Traffic Trace Info
DumpFile: 201209291400.dump
FileSize: 1709.19MB
Id: 201209291400
StartTime: Sat Sep 29 14:00:01 2012
EndTime: Sat Sep 29 14:15:01 2012
TotalTime: 900.07 seconds
TotalCapSize: 1340.88MB CapLen: 96 bytes
# of packets: 24136943 (18784.92MB)
AvgRate: 174.95Mbps stddev:47.67M
IP flow (unique src/dst pair) Information
# of flows: 1717598 (avg. 14.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 3.9% 3.1% 2.6% 2.4% 1.4% 1.3% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1345501
Top 10 bandwidth usage (bytes/total in %):
19.8% 18.6% 8.6% 6.2% 4.3% 4.2% 3.5% 3.2% 2.9% 2.8%
# of IPv6 addresses: 6934
Top 10 bandwidth usage (bytes/total in %):
59.9% 49.3% 16.5% 2.1% 1.5% 1.4% 1.4% 1.4% 1.4% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201209291400.pktlen.png)
detailed numbers
[ 32- 63]: 5165319
[ 64- 127]: 4464227
[ 128- 255]: 807773
[ 256- 511]: 673346
[ 512- 1023]: 947256
[ 1024- 2047]: 12079022
Protocol Breakdown
![[protocol breakdown chart]](201209291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24136943 (100.00%) 19697420933 (100.00%) 816.07
ip 22869723 ( 94.75%) 18574643753 ( 94.30%) 812.19
tcp 18392715 ( 76.20%) 16527907971 ( 83.91%) 898.61
http(s) 11047774 ( 45.77%) 14367115919 ( 72.94%) 1300.45
http(c) 5441578 ( 22.54%) 1035156867 ( 5.26%) 190.23
squid 70344 ( 0.29%) 53653482 ( 0.27%) 762.73
smtp 36663 ( 0.15%) 9402481 ( 0.05%) 256.46
ftp 16948 ( 0.07%) 3156396 ( 0.02%) 186.24
pop3 2315 ( 0.01%) 729504 ( 0.00%) 315.12
imap 2001 ( 0.01%) 662150 ( 0.00%) 330.91
telnet 37531 ( 0.16%) 2777402 ( 0.01%) 74.00
ssh 43931 ( 0.18%) 23606110 ( 0.12%) 537.35
dns 1337 ( 0.01%) 208834 ( 0.00%) 156.20
bgp 563 ( 0.00%) 123477 ( 0.00%) 219.32
napster 91 ( 0.00%) 8332 ( 0.00%) 91.56
realaud 98 ( 0.00%) 10825 ( 0.00%) 110.46
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 936 ( 0.00%) 86657 ( 0.00%) 92.58
hotline 15 ( 0.00%) 1503 ( 0.00%) 100.20
other 1690588 ( 7.00%) 1031207912 ( 5.24%) 609.97
udp 2839264 ( 11.76%) 1841572830 ( 9.35%) 648.61
dns 651577 ( 2.70%) 437034793 ( 2.22%) 670.73
realaud 5 ( 0.00%) 822 ( 0.00%) 164.40
halflif 96 ( 0.00%) 29803 ( 0.00%) 310.45
starcra 18 ( 0.00%) 1554 ( 0.00%) 86.33
everque 124 ( 0.00%) 21127 ( 0.00%) 170.38
unreal 12 ( 0.00%) 1171 ( 0.00%) 97.58
quake 7 ( 0.00%) 682 ( 0.00%) 97.43
cuseeme 3 ( 0.00%) 206 ( 0.00%) 68.67
other 2187231 ( 9.06%) 1404383684 ( 7.13%) 642.08
icmp 1376989 ( 5.70%) 91503011 ( 0.46%) 66.45
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 10139 ( 0.04%) 5227378 ( 0.03%) 515.57
ip6 186292 ( 0.77%) 92982598 ( 0.47%) 499.12
pim 35 ( 0.00%) 2100 ( 0.00%) 60.00
other 64104 ( 0.27%) 15428595 ( 0.08%) 240.68
frag 323456 ( 1.34%) 353982570 ( 1.80%) 1094.38
ip6 1267218 ( 5.25%) 1122777060 ( 5.70%) 886.02
tcp6 1176653 ( 4.87%) 1088509598 ( 5.53%) 925.09
http(s) 380277 ( 1.58%) 380791308 ( 1.93%) 1001.35
http(c) 94970 ( 0.39%) 9740746 ( 0.05%) 102.57
smtp 74 ( 0.00%) 22353 ( 0.00%) 302.07
ftp 6868 ( 0.03%) 731087 ( 0.00%) 106.45
pop3 6 ( 0.00%) 444 ( 0.00%) 74.00
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 89 ( 0.00%) 27940 ( 0.00%) 313.93
bgp 98 ( 0.00%) 23803 ( 0.00%) 242.89
other 694259 ( 2.88%) 697170909 ( 3.54%) 1004.19
udp6 69823 ( 0.29%) 30588630 ( 0.16%) 438.09
dns 41906 ( 0.17%) 11802550 ( 0.06%) 281.64
starcra 1 ( 0.00%) 107 ( 0.00%) 107.00
other 27916 ( 0.12%) 18785973 ( 0.10%) 672.95
icmp6 19826 ( 0.08%) 2878880 ( 0.01%) 145.21
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 801 ( 0.00%) 784324 ( 0.00%) 979.18
tcpdump file: 201209291400.dump.gz (532.21 MB)