Traffic Trace Info
DumpFile: 201209281400.dump
FileSize: 2591.63MB
Id: 201209281400
StartTime: Fri Sep 28 14:00:01 2012
EndTime: Fri Sep 28 14:15:01 2012
TotalTime: 899.80 seconds
TotalCapSize: 2044.89MB CapLen: 96 bytes
# of packets: 35830630 (29218.79MB)
AvgRate: 272.40Mbps stddev:42.77M
IP flow (unique src/dst pair) Information
# of flows: 1834901 (avg. 19.53 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 3.3% 2.5% 2.4% 2.0% 1.6% 1.5% 1.4% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 1385201
Top 10 bandwidth usage (bytes/total in %):
11.4% 8.5% 8.4% 7.2% 5.6% 5.1% 5.0% 4.9% 3.6% 3.6%
# of IPv6 addresses: 8392
Top 10 bandwidth usage (bytes/total in %):
31.7% 30.3% 26.0% 22.5% 7.6% 3.1% 2.0% 1.9% 1.7% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201209281400.pktlen.png)
detailed numbers
[ 32- 63]: 7173512
[ 64- 127]: 6706026
[ 128- 255]: 773620
[ 256- 511]: 894935
[ 512- 1023]: 972804
[ 1024- 2047]: 19309733
Protocol Breakdown
![[protocol breakdown chart]](201209281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35830630 (100.00%) 30638117142 (100.00%) 855.08
ip 33193963 ( 92.64%) 28254259326 ( 92.22%) 851.19
tcp 29637088 ( 82.71%) 27316003334 ( 89.16%) 921.68
http(s) 16224929 ( 45.28%) 20813789580 ( 67.93%) 1282.83
http(c) 7587780 ( 21.18%) 1943966795 ( 6.34%) 256.20
squid 58924 ( 0.16%) 17914103 ( 0.06%) 304.02
smtp 71055 ( 0.20%) 30168203 ( 0.10%) 424.58
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 20449 ( 0.06%) 3634640 ( 0.01%) 177.74
pop3 4918 ( 0.01%) 2831741 ( 0.01%) 575.79
imap 3476 ( 0.01%) 1504153 ( 0.00%) 432.73
telnet 2236 ( 0.01%) 183642 ( 0.00%) 82.13
ssh 75876 ( 0.21%) 13757312 ( 0.04%) 181.31
dns 1772 ( 0.00%) 303176 ( 0.00%) 171.09
bgp 579 ( 0.00%) 143273 ( 0.00%) 247.45
napster 45 ( 0.00%) 4603 ( 0.00%) 102.29
realaud 360 ( 0.00%) 60229 ( 0.00%) 167.30
icecast 809 ( 0.00%) 152481 ( 0.00%) 188.48
other 5583879 ( 15.58%) 4487589343 ( 14.65%) 803.67
udp 1663859 ( 4.64%) 706991900 ( 2.31%) 424.91
dns 642188 ( 1.79%) 230443245 ( 0.75%) 358.84
realaud 2 ( 0.00%) 187 ( 0.00%) 93.50
halflif 86 ( 0.00%) 8468 ( 0.00%) 98.47
starcra 31 ( 0.00%) 3647 ( 0.00%) 117.65
everque 116 ( 0.00%) 29320 ( 0.00%) 252.76
unreal 12 ( 0.00%) 1265 ( 0.00%) 105.42
quake 18 ( 0.00%) 1525 ( 0.00%) 84.72
cuseeme 6 ( 0.00%) 840 ( 0.00%) 140.00
other 1021198 ( 2.85%) 476359212 ( 1.55%) 466.47
icmp 1463070 ( 4.08%) 104452825 ( 0.34%) 71.39
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 17157 ( 0.05%) 8092350 ( 0.03%) 471.66
ip6 289298 ( 0.81%) 96880327 ( 0.32%) 334.88
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 123290 ( 0.34%) 21818360 ( 0.07%) 176.97
frag 92286 ( 0.26%) 101242040 ( 0.33%) 1097.05
ip6 2636667 ( 7.36%) 2383857816 ( 7.78%) 904.12
tcp6 2528673 ( 7.06%) 2348971031 ( 7.67%) 928.93
http(s) 915762 ( 2.56%) 1019374500 ( 3.33%) 1113.14
http(c) 573095 ( 1.60%) 46632639 ( 0.15%) 81.37
squid 80 ( 0.00%) 18119 ( 0.00%) 226.49
smtp 208 ( 0.00%) 53437 ( 0.00%) 256.91
ftp 10424 ( 0.03%) 1291554 ( 0.00%) 123.90
imap 1271 ( 0.00%) 539205 ( 0.00%) 424.24
ssh 78 ( 0.00%) 14018 ( 0.00%) 179.72
dns 79 ( 0.00%) 30371 ( 0.00%) 384.44
bgp 98 ( 0.00%) 24889 ( 0.00%) 253.97
other 1027578 ( 2.87%) 1280992299 ( 4.18%) 1246.61
udp6 85414 ( 0.24%) 30490080 ( 0.10%) 356.97
dns 64243 ( 0.18%) 18525464 ( 0.06%) 288.37
realaud 2 ( 0.00%) 228 ( 0.00%) 114.00
halflif 1 ( 0.00%) 108 ( 0.00%) 108.00
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 21166 ( 0.06%) 11964067 ( 0.04%) 565.25
icmp6 21151 ( 0.06%) 3087030 ( 0.01%) 145.95
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1313 ( 0.00%) 1293947 ( 0.00%) 985.49
tcpdump file: 201209281400.dump.gz (806.41 MB)