Traffic Trace Info
DumpFile: 201202261400.dump
FileSize: 3379.01MB
Id: 201202261400
StartTime: Sun Feb 26 14:00:01 2012
EndTime: Sun Feb 26 14:15:00 2012
TotalTime: 899.63 seconds
TotalCapSize: -1456.46MB CapLen: 96 bytes
# of packets: 48461615 (35549.87MB)
AvgRate: 331.53Mbps stddev:61.87M
IP flow (unique src/dst pair) Information
# of flows: 1944511 (avg. 24.92 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.5% 8.4% 3.5% 1.3% 1.2% 1.1% 0.9% 0.9% 0.7% 0.6%
IP address Information
# of IPv4 addresses: 1310712
Top 10 bandwidth usage (bytes/total in %):
22.1% 20.4% 17.2% 11.0% 8.4% 6.4% 3.6% 3.6% 2.7% 2.5%
# of IPv6 addresses: 5054
Top 10 bandwidth usage (bytes/total in %):
69.6% 59.2% 6.9% 6.3% 5.4% 5.4% 5.4% 3.9% 3.9% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201202261400.pktlen.png)
detailed numbers
[ 32- 63]: 11784928
[ 64- 127]: 8356920
[ 128- 255]: 1508426
[ 256- 511]: 848011
[ 512- 1023]: 3792829
[ 1024- 2047]: 22170501
Protocol Breakdown
![[protocol breakdown chart]](201202261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 48461615 (100.00%) 37276736604 (100.00%) 769.20
ip 48250178 ( 99.56%) 37114860247 ( 99.57%) 769.22
tcp 38231257 ( 78.89%) 34269030012 ( 91.93%) 896.36
http(s) 18126792 ( 37.40%) 20433493923 ( 54.82%) 1127.25
http(c) 11994706 ( 24.75%) 6894801288 ( 18.50%) 574.82
squid 61494 ( 0.13%) 47360992 ( 0.13%) 770.17
smtp 47095 ( 0.10%) 8424204 ( 0.02%) 178.88
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 15748 ( 0.03%) 1381527 ( 0.00%) 87.73
pop3 1512 ( 0.00%) 613300 ( 0.00%) 405.62
imap 1656 ( 0.00%) 180047 ( 0.00%) 108.72
telnet 4147 ( 0.01%) 326143 ( 0.00%) 78.65
ssh 731167 ( 1.51%) 570650749 ( 1.53%) 780.47
dns 11464 ( 0.02%) 982885 ( 0.00%) 85.74
bgp 618 ( 0.00%) 105871 ( 0.00%) 171.31
napster 85 ( 0.00%) 6527 ( 0.00%) 76.79
realaud 24 ( 0.00%) 1508 ( 0.00%) 62.83
rtsp 25 ( 0.00%) 1548 ( 0.00%) 61.92
icecast 8583 ( 0.02%) 6291402 ( 0.02%) 733.01
hotline 11 ( 0.00%) 1417 ( 0.00%) 128.82
other 7226128 ( 14.91%) 6304406561 ( 16.91%) 872.45
udp 4927358 ( 10.17%) 1572751195 ( 4.22%) 319.19
dns 330162 ( 0.68%) 71521976 ( 0.19%) 216.63
realaud 5 ( 0.00%) 721 ( 0.00%) 144.20
halflif 256 ( 0.00%) 20296 ( 0.00%) 79.28
starcra 7 ( 0.00%) 2400 ( 0.00%) 342.86
everque 4770 ( 0.01%) 4560697 ( 0.01%) 956.12
unreal 8 ( 0.00%) 1114 ( 0.00%) 139.25
quake 7 ( 0.00%) 895 ( 0.00%) 127.86
cuseeme 3 ( 0.00%) 264 ( 0.00%) 88.00
other 4592051 ( 9.48%) 1496581539 ( 4.01%) 325.91
icmp 2162852 ( 4.46%) 185134111 ( 0.50%) 85.60
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 1390 ( 0.00%) 453708 ( 0.00%) 326.41
ip6 2920467 ( 6.03%) 1084851762 ( 2.91%) 371.47
other 6670 ( 0.01%) 2620299 ( 0.01%) 392.85
frag 1409 ( 0.00%) 1764476 ( 0.00%) 1252.29
ip6 211437 ( 0.44%) 161876357 ( 0.43%) 765.60
tcp6 133777 ( 0.28%) 137701202 ( 0.37%) 1029.33
http(s) 7160 ( 0.01%) 9642249 ( 0.03%) 1346.68
http(c) 22849 ( 0.05%) 1978382 ( 0.01%) 86.59
smtp 35 ( 0.00%) 12658 ( 0.00%) 361.66
ftp 24 ( 0.00%) 1905 ( 0.00%) 79.38
dns 441 ( 0.00%) 74350 ( 0.00%) 168.59
bgp 97 ( 0.00%) 15631 ( 0.00%) 161.14
other 103171 ( 0.21%) 125976027 ( 0.34%) 1221.04
udp6 57810 ( 0.12%) 20754253 ( 0.06%) 359.01
dns 41379 ( 0.09%) 10095573 ( 0.03%) 243.98
other 16431 ( 0.03%) 10658680 ( 0.03%) 648.69
icmp6 19286 ( 0.04%) 2910059 ( 0.01%) 150.89
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 450 ( 0.00%) 495333 ( 0.00%) 1100.74
tcpdump file: 201202261400.dump.gz (1106.81 MB)