 0.45%) 178.53
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 25400 ( 0.07%) 6199552 ( 0.03%) 244.08
ip6 3355016 ( 9.52%) 1593764403 ( 6.46%) 475.04
other 7247 ( 0.02%) 2734475 ( 0.01%) 377.33
frag 361 ( 0.00%) 398957 ( 0.00%) 1105.14
ip6 584184 ( 1.66%) 596186418 ( 2.42%) 1020.55
tcp6 472273 ( 1.34%) 566198765 ( 2.30%) 1198.88
http(s) 15405 ( 0.04%) 16992412 ( 0.07%) 1103.05
http(c) 58277 ( 0.17%) 4952572 ( 0.02%) 84.98
smtp 246 ( 0.00%) 171640 ( 0.00%) 697.72
ftp 26 ( 0.00%) 2053 ( 0.00%) 78.96
dns 343 ( 0.00%) 61315 ( 0.00%) 178.76
bgp 89 ( 0.00%) 14550 ( 0.00%) 163.48
other 397887 ( 1.13%) 544004223 ( 2.21%) 1367.23
udp6 88028 ( 0.25%) 25946116 ( 0.11%) 294.75
dns 61577 ( 0.17%) 16079408 ( 0.07%) 261.13
starcra 7 ( 0.00%) 702 ( 0.00%) 100.29
everque 1 ( 0.00%) 100 ( 0.00%) 100.00
other 26443 ( 0.08%) 9865906 ( 0.04%) 373.10
icmp6 23044 ( 0.07%) 3359845 ( 0.01%) 145.80
ip6 87 ( 0.00%) 11816 ( 0.00%) 135.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 722 ( 0.00%) 665796 ( 0.00%) 922.16
tcpdump file: 201202211400.dump.gz (887.31 MB)