Traffic Trace Info
DumpFile: 201209091400.dump
FileSize: 3239.71MB
Id: 201209091400
StartTime: Sun Sep 9 14:00:01 2012
EndTime: Sun Sep 9 14:15:00 2012
TotalTime: 899.52 seconds
TotalCapSize: -1599.74MB CapLen: 96 bytes
# of packets: 48722007 (27489.18MB)
AvgRate: 256.39Mbps stddev:55.84M
IP flow (unique src/dst pair) Information
# of flows: 11982704 (avg. 4.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 5.1% 4.9% 3.8% 3.0% 1.6% 1.6% 1.6% 1.6% 1.4%
IP address Information
# of IPv4 addresses: 9610629
Top 10 bandwidth usage (bytes/total in %):
29.8% 8.8% 5.9% 5.9% 5.7% 5.4% 5.2% 5.1% 4.0% 3.9%
# of IPv6 addresses: 5882
Top 10 bandwidth usage (bytes/total in %):
32.0% 11.8% 10.5% 9.3% 7.1% 6.6% 5.5% 5.1% 4.6% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201209091400.pktlen.png)
detailed numbers
[ 32- 63]: 21312966
[ 64- 127]: 7689575
[ 128- 255]: 755440
[ 256- 511]: 772484
[ 512- 1023]: 674675
[ 1024- 2047]: 17516867
Protocol Breakdown
![[protocol breakdown chart]](201209091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 48722007 (100.00%) 28824489656 (100.00%) 591.61
ip 48208230 ( 98.95%) 28330048870 ( 98.28%) 587.66
tcp 27229715 ( 55.89%) 24821583076 ( 86.11%) 911.56
http(s) 14960348 ( 30.71%) 19666084594 ( 68.23%) 1314.55
http(c) 9184442 ( 18.85%) 3006360461 ( 10.43%) 327.33
squid 55492 ( 0.11%) 13774798 ( 0.05%) 248.23
smtp 53439 ( 0.11%) 10533697 ( 0.04%) 197.12
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 21063 ( 0.04%) 21867982 ( 0.08%) 1038.22
pop3 953 ( 0.00%) 249053 ( 0.00%) 261.34
imap 8917 ( 0.02%) 9399984 ( 0.03%) 1054.16
telnet 9599 ( 0.02%) 729395 ( 0.00%) 75.99
ssh 796804 ( 1.64%) 942675080 ( 3.27%) 1183.07
dns 1065 ( 0.00%) 196126 ( 0.00%) 184.16
bgp 576 ( 0.00%) 127907 ( 0.00%) 222.06
napster 36 ( 0.00%) 2929 ( 0.00%) 81.36
realaud 110 ( 0.00%) 10009 ( 0.00%) 90.99
rtsp 184 ( 0.00%) 48392 ( 0.00%) 263.00
icecast 277 ( 0.00%) 40565 ( 0.00%) 146.44
hotline 103 ( 0.00%) 6479 ( 0.00%) 62.90
other 2136301 ( 4.38%) 1149475259 ( 3.99%) 538.07
udp 3125082 ( 6.41%) 1646587933 ( 5.71%) 526.89
dns 256684 ( 0.53%) 54376774 ( 0.19%) 211.84
realaud 12 ( 0.00%) 4428 ( 0.00%) 369.00
halflif 53 ( 0.00%) 7737 ( 0.00%) 145.98
starcra 42 ( 0.00%) 4100 ( 0.00%) 97.62
everque 191 ( 0.00%) 27614 ( 0.00%) 144.58
unreal 6 ( 0.00%) 930 ( 0.00%) 155.00
quake 18 ( 0.00%) 2269 ( 0.00%) 126.06
cuseeme 3 ( 0.00%) 547 ( 0.00%) 182.33
other 2868013 ( 5.89%) 1592120046 ( 5.52%) 555.13
icmp 16045316 ( 32.93%) 979419557 ( 3.40%) 61.04
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2739 ( 0.01%) 811522 ( 0.00%) 296.28
ip6 1730404 ( 3.55%) 864896055 ( 3.00%) 499.82
pim 76 ( 0.00%) 4560 ( 0.00%) 60.00
other 74713 ( 0.15%) 16726897 ( 0.06%) 223.88
frag 5103 ( 0.01%) 3949885 ( 0.01%) 774.03
ip6 513777 ( 1.05%) 494440786 ( 1.72%) 962.36
tcp6 443174 ( 0.91%) 472142034 ( 1.64%) 1065.36
http(s) 354226 ( 0.73%) 447987227 ( 1.55%) 1264.69
http(c) 61678 ( 0.13%) 7024250 ( 0.02%) 113.89
squid 14 ( 0.00%) 1740 ( 0.00%) 124.29
smtp 367 ( 0.00%) 53337 ( 0.00%) 145.33
ftp 2546 ( 0.01%) 479961 ( 0.00%) 188.52
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 32 ( 0.00%) 11859 ( 0.00%) 370.59
bgp 98 ( 0.00%) 33287 ( 0.00%) 339.66
other 24201 ( 0.05%) 16549365 ( 0.06%) 683.83
udp6 52760 ( 0.11%) 18760525 ( 0.07%) 355.58
dns 39655 ( 0.08%) 11314115 ( 0.04%) 285.31
realaud 1 ( 0.00%) 95 ( 0.00%) 95.00
starcra 1 ( 0.00%) 101 ( 0.00%) 101.00
everque 3 ( 0.00%) 310 ( 0.00%) 103.33
quake 2 ( 0.00%) 211 ( 0.00%) 105.50
other 13098 ( 0.03%) 7445693 ( 0.03%) 568.46
icmp6 16783 ( 0.03%) 2644558 ( 0.01%) 157.57
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 945 ( 0.00%) 878059 ( 0.00%) 929.16
tcpdump file: 201209091400.dump.gz (1036.18 MB)