Traffic Trace Info
DumpFile: 201202221400.dump
FileSize: 2202.91MB
Id: 201202221400
StartTime: Wed Feb 22 14:00:01 2012
EndTime: Wed Feb 22 14:15:00 2012
TotalTime: 899.44 seconds
TotalCapSize: 1737.97MB CapLen: 96 bytes
# of packets: 30469355 (19660.53MB)
AvgRate: 183.31Mbps stddev:52.73M
IP flow (unique src/dst pair) Information
# of flows: 1027851 (avg. 29.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 1.8% 1.4% 1.3% 1.3% 1.2% 1.1% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 570016
Top 10 bandwidth usage (bytes/total in %):
17.9% 11.0% 5.8% 4.7% 4.5% 4.5% 4.5% 3.1% 2.7% 2.3%
# of IPv6 addresses: 5886
Top 10 bandwidth usage (bytes/total in %):
29.5% 20.1% 12.8% 9.1% 9.1% 8.3% 7.0% 5.6% 5.6% 5.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201202221400.pktlen.png)
detailed numbers
[ 32- 63]: 6330208
[ 64- 127]: 8511847
[ 128- 255]: 1417261
[ 256- 511]: 943434
[ 512- 1023]: 824110
[ 1024- 2047]: 12442495
Protocol Breakdown
![[protocol breakdown chart]](201202221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30469355 (100.00%) 20615560624 (100.00%) 676.60
ip 30165297 ( 99.00%) 20460056581 ( 99.25%) 678.26
tcp 22231924 ( 72.96%) 17481474654 ( 84.80%) 786.32
http(s) 10881299 ( 35.71%) 14394089415 ( 69.82%) 1322.83
http(c) 6764264 ( 22.20%) 859859362 ( 4.17%) 127.12
squid 33494 ( 0.11%) 19951916 ( 0.10%) 595.69
smtp 96464 ( 0.32%) 43848628 ( 0.21%) 454.56
ftp 65021 ( 0.21%) 80314763 ( 0.39%) 1235.21
pop3 6374 ( 0.02%) 3422890 ( 0.02%) 537.01
imap 2038 ( 0.01%) 377056 ( 0.00%) 185.01
telnet 1025 ( 0.00%) 100068 ( 0.00%) 97.63
ssh 43619 ( 0.14%) 12482305 ( 0.06%) 286.17
dns 19551 ( 0.06%) 1839305 ( 0.01%) 94.08
bgp 658 ( 0.00%) 114765 ( 0.00%) 174.41
napster 41 ( 0.00%) 2538 ( 0.00%) 61.90
realaud 7 ( 0.00%) 420 ( 0.00%) 60.00
rtsp 8901 ( 0.03%) 11613354 ( 0.06%) 1304.72
icecast 29882 ( 0.10%) 19029926 ( 0.09%) 636.84
hotline 32 ( 0.00%) 3151 ( 0.00%) 98.47
other 4279254 ( 14.04%) 2034424792 ( 9.87%) 475.42
udp 4651944 ( 15.27%) 1606154664 ( 7.79%) 345.27
dns 561509 ( 1.84%) 133675127 ( 0.65%) 238.06
realaud 9 ( 0.00%) 821 ( 0.00%) 91.22
halflif 21 ( 0.00%) 2315 ( 0.00%) 110.24
starcra 44 ( 0.00%) 5860 ( 0.00%) 133.18
everque 8586 ( 0.03%) 8035122 ( 0.04%) 935.84
unreal 7 ( 0.00%) 1291 ( 0.00%) 184.43
quake 11 ( 0.00%) 974 ( 0.00%) 88.55
cuseeme 25 ( 0.00%) 1845 ( 0.00%) 73.80
other 4081633 ( 13.40%) 1464370999 ( 7.10%) 358.77
icmp 415217 ( 1.36%) 62406885 ( 0.30%) 150.30
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 16628 ( 0.05%) 4343920 ( 0.02%) 261.24
ip6 2842941 ( 9.33%) 1304544086 ( 6.33%) 458.87
other 6459 ( 0.02%) 1113212 ( 0.01%) 172.35
frag 1042 ( 0.00%) 1237804 ( 0.01%) 1187.91
ip6 304058 ( 1.00%) 155504043 ( 0.75%) 511.43
tcp6 187000 ( 0.61%) 122130493 ( 0.59%) 653.10
http(s) 31620 ( 0.10%) 42206128 ( 0.20%) 1334.79
http(c) 57280 ( 0.19%) 4868144 ( 0.02%) 84.99
smtp 158 ( 0.00%) 44402 ( 0.00%) 281.03
ftp 26 ( 0.00%) 2053 ( 0.00%) 78.96
dns 415 ( 0.00%) 67568 ( 0.00%) 162.81
bgp 91 ( 0.00%) 18856 ( 0.00%) 207.21
other 97410 ( 0.32%) 74923342 ( 0.36%) 769.15
udp6 92476 ( 0.30%) 27404694 ( 0.13%) 296.34
dns 63319 ( 0.21%) 17416176 ( 0.08%) 275.05
realaud 1 ( 0.00%) 109 ( 0.00%) 109.00
everque 2 ( 0.00%) 202 ( 0.00%) 101.00
quake 1 ( 0.00%) 102 ( 0.00%) 102.00
other 29153 ( 0.10%) 9988105 ( 0.05%) 342.61
icmp6 20729 ( 0.07%) 3103052 ( 0.02%) 149.70
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3740 ( 0.01%) 2850380 ( 0.01%) 762.13
tcpdump file: 201202221400.dump.gz (783.19 MB)