Traffic Trace Info
DumpFile: 201210011400.dump
FileSize: 2698.36MB
Id: 201210011400
StartTime: Mon Oct 1 14:00:00 2012
EndTime: Mon Oct 1 14:15:00 2012
TotalTime: 900.09 seconds
TotalCapSize: -1966.26MB CapLen: 96 bytes
# of packets: 37264190 (28061.61MB)
AvgRate: 261.51Mbps stddev:42.15M
IP flow (unique src/dst pair) Information
# of flows: 2114611 (avg. 17.62 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 1.8% 1.8% 1.6% 1.6% 1.6% 1.5% 1.5% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 1511098
Top 10 bandwidth usage (bytes/total in %):
11.2% 10.9% 8.1% 6.7% 4.1% 4.0% 3.7% 3.4% 3.1% 2.3%
# of IPv6 addresses: 9140
Top 10 bandwidth usage (bytes/total in %):
28.7% 25.6% 19.1% 16.4% 13.1% 4.2% 3.9% 2.8% 2.3% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201210011400.pktlen.png)
detailed numbers
[ 32- 63]: 7616963
[ 64- 127]: 8064147
[ 128- 255]: 987665
[ 256- 511]: 1027631
[ 512- 1023]: 1147351
[ 1024- 2047]: 18420433
Protocol Breakdown
![[protocol breakdown chart]](201210011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37264190 (100.00%) 29424735810 (100.00%) 789.62
ip 34317021 ( 92.09%) 26543716534 ( 90.21%) 773.49
tcp 27833872 ( 74.69%) 23703857495 ( 80.56%) 851.62
http(s) 15785482 ( 42.36%) 20525792281 ( 69.76%) 1300.30
http(c) 8426589 ( 22.61%) 1635837786 ( 5.56%) 194.13
squid 62051 ( 0.17%) 19548993 ( 0.07%) 315.05
smtp 56334 ( 0.15%) 23055753 ( 0.08%) 409.27
ftp 24633 ( 0.07%) 22182141 ( 0.08%) 900.51
pop3 3840 ( 0.01%) 877908 ( 0.00%) 228.62
imap 3358 ( 0.01%) 1154799 ( 0.00%) 343.89
telnet 3933 ( 0.01%) 313756 ( 0.00%) 79.78
ssh 25706 ( 0.07%) 5316986 ( 0.02%) 206.84
dns 1703 ( 0.00%) 255310 ( 0.00%) 149.92
bgp 553 ( 0.00%) 121407 ( 0.00%) 219.54
napster 19 ( 0.00%) 2217 ( 0.00%) 116.68
realaud 154 ( 0.00%) 15742 ( 0.00%) 102.22
icecast 44076 ( 0.12%) 36783865 ( 0.13%) 834.56
hotline 10 ( 0.00%) 1390 ( 0.00%) 139.00
other 3395431 ( 9.11%) 1432597161 ( 4.87%) 421.92
udp 4336318 ( 11.64%) 2368463835 ( 8.05%) 546.19
dns 699776 ( 1.88%) 313415654 ( 1.07%) 447.88
realaud 4 ( 0.00%) 356 ( 0.00%) 89.00
halflif 48 ( 0.00%) 7489 ( 0.00%) 156.02
starcra 36 ( 0.00%) 3505 ( 0.00%) 97.36
everque 90 ( 0.00%) 17404 ( 0.00%) 193.38
unreal 31 ( 0.00%) 2539 ( 0.00%) 81.90
quake 7 ( 0.00%) 680 ( 0.00%) 97.14
cuseeme 4 ( 0.00%) 362 ( 0.00%) 90.50
other 3634919 ( 9.75%) 2054859409 ( 6.98%) 565.31
icmp 1411266 ( 3.79%) 93071903 ( 0.32%) 65.95
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 17176 ( 0.05%) 7046304 ( 0.02%) 410.24
ip6 653359 ( 1.75%) 354278135 ( 1.20%) 542.24
pim 46 ( 0.00%) 2760 ( 0.00%) 60.00
other 64799 ( 0.17%) 16976832 ( 0.06%) 261.99
frag 187107 ( 0.50%) 201300685 ( 0.68%) 1075.86
ip6 2947169 ( 7.91%) 2881019276 ( 9.79%) 977.55
tcp6 2839727 ( 7.62%) 2847479296 ( 9.68%) 1002.73
http(s) 1389336 ( 3.73%) 1576516831 ( 5.36%) 1134.73
http(c) 384900 ( 1.03%) 38661191 ( 0.13%) 100.44
smtp 291 ( 0.00%) 57430 ( 0.00%) 197.35
ftp 5618 ( 0.02%) 595909 ( 0.00%) 106.07
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 207 ( 0.00%) 70517 ( 0.00%) 340.66
bgp 101 ( 0.00%) 26565 ( 0.00%) 263.02
other 1059262 ( 2.84%) 1231549845 ( 4.19%) 1162.65
udp6 79161 ( 0.21%) 28374702 ( 0.10%) 358.44
dns 71726 ( 0.19%) 21192133 ( 0.07%) 295.46
quake 1 ( 0.00%) 112 ( 0.00%) 112.00
cuseeme 1 ( 0.00%) 111 ( 0.00%) 111.00
other 7433 ( 0.02%) 7182346 ( 0.02%) 966.28
icmp6 26706 ( 0.07%) 3673065 ( 0.01%) 137.54
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1460 ( 0.00%) 1476585 ( 0.01%) 1011.36
tcpdump file: 201210011400.dump.gz (856.11 MB)