Traffic Trace Info
DumpFile: 201202231400.dump
FileSize: 2447.56MB
Id: 201202231400
StartTime: Thu Feb 23 14:00:00 2012
EndTime: Thu Feb 23 14:15:00 2012
TotalTime: 900.37 seconds
TotalCapSize: 1926.18MB CapLen: 96 bytes
# of packets: 34168375 (23512.01MB)
AvgRate: 219.02Mbps stddev:52.19M
IP flow (unique src/dst pair) Information
# of flows: 963703 (avg. 35.46 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.5% 5.8% 2.0% 1.4% 1.0% 0.9% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 570321
Top 10 bandwidth usage (bytes/total in %):
17.6% 11.5% 8.2% 8.1% 7.8% 5.9% 4.8% 3.8% 3.7% 3.1%
# of IPv6 addresses: 5961
Top 10 bandwidth usage (bytes/total in %):
18.5% 17.4% 16.8% 10.8% 10.8% 10.2% 10.2% 9.9% 7.7% 5.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201202231400.pktlen.png)
detailed numbers
[ 32- 63]: 5907842
[ 64- 127]: 9571254
[ 128- 255]: 1711538
[ 256- 511]: 950992
[ 512- 1023]: 942839
[ 1024- 2047]: 15083910
Protocol Breakdown
![[protocol breakdown chart]](201202231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34168375 (100.00%) 24654127289 (100.00%) 721.55
ip 33890571 ( 99.19%) 24506571126 ( 99.40%) 723.11
tcp 26161181 ( 76.57%) 21798303777 ( 88.42%) 833.23
http(s) 13747490 ( 40.23%) 18782332609 ( 76.18%) 1366.24
http(c) 8010600 ( 23.44%) 1280697866 ( 5.19%) 159.88
squid 150323 ( 0.44%) 46262104 ( 0.19%) 307.75
smtp 81260 ( 0.24%) 37985039 ( 0.15%) 467.45
nntp 6 ( 0.00%) 360 ( 0.00%) 60.00
ftp 217113 ( 0.64%) 15285425 ( 0.06%) 70.40
pop3 8244 ( 0.02%) 3511527 ( 0.01%) 425.95
imap 3978 ( 0.01%) 1890350 ( 0.01%) 475.20
telnet 914 ( 0.00%) 97022 ( 0.00%) 106.15
ssh 767296 ( 2.25%) 172364064 ( 0.70%) 224.64
dns 18610 ( 0.05%) 1672604 ( 0.01%) 89.88
bgp 637 ( 0.00%) 120661 ( 0.00%) 189.42
napster 100 ( 0.00%) 10288 ( 0.00%) 102.88
realaud 102 ( 0.00%) 14087 ( 0.00%) 138.11
rtsp 3 ( 0.00%) 180 ( 0.00%) 60.00
icecast 1138 ( 0.00%) 280643 ( 0.00%) 246.61
hotline 165 ( 0.00%) 11987 ( 0.00%) 72.65
other 3153199 ( 9.23%) 1455766781 ( 5.90%) 461.68
udp 4879003 ( 14.28%) 1612046829 ( 6.54%) 330.40
dns 518838 ( 1.52%) 127127107 ( 0.52%) 245.02
realaud 121 ( 0.00%) 14832 ( 0.00%) 122.58
halflif 404 ( 0.00%) 77983 ( 0.00%) 193.03
starcra 30 ( 0.00%) 3287 ( 0.00%) 109.57
everque 1465 ( 0.00%) 965709 ( 0.00%) 659.19
unreal 9 ( 0.00%) 1270 ( 0.00%) 141.11
quake 15 ( 0.00%) 1764 ( 0.00%) 117.60
cuseeme 3 ( 0.00%) 544 ( 0.00%) 181.33
other 4356911 ( 12.75%) 1483151847 ( 6.02%) 340.41
icmp 430074 ( 1.26%) 78033562 ( 0.32%) 181.44
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 10644 ( 0.03%) 3174728 ( 0.01%) 298.26
ip6 2400341 ( 7.03%) 1011958455 ( 4.10%) 421.59
other 9144 ( 0.03%) 3034615 ( 0.01%) 331.87
frag 3427 ( 0.01%) 2777350 ( 0.01%) 810.43
ip6 277804 ( 0.81%) 147556163 ( 0.60%) 531.15
tcp6 179124 ( 0.52%) 116143321 ( 0.47%) 648.40
http(s) 38444 ( 0.11%) 51418679 ( 0.21%) 1337.50
http(c) 59322 ( 0.17%) 5238602 ( 0.02%) 88.31
smtp 164 ( 0.00%) 74514 ( 0.00%) 454.35
ftp 24 ( 0.00%) 1872 ( 0.00%) 78.00
dns 369 ( 0.00%) 67908 ( 0.00%) 184.03
bgp 91 ( 0.00%) 16064 ( 0.00%) 176.53
other 80710 ( 0.24%) 59325682 ( 0.24%) 735.05
udp6 79689 ( 0.23%) 26829120 ( 0.11%) 336.67
dns 62357 ( 0.18%) 16757719 ( 0.07%) 268.74
rip 3 ( 0.00%) 748 ( 0.00%) 249.33
halflif 2 ( 0.00%) 313 ( 0.00%) 156.50
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 2 ( 0.00%) 219 ( 0.00%) 109.50
other 17324 ( 0.05%) 10070013 ( 0.04%) 581.28
icmp6 16611 ( 0.05%) 2746015 ( 0.01%) 165.31
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2265 ( 0.01%) 1822097 ( 0.01%) 804.46
tcpdump file: 201202231400.dump.gz (849.47 MB)