Traffic Trace Info
DumpFile: 201202241400.dump
FileSize: 2960.27MB
Id: 201202241400
StartTime: Fri Feb 24 14:00:01 2012
EndTime: Fri Feb 24 14:15:01 2012
TotalTime: 900.05 seconds
TotalCapSize: -1761.63MB CapLen: 96 bytes
# of packets: 41018963 (25341.77MB)
AvgRate: 236.17Mbps stddev:51.56M
IP flow (unique src/dst pair) Information
# of flows: 1020309 (avg. 40.20 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.9% 3.2% 2.3% 1.9% 1.4% 1.2% 1.2% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 597298
Top 10 bandwidth usage (bytes/total in %):
23.1% 9.5% 7.1% 6.3% 4.8% 4.6% 3.7% 3.6% 3.3% 3.2%
# of IPv6 addresses: 6244
Top 10 bandwidth usage (bytes/total in %):
63.3% 47.4% 8.3% 6.9% 6.9% 4.9% 4.3% 3.5% 3.4% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201202241400.pktlen.png)
detailed numbers
[ 32- 63]: 8302750
[ 64- 127]: 13071174
[ 128- 255]: 1637857
[ 256- 511]: 1031972
[ 512- 1023]: 873043
[ 1024- 2047]: 16102167
Protocol Breakdown
![[protocol breakdown chart]](201202241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41018963 (100.00%) 26572768758 (100.00%) 647.82
ip 40743982 ( 99.33%) 26395774217 ( 99.33%) 647.84
tcp 31318696 ( 76.35%) 22854529924 ( 86.01%) 729.74
http(s) 12678309 ( 30.91%) 16645225506 ( 62.64%) 1312.89
http(c) 8025257 ( 19.56%) 1003739909 ( 3.78%) 125.07
squid 106376 ( 0.26%) 90061014 ( 0.34%) 846.63
smtp 79683 ( 0.19%) 33203722 ( 0.12%) 416.70
ftp 12397 ( 0.03%) 984511 ( 0.00%) 79.42
pop3 4039 ( 0.01%) 1075766 ( 0.00%) 266.34
imap 1803 ( 0.00%) 237926 ( 0.00%) 131.96
telnet 670 ( 0.00%) 77689 ( 0.00%) 115.95
ssh 35315 ( 0.09%) 7469110 ( 0.03%) 211.50
dns 19304 ( 0.05%) 1706399 ( 0.01%) 88.40
bgp 645 ( 0.00%) 127443 ( 0.00%) 197.59
napster 67 ( 0.00%) 6286 ( 0.00%) 93.82
realaud 26 ( 0.00%) 1662 ( 0.00%) 63.92
rtsp 35 ( 0.00%) 6186 ( 0.00%) 176.74
icecast 12593 ( 0.03%) 11788249 ( 0.04%) 936.10
hotline 21 ( 0.00%) 1695 ( 0.00%) 80.71
other 10342156 ( 25.21%) 5058816851 ( 19.04%) 489.15
udp 5677859 ( 13.84%) 2147004160 ( 8.08%) 378.14
dns 539432 ( 1.32%) 127262377 ( 0.48%) 235.92
rip 2 ( 0.00%) 140 ( 0.00%) 70.00
realaud 10 ( 0.00%) 904 ( 0.00%) 90.40
halflif 26 ( 0.00%) 2970 ( 0.00%) 114.23
starcra 163 ( 0.00%) 24245 ( 0.00%) 148.74
everque 7786 ( 0.02%) 7741819 ( 0.03%) 994.33
unreal 24 ( 0.00%) 2997 ( 0.00%) 124.88
quake 31 ( 0.00%) 4225 ( 0.00%) 136.29
cuseeme 2 ( 0.00%) 205 ( 0.00%) 102.50
other 5118812 ( 12.48%) 2011241748 ( 7.57%) 392.91
icmp 712310 ( 1.74%) 88201497 ( 0.33%) 123.82
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 1795 ( 0.00%) 599074 ( 0.00%) 333.75
ip6 3027223 ( 7.38%) 1304350374 ( 4.91%) 430.87
other 5915 ( 0.01%) 1070028 ( 0.00%) 180.90
frag 423591 ( 1.03%) 325222138 ( 1.22%) 767.77
ip6 274981 ( 0.67%) 176994541 ( 0.67%) 643.66
tcp6 185110 ( 0.45%) 155215663 ( 0.58%) 838.51
http(s) 24201 ( 0.06%) 32156310 ( 0.12%) 1328.72
http(c) 48929 ( 0.12%) 4259641 ( 0.02%) 87.06
smtp 194 ( 0.00%) 103608 ( 0.00%) 534.06
dns 301 ( 0.00%) 62400 ( 0.00%) 207.31
bgp 88 ( 0.00%) 13882 ( 0.00%) 157.75
other 111397 ( 0.27%) 118619822 ( 0.45%) 1064.84
udp6 69979 ( 0.17%) 18021873 ( 0.07%) 257.53
dns 62612 ( 0.15%) 16117460 ( 0.06%) 257.42
realaud 1 ( 0.00%) 104 ( 0.00%) 104.00
starcra 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 2 ( 0.00%) 247 ( 0.00%) 123.50
quake 2 ( 0.00%) 200 ( 0.00%) 100.00
other 7361 ( 0.02%) 1903756 ( 0.01%) 258.63
icmp6 18788 ( 0.05%) 2909471 ( 0.01%) 154.86
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 990 ( 0.00%) 832042 ( 0.00%) 840.45
tcpdump file: 201202241400.dump.gz (1011.19 MB)