Traffic Trace Info
DumpFile: 201209111400.dump
FileSize: 2759.25MB
Id: 201209111400
StartTime: Tue Sep 11 14:00:00 2012
EndTime: Tue Sep 11 14:15:01 2012
TotalTime: 900.64 seconds
TotalCapSize: -1958.91MB CapLen: 96 bytes
# of packets: 40773236 (17062.24MB)
AvgRate: 158.93Mbps stddev:26.07M
IP flow (unique src/dst pair) Information
# of flows: 11068277 (avg. 3.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.2% 1.5% 1.5% 1.4% 1.4% 1.3% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 8687342
Top 10 bandwidth usage (bytes/total in %):
8.1% 6.9% 6.0% 5.8% 5.4% 4.9% 4.2% 4.0% 3.8% 3.3%
# of IPv6 addresses: 9030
Top 10 bandwidth usage (bytes/total in %):
18.4% 13.5% 8.8% 8.0% 6.5% 5.3% 3.9% 3.2% 3.2% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201209111400.pktlen.png)
detailed numbers
[ 32- 63]: 17818663
[ 64- 127]: 10333663
[ 128- 255]: 830028
[ 256- 511]: 700714
[ 512- 1023]: 849342
[ 1024- 2047]: 10240826
Protocol Breakdown
![[protocol breakdown chart]](201209111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40773236 (100.00%) 17891060412 (100.00%) 438.79
ip 39484830 ( 96.84%) 16894592426 ( 94.43%) 427.88
tcp 18332766 ( 44.96%) 13885101895 ( 77.61%) 757.39
http(s) 9334372 ( 22.89%) 11312479428 ( 63.23%) 1211.92
http(c) 6222469 ( 15.26%) 1166707441 ( 6.52%) 187.50
squid 40098 ( 0.10%) 20520335 ( 0.11%) 511.75
smtp 74993 ( 0.18%) 18869212 ( 0.11%) 251.61
ftp 14327 ( 0.04%) 2957399 ( 0.02%) 206.42
pop3 9524 ( 0.02%) 10223258 ( 0.06%) 1073.42
imap 3056 ( 0.01%) 1211828 ( 0.01%) 396.54
telnet 9903 ( 0.02%) 751162 ( 0.00%) 75.85
ssh 180320 ( 0.44%) 82155749 ( 0.46%) 455.61
dns 3553 ( 0.01%) 2089598 ( 0.01%) 588.12
bgp 569 ( 0.00%) 142186 ( 0.00%) 249.89
napster 36 ( 0.00%) 2536 ( 0.00%) 70.44
realaud 53 ( 0.00%) 8391 ( 0.00%) 158.32
rtsp 10671 ( 0.03%) 13782687 ( 0.08%) 1291.60
icecast 39012 ( 0.10%) 36002254 ( 0.20%) 922.85
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 2389809 ( 5.86%) 1217198371 ( 6.80%) 509.33
udp 3391499 ( 8.32%) 1322921681 ( 7.39%) 390.07
dns 994338 ( 2.44%) 280544946 ( 1.57%) 282.14
realaud 10 ( 0.00%) 1904 ( 0.00%) 190.40
halflif 330 ( 0.00%) 27571 ( 0.00%) 83.55
starcra 22 ( 0.00%) 3789 ( 0.00%) 172.23
everque 136 ( 0.00%) 29288 ( 0.00%) 215.35
unreal 14 ( 0.00%) 1687 ( 0.00%) 120.50
quake 14 ( 0.00%) 1932 ( 0.00%) 138.00
cuseeme 2 ( 0.00%) 421 ( 0.00%) 210.50
other 2396370 ( 5.88%) 1042240580 ( 5.83%) 434.92
icmp 16452981 ( 40.35%) 1046619156 ( 5.85%) 63.61
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 27035 ( 0.07%) 7637586 ( 0.04%) 282.51
ip6 1221507 ( 3.00%) 617113163 ( 3.45%) 505.21
pim 88 ( 0.00%) 5280 ( 0.00%) 60.00
other 58769 ( 0.14%) 15174395 ( 0.08%) 258.20
frag 104485 ( 0.26%) 109969349 ( 0.61%) 1052.49
ip6 1288406 ( 3.16%) 996467986 ( 5.57%) 773.41
tcp6 1144496 ( 2.81%) 935420254 ( 5.23%) 817.32
http(s) 548011 ( 1.34%) 664536895 ( 3.71%) 1212.63
http(c) 111431 ( 0.27%) 12110282 ( 0.07%) 108.68
smtp 283 ( 0.00%) 98033 ( 0.00%) 346.41
ftp 9552 ( 0.02%) 2134282 ( 0.01%) 223.44
pop3 9035 ( 0.02%) 13644628 ( 0.08%) 1510.20
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 422 ( 0.00%) 73841 ( 0.00%) 174.98
bgp 98 ( 0.00%) 31418 ( 0.00%) 320.59
other 465652 ( 1.14%) 242789867 ( 1.36%) 521.40
udp6 122976 ( 0.30%) 56911835 ( 0.32%) 462.79
dns 65755 ( 0.16%) 19138429 ( 0.11%) 291.06
everque 2 ( 0.00%) 216 ( 0.00%) 108.00
other 57219 ( 0.14%) 37773190 ( 0.21%) 660.15
icmp6 19532 ( 0.05%) 2892687 ( 0.02%) 148.10
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1288 ( 0.00%) 1227718 ( 0.01%) 953.20
tcpdump file: 201209111400.dump.gz (915.00 MB)