Traffic Trace Info
DumpFile: 201210021400.dump
FileSize: 3222.20MB
Id: 201210021400
StartTime: Tue Oct 2 14:00:00 2012
EndTime: Tue Oct 2 14:15:00 2012
TotalTime: 899.56 seconds
TotalCapSize: -1554.62MB CapLen: 96 bytes
# of packets: 44617586 (37599.86MB)
AvgRate: 350.62Mbps stddev:71.39M
IP flow (unique src/dst pair) Information
# of flows: 1700535 (avg. 26.24 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.6% 5.1% 4.2% 3.0% 2.8% 2.1% 1.6% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 1334846
Top 10 bandwidth usage (bytes/total in %):
17.3% 14.5% 11.1% 4.8% 4.8% 4.4% 4.1% 3.5% 3.5% 3.3%
# of IPv6 addresses: 9217
Top 10 bandwidth usage (bytes/total in %):
50.4% 43.8% 12.4% 10.8% 9.7% 6.4% 4.9% 4.6% 2.2% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201210021400.pktlen.png)
detailed numbers
[ 32- 63]: 8677953
[ 64- 127]: 7454966
[ 128- 255]: 891454
[ 256- 511]: 1149328
[ 512- 1023]: 1081353
[ 1024- 2047]: 25362532
Protocol Breakdown
![[protocol breakdown chart]](201210021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44617586 (100.00%) 39426309452 (100.00%) 883.65
ip 40711309 ( 91.24%) 34840272048 ( 88.37%) 855.79
tcp 35512139 ( 79.59%) 32724808347 ( 83.00%) 921.51
http(s) 20531559 ( 46.02%) 26604801320 ( 67.48%) 1295.80
http(c) 11125378 ( 24.93%) 3275801762 ( 8.31%) 294.44
squid 50557 ( 0.11%) 19163894 ( 0.05%) 379.06
smtp 69784 ( 0.16%) 29473104 ( 0.07%) 422.35
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 17554 ( 0.04%) 4234588 ( 0.01%) 241.23
pop3 5025 ( 0.01%) 2750800 ( 0.01%) 547.42
imap 1447 ( 0.00%) 346674 ( 0.00%) 239.58
telnet 2647 ( 0.01%) 217776 ( 0.00%) 82.27
ssh 8862 ( 0.02%) 2515718 ( 0.01%) 283.88
dns 5650 ( 0.01%) 3788020 ( 0.01%) 670.45
bgp 582 ( 0.00%) 139228 ( 0.00%) 239.22
napster 34 ( 0.00%) 2463 ( 0.00%) 72.44
realaud 227 ( 0.00%) 34625 ( 0.00%) 152.53
rtsp 4248 ( 0.01%) 6001162 ( 0.02%) 1412.70
icecast 1088 ( 0.00%) 243758 ( 0.00%) 224.04
hotline 233 ( 0.00%) 14721 ( 0.00%) 63.18
other 3687263 ( 8.26%) 2775278674 ( 7.04%) 752.67
udp 3290760 ( 7.38%) 1873546000 ( 4.75%) 569.34
dns 613161 ( 1.37%) 224785280 ( 0.57%) 366.60
realaud 10 ( 0.00%) 1062 ( 0.00%) 106.20
halflif 50 ( 0.00%) 6759 ( 0.00%) 135.18
starcra 28 ( 0.00%) 3832 ( 0.00%) 136.86
everque 154 ( 0.00%) 28792 ( 0.00%) 186.96
unreal 13 ( 0.00%) 2022 ( 0.00%) 155.54
quake 33 ( 0.00%) 2666 ( 0.00%) 80.79
cuseeme 20 ( 0.00%) 2899 ( 0.00%) 144.95
other 2677158 ( 6.00%) 1648640990 ( 4.18%) 615.82
icmp 1380179 ( 3.09%) 90393464 ( 0.23%) 65.49
igmp 4 ( 0.00%) 240 ( 0.00%) 60.00
ipip 189 ( 0.00%) 19510 ( 0.00%) 103.23
ipsec 33087 ( 0.07%) 9393810 ( 0.02%) 283.91
ip6 432197 ( 0.97%) 125622098 ( 0.32%) 290.66
pim 24 ( 0.00%) 1440 ( 0.00%) 60.00
other 62730 ( 0.14%) 16487139 ( 0.04%) 262.83
frag 101296 ( 0.23%) 110612901 ( 0.28%) 1091.98
ip6 3906277 ( 8.76%) 4586037404 ( 11.63%) 1174.02
tcp6 3806403 ( 8.53%) 4559677376 ( 11.57%) 1197.90
http(s) 1508178 ( 3.38%) 1746186294 ( 4.43%) 1157.81
http(c) 231203 ( 0.52%) 24421894 ( 0.06%) 105.63
smtp 204 ( 0.00%) 86524 ( 0.00%) 424.14
ftp 6813 ( 0.02%) 725643 ( 0.00%) 106.51
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 83 ( 0.00%) 28941 ( 0.00%) 348.69
bgp 103 ( 0.00%) 24500 ( 0.00%) 237.86
other 2059807 ( 4.62%) 2788202572 ( 7.07%) 1353.62
udp6 71304 ( 0.16%) 21324426 ( 0.05%) 299.06
dns 68408 ( 0.15%) 20855844 ( 0.05%) 304.87
realaud 1 ( 0.00%) 101 ( 0.00%) 101.00
halflif 1 ( 0.00%) 109 ( 0.00%) 109.00
quake 1 ( 0.00%) 101 ( 0.00%) 101.00
other 2893 ( 0.01%) 468271 ( 0.00%) 161.86
icmp6 27254 ( 0.06%) 3824723 ( 0.01%) 140.34
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1204 ( 0.00%) 1195623 ( 0.00%) 993.04
tcpdump file: 201210021400.dump.gz (974.25 MB)