Traffic Trace Info
DumpFile: 201202251400.dump
FileSize: 3439.60MB
Id: 201202251400
StartTime: Sat Feb 25 14:00:01 2012
EndTime: Sat Feb 25 14:15:01 2012
TotalTime: 899.84 seconds
TotalCapSize: -1409.71MB CapLen: 96 bytes
# of packets: 49368448 (34216.12MB)
AvgRate: 319.03Mbps stddev:51.46M
IP flow (unique src/dst pair) Information
# of flows: 2462630 (avg. 20.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
18.8% 6.0% 4.2% 2.0% 1.3% 1.2% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 1600130
Top 10 bandwidth usage (bytes/total in %):
26.2% 19.4% 16.8% 8.9% 8.2% 6.2% 4.3% 3.1% 3.0% 2.4%
# of IPv6 addresses: 5430
Top 10 bandwidth usage (bytes/total in %):
29.7% 18.2% 16.7% 14.8% 8.3% 8.2% 5.9% 5.0% 4.2% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201202251400.pktlen.png)
detailed numbers
[ 32- 63]: 12326507
[ 64- 127]: 8977669
[ 128- 255]: 1521534
[ 256- 511]: 920424
[ 512- 1023]: 4947766
[ 1024- 2047]: 20674548
Protocol Breakdown
![[protocol breakdown chart]](201202251400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 49368448 (100.00%) 35878198135 (100.00%) 726.74
ip 49236603 ( 99.73%) 35830261067 ( 99.87%) 727.72
tcp 37746150 ( 76.46%) 32410247047 ( 90.33%) 858.64
http(s) 18527735 ( 37.53%) 19149824308 ( 53.37%) 1033.58
http(c) 13791390 ( 27.94%) 9395684810 ( 26.19%) 681.27
squid 46382 ( 0.09%) 26959578 ( 0.08%) 581.25
smtp 48248 ( 0.10%) 7345932 ( 0.02%) 152.25
ftp 19909 ( 0.04%) 1626130 ( 0.00%) 81.68
pop3 2071 ( 0.00%) 621162 ( 0.00%) 299.93
imap 1567 ( 0.00%) 170595 ( 0.00%) 108.87
telnet 4526 ( 0.01%) 360200 ( 0.00%) 79.58
ssh 130732 ( 0.26%) 111235745 ( 0.31%) 850.87
dns 14987 ( 0.03%) 2926670 ( 0.01%) 195.28
bgp 633 ( 0.00%) 107856 ( 0.00%) 170.39
napster 62 ( 0.00%) 4750 ( 0.00%) 76.61
realaud 78 ( 0.00%) 6020 ( 0.00%) 77.18
rtsp 16221 ( 0.03%) 17969994 ( 0.05%) 1107.82
icecast 3554 ( 0.01%) 1470045 ( 0.00%) 413.63
hotline 8 ( 0.00%) 512 ( 0.00%) 64.00
other 5138047 ( 10.41%) 3693932740 ( 10.30%) 718.94
udp 5560826 ( 11.26%) 1993646142 ( 5.56%) 358.52
dns 355983 ( 0.72%) 78757031 ( 0.22%) 221.24
realaud 7 ( 0.00%) 1175 ( 0.00%) 167.86
halflif 22 ( 0.00%) 2455 ( 0.00%) 111.59
starcra 22 ( 0.00%) 4204 ( 0.00%) 191.09
everque 6097 ( 0.01%) 5388591 ( 0.02%) 883.81
unreal 18 ( 0.00%) 3005 ( 0.00%) 166.94
quake 16 ( 0.00%) 2162 ( 0.00%) 135.12
cuseeme 6 ( 0.00%) 626 ( 0.00%) 104.33
other 5198381 ( 10.53%) 1909284909 ( 5.32%) 367.28
icmp 3112418 ( 6.30%) 282713995 ( 0.79%) 90.83
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2434 ( 0.00%) 582892 ( 0.00%) 239.48
ip6 2785267 ( 5.64%) 1114860714 ( 3.11%) 400.27
other 29324 ( 0.06%) 28191117 ( 0.08%) 961.37
frag 3071 ( 0.01%) 3575276 ( 0.01%) 1164.21
ip6 131845 ( 0.27%) 47937068 ( 0.13%) 363.59
tcp6 56989 ( 0.12%) 31200439 ( 0.09%) 547.48
http(s) 11966 ( 0.02%) 11009407 ( 0.03%) 920.06
http(c) 17797 ( 0.04%) 1636721 ( 0.00%) 91.97
smtp 108 ( 0.00%) 23056 ( 0.00%) 213.48
ftp 26 ( 0.00%) 2053 ( 0.00%) 78.96
dns 326 ( 0.00%) 65331 ( 0.00%) 200.40
bgp 96 ( 0.00%) 22190 ( 0.00%) 231.15
other 26670 ( 0.05%) 18441681 ( 0.05%) 691.48
udp6 49241 ( 0.10%) 11871714 ( 0.03%) 241.09
dns 46144 ( 0.09%) 11441514 ( 0.03%) 247.95
halflif 1 ( 0.00%) 102 ( 0.00%) 102.00
starcra 1 ( 0.00%) 103 ( 0.00%) 103.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 3094 ( 0.01%) 429889 ( 0.00%) 138.94
icmp6 23697 ( 0.05%) 3440275 ( 0.01%) 145.18
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1806 ( 0.00%) 1409384 ( 0.00%) 780.39
tcpdump file: 201202251400.dump.gz (1121.93 MB)