Traffic Trace Info
DumpFile: 201202281400.dump
FileSize: 3057.66MB
Id: 201202281400
StartTime: Tue Feb 28 14:00:01 2012
EndTime: Tue Feb 28 14:15:01 2012
TotalTime: 900.03 seconds
TotalCapSize: -1698.01MB CapLen: 96 bytes
# of packets: 43231565 (32400.79MB)
AvgRate: 301.99Mbps stddev:91.68M
IP flow (unique src/dst pair) Information
# of flows: 733841 (avg. 58.91 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.7% 6.2% 2.2% 2.1% 1.4% 1.3% 0.8% 0.7% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 455784
Top 10 bandwidth usage (bytes/total in %):
21.8% 9.7% 6.8% 6.8% 6.2% 5.9% 4.4% 3.7% 3.6% 3.0%
# of IPv6 addresses: 5758
Top 10 bandwidth usage (bytes/total in %):
26.9% 20.6% 13.9% 12.8% 9.6% 8.3% 7.3% 6.6% 6.5% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201202281400.pktlen.png)
detailed numbers
[ 32- 63]: 6866406
[ 64- 127]: 11018292
[ 128- 255]: 1726894
[ 256- 511]: 1145799
[ 512- 1023]: 1309676
[ 1024- 2047]: 21164498
Protocol Breakdown
![[protocol breakdown chart]](201202281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 43231565 (100.00%) 33974694819 (100.00%) 785.88
ip 43006922 ( 99.48%) 33869226802 ( 99.69%) 787.53
tcp 30080478 ( 69.58%) 27096681848 ( 79.76%) 900.81
http(s) 16079394 ( 37.19%) 21287371534 ( 62.66%) 1323.89
http(c) 8347056 ( 19.31%) 1340661317 ( 3.95%) 160.61
squid 65689 ( 0.15%) 21091076 ( 0.06%) 321.07
smtp 80976 ( 0.19%) 23502140 ( 0.07%) 290.24
nntp 3 ( 0.00%) 184 ( 0.00%) 61.33
ftp 12262 ( 0.03%) 1119534 ( 0.00%) 91.30
pop3 5427 ( 0.01%) 3008373 ( 0.01%) 554.33
imap 19599 ( 0.05%) 15294399 ( 0.05%) 780.37
telnet 11454 ( 0.03%) 836966 ( 0.00%) 73.07
ssh 117872 ( 0.27%) 79346974 ( 0.23%) 673.16
dns 16733 ( 0.04%) 1535776 ( 0.00%) 91.78
bgp 635 ( 0.00%) 126842 ( 0.00%) 199.75
napster 360 ( 0.00%) 32718 ( 0.00%) 90.88
realaud 4 ( 0.00%) 240 ( 0.00%) 60.00
rtsp 17642 ( 0.04%) 18032472 ( 0.05%) 1022.13
icecast 28932 ( 0.07%) 16146899 ( 0.05%) 558.10
hotline 6 ( 0.00%) 374 ( 0.00%) 62.33
other 5276427 ( 12.21%) 4288573610 ( 12.62%) 812.78
udp 8700072 ( 20.12%) 5177090032 ( 15.24%) 595.06
dns 959457 ( 2.22%) 338985024 ( 1.00%) 353.31
rip 1 ( 0.00%) 70 ( 0.00%) 70.00
realaud 8 ( 0.00%) 667 ( 0.00%) 83.38
halflif 98 ( 0.00%) 24746 ( 0.00%) 252.51
starcra 179 ( 0.00%) 46037 ( 0.00%) 257.19
everque 3225 ( 0.01%) 2871280 ( 0.01%) 890.32
unreal 4 ( 0.00%) 670 ( 0.00%) 167.50
quake 30 ( 0.00%) 2923 ( 0.00%) 97.43
cuseeme 1 ( 0.00%) 99 ( 0.00%) 99.00
other 7621921 ( 17.63%) 4828192881 ( 14.21%) 633.46
icmp 731941 ( 1.69%) 106494218 ( 0.31%) 145.50
ipip 186 ( 0.00%) 19380 ( 0.00%) 104.19
ipsec 24675 ( 0.06%) 15017474 ( 0.04%) 608.61
ip6 3460863 ( 8.01%) 1470928432 ( 4.33%) 425.02
other 8707 ( 0.02%) 2995418 ( 0.01%) 344.02
frag 1246552 ( 2.88%) 951175506 ( 2.80%) 763.05
ip6 224643 ( 0.52%) 105468017 ( 0.31%) 469.49
tcp6 134300 ( 0.31%) 81744116 ( 0.24%) 608.67
http(s) 13212 ( 0.03%) 16196283 ( 0.05%) 1225.88
http(c) 23844 ( 0.06%) 2066769 ( 0.01%) 86.68
smtp 355 ( 0.00%) 386439 ( 0.00%) 1088.56
ftp 26 ( 0.00%) 2053 ( 0.00%) 78.96
ssh 197 ( 0.00%) 29806 ( 0.00%) 151.30
dns 519 ( 0.00%) 92525 ( 0.00%) 178.28
bgp 90 ( 0.00%) 16381 ( 0.00%) 182.01
other 96057 ( 0.22%) 62953860 ( 0.19%) 655.38
udp6 70060 ( 0.16%) 19944463 ( 0.06%) 284.68
dns 64587 ( 0.15%) 17335931 ( 0.05%) 268.41
halflif 1 ( 0.00%) 117 ( 0.00%) 117.00
everque 2 ( 0.00%) 207 ( 0.00%) 103.50
other 5470 ( 0.01%) 2608208 ( 0.01%) 476.82
icmp6 19485 ( 0.05%) 3035384 ( 0.01%) 155.78
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 683 ( 0.00%) 728394 ( 0.00%) 1066.46
tcpdump file: 201202281400.dump.gz (1025.05 MB)