Traffic Trace Info
DumpFile: 201209221400.dump
FileSize: 1750.03MB
Id: 201209221400
StartTime: Sat Sep 22 14:00:00 2012
EndTime: Sat Sep 22 14:15:00 2012
TotalTime: 900.08 seconds
TotalCapSize: 1386.45MB CapLen: 96 bytes
# of packets: 23826814 (19025.53MB)
AvgRate: 177.28Mbps stddev:43.61M
IP flow (unique src/dst pair) Information
# of flows: 724983 (avg. 32.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 2.3% 2.2% 1.9% 1.8% 1.7% 1.6% 1.4% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 429544
Top 10 bandwidth usage (bytes/total in %):
20.5% 13.6% 4.3% 3.5% 2.8% 2.6% 2.6% 2.2% 2.2% 2.0%
# of IPv6 addresses: 7809
Top 10 bandwidth usage (bytes/total in %):
63.7% 45.1% 36.0% 18.5% 5.7% 3.9% 1.7% 1.2% 1.1% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201209221400.pktlen.png)
detailed numbers
[ 32- 63]: 4340094
[ 64- 127]: 5116322
[ 128- 255]: 603509
[ 256- 511]: 522037
[ 512- 1023]: 843325
[ 1024- 2047]: 12401527
Protocol Breakdown
![[protocol breakdown chart]](201209221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23826814 (100.00%) 19949713744 (100.00%) 837.28
ip 21622740 ( 90.75%) 17383948124 ( 87.14%) 803.97
tcp 19226911 ( 80.69%) 16386504176 ( 82.14%) 852.27
http(s) 10401136 ( 43.65%) 13314738657 ( 66.74%) 1280.12
http(c) 4948090 ( 20.77%) 845614267 ( 4.24%) 170.90
squid 198635 ( 0.83%) 144047473 ( 0.72%) 725.19
smtp 52643 ( 0.22%) 9325640 ( 0.05%) 177.15
ftp 15106 ( 0.06%) 3748208 ( 0.02%) 248.13
pop3 1579 ( 0.01%) 600577 ( 0.00%) 380.35
imap 2568 ( 0.01%) 651540 ( 0.00%) 253.71
telnet 15517 ( 0.07%) 1164082 ( 0.01%) 75.02
ssh 90170 ( 0.38%) 15863296 ( 0.08%) 175.93
dns 1372 ( 0.01%) 221376 ( 0.00%) 161.35
bgp 560 ( 0.00%) 136584 ( 0.00%) 243.90
napster 314 ( 0.00%) 21331 ( 0.00%) 67.93
realaud 33 ( 0.00%) 4208 ( 0.00%) 127.52
rtsp 252 ( 0.00%) 107901 ( 0.00%) 428.18
icecast 551 ( 0.00%) 150023 ( 0.00%) 272.27
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 3498313 ( 14.68%) 2050104693 ( 10.28%) 586.03
udp 1884992 ( 7.91%) 904096825 ( 4.53%) 479.63
dns 538469 ( 2.26%) 335925332 ( 1.68%) 623.85
realaud 14 ( 0.00%) 1291 ( 0.00%) 92.21
halflif 119 ( 0.00%) 17944 ( 0.00%) 150.79
starcra 16 ( 0.00%) 1471 ( 0.00%) 91.94
everque 126 ( 0.00%) 19991 ( 0.00%) 158.66
unreal 10 ( 0.00%) 1652 ( 0.00%) 165.20
quake 56 ( 0.00%) 4650 ( 0.00%) 83.04
cuseeme 2 ( 0.00%) 187 ( 0.00%) 93.50
other 1346003 ( 5.65%) 568040103 ( 2.85%) 422.02
icmp 319248 ( 1.34%) 34723607 ( 0.17%) 108.77
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 1822 ( 0.01%) 523028 ( 0.00%) 287.06
ip6 126726 ( 0.53%) 42054175 ( 0.21%) 331.85
pim 83 ( 0.00%) 4980 ( 0.00%) 60.00
other 62774 ( 0.26%) 16022173 ( 0.08%) 255.24
frag 243343 ( 1.02%) 265603401 ( 1.33%) 1091.48
ip6 2204074 ( 9.25%) 2565765620 ( 12.86%) 1164.10
tcp6 2136498 ( 8.97%) 2549938700 ( 12.78%) 1193.51
http(s) 395196 ( 1.66%) 447417915 ( 2.24%) 1132.14
http(c) 61373 ( 0.26%) 6435977 ( 0.03%) 104.87
smtp 700 ( 0.00%) 193957 ( 0.00%) 277.08
ftp 3768 ( 0.02%) 401044 ( 0.00%) 106.43
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 51 ( 0.00%) 19552 ( 0.00%) 383.37
bgp 91 ( 0.00%) 21517 ( 0.00%) 236.45
other 1675307 ( 7.03%) 2095447730 ( 10.50%) 1250.78
udp6 41214 ( 0.17%) 11509957 ( 0.06%) 279.27
dns 36560 ( 0.15%) 10032256 ( 0.05%) 274.41
realaud 1 ( 0.00%) 114 ( 0.00%) 114.00
starcra 1 ( 0.00%) 104 ( 0.00%) 104.00
everque 1 ( 0.00%) 111 ( 0.00%) 111.00
other 4651 ( 0.02%) 1477372 ( 0.01%) 317.65
icmp6 25570 ( 0.11%) 3615813 ( 0.02%) 141.41
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 679 ( 0.00%) 685726 ( 0.00%) 1009.91
tcpdump file: 201209221400.dump.gz (535.08 MB)