Traffic Trace Info
DumpFile: 201209301400.dump
FileSize: 2397.12MB
Id: 201209301400
StartTime: Sun Sep 30 14:00:00 2012
EndTime: Sun Sep 30 14:15:00 2012
TotalTime: 899.85 seconds
TotalCapSize: 1879.02MB CapLen: 96 bytes
# of packets: 33953354 (27734.46MB)
AvgRate: 258.55Mbps stddev:46.45M
IP flow (unique src/dst pair) Information
# of flows: 1830440 (avg. 18.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.7% 2.3% 2.3% 2.2% 2.1% 2.0% 1.9% 1.8% 1.5%
IP address Information
# of IPv4 addresses: 1438278
Top 10 bandwidth usage (bytes/total in %):
15.2% 11.5% 10.2% 5.6% 4.8% 4.3% 4.0% 3.1% 2.9% 2.5%
# of IPv6 addresses: 6329
Top 10 bandwidth usage (bytes/total in %):
51.7% 43.8% 25.0% 13.0% 10.4% 10.4% 3.4% 1.8% 1.5% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201209301400.pktlen.png)
detailed numbers
[ 32- 63]: 6566951
[ 64- 127]: 6402130
[ 128- 255]: 1002511
[ 256- 511]: 550802
[ 512- 1023]: 1011483
[ 1024- 2047]: 18419477
Protocol Breakdown
![[protocol breakdown chart]](201209301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33953354 (100.00%) 29081689862 (100.00%) 856.52
ip 32564806 ( 95.91%) 27661864638 ( 95.12%) 849.44
tcp 27199261 ( 80.11%) 25053882079 ( 86.15%) 921.12
http(s) 12276411 ( 36.16%) 15974127564 ( 54.93%) 1301.21
http(c) 5875755 ( 17.31%) 1514430070 ( 5.21%) 257.74
squid 261338 ( 0.77%) 233696390 ( 0.80%) 894.23
smtp 45055 ( 0.13%) 9525498 ( 0.03%) 211.42
ftp 18283 ( 0.05%) 3429983 ( 0.01%) 187.61
pop3 6212 ( 0.02%) 4184607 ( 0.01%) 673.63
imap 1956 ( 0.01%) 611779 ( 0.00%) 312.77
telnet 4070 ( 0.01%) 322000 ( 0.00%) 79.12
ssh 484607 ( 1.43%) 36980399 ( 0.13%) 76.31
dns 1263 ( 0.00%) 238989 ( 0.00%) 189.22
bgp 594 ( 0.00%) 147199 ( 0.00%) 247.81
napster 3 ( 0.00%) 184 ( 0.00%) 61.33
realaud 484 ( 0.00%) 69696 ( 0.00%) 144.00
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 15074 ( 0.04%) 10137441 ( 0.03%) 672.51
hotline 32073 ( 0.09%) 22850649 ( 0.08%) 712.46
other 8176081 ( 24.08%) 7243129511 ( 24.91%) 885.89
udp 3683644 ( 10.85%) 2429980231 ( 8.36%) 659.67
dns 634726 ( 1.87%) 499881542 ( 1.72%) 787.55
realaud 4 ( 0.00%) 376 ( 0.00%) 94.00
halflif 25 ( 0.00%) 2796 ( 0.00%) 111.84
starcra 31 ( 0.00%) 3254 ( 0.00%) 104.97
everque 90 ( 0.00%) 15304 ( 0.00%) 170.04
unreal 2 ( 0.00%) 200 ( 0.00%) 100.00
quake 14 ( 0.00%) 1174 ( 0.00%) 83.86
cuseeme 1 ( 0.00%) 101 ( 0.00%) 101.00
other 3048604 ( 8.98%) 1930008958 ( 6.64%) 633.08
icmp 1409433 ( 4.15%) 92653602 ( 0.32%) 65.74
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 21186 ( 0.06%) 5607668 ( 0.02%) 264.69
ip6 186606 ( 0.55%) 62153192 ( 0.21%) 333.07
pim 36 ( 0.00%) 2160 ( 0.00%) 60.00
other 64456 ( 0.19%) 17566546 ( 0.06%) 272.54
frag 418387 ( 1.23%) 457017195 ( 1.57%) 1092.33
ip6 1388546 ( 4.09%) 1419825104 ( 4.88%) 1022.53
tcp6 1324345 ( 3.90%) 1405084100 ( 4.83%) 1060.97
http(s) 252405 ( 0.74%) 273482187 ( 0.94%) 1083.51
http(c) 68489 ( 0.20%) 6594512 ( 0.02%) 96.29
smtp 56 ( 0.00%) 17352 ( 0.00%) 309.86
ftp 4784 ( 0.01%) 508032 ( 0.00%) 106.19
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 29 ( 0.00%) 10420 ( 0.00%) 359.31
bgp 100 ( 0.00%) 21642 ( 0.00%) 216.42
other 998470 ( 2.94%) 1124448947 ( 3.87%) 1126.17
udp6 38955 ( 0.11%) 10603451 ( 0.04%) 272.20
dns 36305 ( 0.11%) 10356611 ( 0.04%) 285.27
realaud 1 ( 0.00%) 117 ( 0.00%) 117.00
unreal 1 ( 0.00%) 116 ( 0.00%) 116.00
other 2648 ( 0.01%) 246607 ( 0.00%) 93.13
icmp6 24493 ( 0.07%) 3484986 ( 0.01%) 142.28
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 641 ( 0.00%) 637311 ( 0.00%) 994.24
tcpdump file: 201209301400.dump.gz (735.37 MB)