Traffic Trace Info
DumpFile: 201202271400.dump
FileSize: 2729.34MB
Id: 201202271400
StartTime: Mon Feb 27 14:00:00 2012
EndTime: Mon Feb 27 14:15:00 2012
TotalTime: 900.35 seconds
TotalCapSize: -1950.88MB CapLen: 96 bytes
# of packets: 38287368 (27470.38MB)
AvgRate: 255.96Mbps stddev:62.86M
IP flow (unique src/dst pair) Information
# of flows: 949591 (avg. 40.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.5% 1.7% 1.6% 1.5% 1.5% 1.5% 1.4% 1.4% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 567239
Top 10 bandwidth usage (bytes/total in %):
34.0% 6.5% 6.0% 5.5% 5.2% 4.0% 2.8% 2.6% 2.4% 2.1%
# of IPv6 addresses: 5721
Top 10 bandwidth usage (bytes/total in %):
41.8% 14.6% 9.2% 9.2% 9.2% 8.4% 8.1% 7.5% 5.5% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201202271400.pktlen.png)
detailed numbers
[ 32- 63]: 7387810
[ 64- 127]: 9235390
[ 128- 255]: 1929033
[ 256- 511]: 935898
[ 512- 1023]: 1083979
[ 1024- 2047]: 17715258
Protocol Breakdown
![[protocol breakdown chart]](201202271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38287368 (100.00%) 28804781262 (100.00%) 752.33
ip 37933430 ( 99.08%) 28697103253 ( 99.63%) 756.51
tcp 28425945 ( 74.24%) 25365626368 ( 88.06%) 892.34
http(s) 14619319 ( 38.18%) 19953499319 ( 69.27%) 1364.87
http(c) 7483946 ( 19.55%) 810819496 ( 2.81%) 108.34
squid 82894 ( 0.22%) 61364604 ( 0.21%) 740.28
smtp 55518 ( 0.15%) 16430910 ( 0.06%) 295.96
ftp 330195 ( 0.86%) 289941180 ( 1.01%) 878.09
pop3 5227 ( 0.01%) 1533574 ( 0.01%) 293.39
imap 1720 ( 0.00%) 342049 ( 0.00%) 198.87
telnet 719 ( 0.00%) 81382 ( 0.00%) 113.19
ssh 113431 ( 0.30%) 13290834 ( 0.05%) 117.17
dns 18761 ( 0.05%) 3360938 ( 0.01%) 179.14
bgp 646 ( 0.00%) 137294 ( 0.00%) 212.53
napster 437 ( 0.00%) 27206 ( 0.00%) 62.26
realaud 157 ( 0.00%) 33820 ( 0.00%) 215.41
rtsp 6232 ( 0.02%) 7667228 ( 0.03%) 1230.30
icecast 12407 ( 0.03%) 11811131 ( 0.04%) 951.97
hotline 44 ( 0.00%) 5048 ( 0.00%) 114.73
other 5694292 ( 14.87%) 4195280355 ( 14.56%) 736.75
udp 5526697 ( 14.43%) 1640298653 ( 5.69%) 296.80
dns 546305 ( 1.43%) 132444303 ( 0.46%) 242.44
rip 1 ( 0.00%) 1506 ( 0.00%) 1506.00
realaud 19 ( 0.00%) 2202 ( 0.00%) 115.89
halflif 73 ( 0.00%) 6355 ( 0.00%) 87.05
starcra 65 ( 0.00%) 13680 ( 0.00%) 210.46
everque 4161 ( 0.01%) 3871605 ( 0.01%) 930.45
unreal 4 ( 0.00%) 586 ( 0.00%) 146.50
quake 18 ( 0.00%) 1976 ( 0.00%) 109.78
cuseeme 37 ( 0.00%) 5297 ( 0.00%) 143.16
other 4975524 ( 13.00%) 1503877687 ( 5.22%) 302.26
icmp 686308 ( 1.79%) 95927638 ( 0.33%) 139.77
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 4275 ( 0.01%) 1304594 ( 0.00%) 305.17
ip6 3267330 ( 8.53%) 1579778342 ( 5.48%) 483.51
other 22691 ( 0.06%) 14148498 ( 0.05%) 623.53
frag 2327 ( 0.01%) 2520412 ( 0.01%) 1083.12
ip6 353938 ( 0.92%) 107678009 ( 0.37%) 304.23
tcp6 237895 ( 0.62%) 73467093 ( 0.26%) 308.82
http(s) 28994 ( 0.08%) 31678629 ( 0.11%) 1092.59
http(c) 138297 ( 0.36%) 11978431 ( 0.04%) 86.61
smtp 98 ( 0.00%) 39781 ( 0.00%) 405.93
ftp 25 ( 0.00%) 1979 ( 0.00%) 79.16
dns 2467 ( 0.01%) 2208133 ( 0.01%) 895.07
bgp 90 ( 0.00%) 14578 ( 0.00%) 161.98
other 67924 ( 0.18%) 27545562 ( 0.10%) 405.54
udp6 88180 ( 0.23%) 27452612 ( 0.10%) 311.32
dns 62687 ( 0.16%) 16739592 ( 0.06%) 267.03
halflif 1 ( 0.00%) 111 ( 0.00%) 111.00
everque 1 ( 0.00%) 110 ( 0.00%) 110.00
quake 3 ( 0.00%) 297 ( 0.00%) 99.00
cuseeme 1 ( 0.00%) 106 ( 0.00%) 106.00
other 25487 ( 0.07%) 10712396 ( 0.04%) 420.31
icmp6 24093 ( 0.06%) 3496910 ( 0.01%) 145.14
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3655 ( 0.01%) 3245734 ( 0.01%) 888.03
tcpdump file: 201202271400.dump.gz (925.40 MB)