Traffic Trace Info
DumpFile: 201209141400.dump
FileSize: 2688.12MB
Id: 201209141400
StartTime: Fri Sep 14 14:00:00 2012
EndTime: Fri Sep 14 14:15:00 2012
TotalTime: 900.24 seconds
TotalCapSize: -2023.27MB CapLen: 96 bytes
# of packets: 40329238 (22169.98MB)
AvgRate: 206.53Mbps stddev:34.86M
IP flow (unique src/dst pair) Information
# of flows: 11120569 (avg. 3.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 4.8% 4.5% 3.8% 1.6% 1.5% 1.3% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 8722852
Top 10 bandwidth usage (bytes/total in %):
15.5% 10.5% 7.8% 5.1% 5.1% 4.7% 4.6% 4.6% 4.5% 4.0%
# of IPv6 addresses: 6914
Top 10 bandwidth usage (bytes/total in %):
59.2% 22.8% 13.8% 9.1% 7.2% 7.1% 6.5% 2.0% 1.7% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201209141400.pktlen.png)
detailed numbers
[ 32- 63]: 17781909
[ 64- 127]: 6160946
[ 128- 255]: 756297
[ 256- 511]: 940695
[ 512- 1023]: 771422
[ 1024- 2047]: 13917969
Protocol Breakdown
![[protocol breakdown chart]](201209141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40329238 (100.00%) 23246904787 (100.00%) 576.43
ip 39378388 ( 97.64%) 22203338887 ( 95.51%) 563.85
tcp 21702687 ( 53.81%) 20041622587 ( 86.21%) 923.46
http(s) 11765147 ( 29.17%) 14802084376 ( 63.67%) 1258.13
http(c) 6884386 ( 17.07%) 3075565472 ( 13.23%) 446.75
squid 74019 ( 0.18%) 24301647 ( 0.10%) 328.32
smtp 91997 ( 0.23%) 24791905 ( 0.11%) 269.49
nntp 12 ( 0.00%) 732 ( 0.00%) 61.00
ftp 16411 ( 0.04%) 3196944 ( 0.01%) 194.80
pop3 3009 ( 0.01%) 1614203 ( 0.01%) 536.46
imap 2459 ( 0.01%) 666226 ( 0.00%) 270.93
telnet 7735 ( 0.02%) 594057 ( 0.00%) 76.80
ssh 582585 ( 1.44%) 528340145 ( 2.27%) 906.89
dns 1624 ( 0.00%) 246888 ( 0.00%) 152.02
bgp 554 ( 0.00%) 122099 ( 0.00%) 220.40
napster 36 ( 0.00%) 4497 ( 0.00%) 124.92
realaud 110 ( 0.00%) 17892 ( 0.00%) 162.65
icecast 497 ( 0.00%) 71815 ( 0.00%) 144.50
hotline 12 ( 0.00%) 1478 ( 0.00%) 123.17
other 2272094 ( 5.63%) 1580002211 ( 6.80%) 695.39
udp 2092415 ( 5.19%) 860050982 ( 3.70%) 411.03
dns 601707 ( 1.49%) 278491330 ( 1.20%) 462.84
realaud 9 ( 0.00%) 1651 ( 0.00%) 183.44
halflif 28 ( 0.00%) 7030 ( 0.00%) 251.07
starcra 38 ( 0.00%) 5064 ( 0.00%) 133.26
everque 121 ( 0.00%) 27233 ( 0.00%) 225.07
unreal 17 ( 0.00%) 2245 ( 0.00%) 132.06
quake 27 ( 0.00%) 2265 ( 0.00%) 83.89
cuseeme 4 ( 0.00%) 487 ( 0.00%) 121.75
other 1489198 ( 3.69%) 581360300 ( 2.50%) 390.38
icmp 14994631 ( 37.18%) 965424875 ( 4.15%) 64.38
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 267686 ( 0.66%) 248709876 ( 1.07%) 929.11
ip6 259908 ( 0.64%) 70524093 ( 0.30%) 271.34
pim 85 ( 0.00%) 5100 ( 0.00%) 60.00
other 60792 ( 0.15%) 16982214 ( 0.07%) 279.35
frag 178640 ( 0.44%) 187918654 ( 0.81%) 1051.94
ip6 950850 ( 2.36%) 1043565900 ( 4.49%) 1097.51
tcp6 862965 ( 2.14%) 1012309668 ( 4.35%) 1173.06
http(s) 705002 ( 1.75%) 893123774 ( 3.84%) 1266.84
http(c) 55845 ( 0.14%) 5640241 ( 0.02%) 101.00
squid 13 ( 0.00%) 2645 ( 0.00%) 203.46
smtp 463 ( 0.00%) 211382 ( 0.00%) 456.55
ftp 6333 ( 0.02%) 3898151 ( 0.02%) 615.53
ssh 167 ( 0.00%) 28615 ( 0.00%) 171.35
dns 353 ( 0.00%) 68380 ( 0.00%) 193.71
bgp 121 ( 0.00%) 54175 ( 0.00%) 447.73
other 94668 ( 0.23%) 109282305 ( 0.47%) 1154.37
udp6 72720 ( 0.18%) 27799830 ( 0.12%) 382.29
dns 59126 ( 0.15%) 17740653 ( 0.08%) 300.05
realaud 1 ( 0.00%) 111 ( 0.00%) 111.00
everque 1 ( 0.00%) 104 ( 0.00%) 104.00
other 13592 ( 0.03%) 10058962 ( 0.04%) 740.06
icmp6 13930 ( 0.03%) 2302392 ( 0.01%) 165.28
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1119 ( 0.00%) 1138264 ( 0.00%) 1017.22
tcpdump file: 201209141400.dump.gz (884.70 MB)