Traffic Trace Info
DumpFile: 201210031400.dump
FileSize: 2846.81MB
Id: 201210031400
StartTime: Wed Oct 3 14:00:01 2012
EndTime: Wed Oct 3 14:15:00 2012
TotalTime: 899.34 seconds
TotalCapSize: -1842.22MB CapLen: 96 bytes
# of packets: 38864429 (30760.73MB)
AvgRate: 286.86Mbps stddev:84.75M
IP flow (unique src/dst pair) Information
# of flows: 2073824 (avg. 18.74 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.7% 3.9% 3.7% 1.9% 1.5% 1.0% 1.0% 1.0% 0.9% 0.7%
IP address Information
# of IPv4 addresses: 1472465
Top 10 bandwidth usage (bytes/total in %):
22.9% 19.3% 16.0% 4.4% 4.3% 4.2% 2.7% 2.4% 1.8% 1.8%
# of IPv6 addresses: 9978
Top 10 bandwidth usage (bytes/total in %):
43.2% 32.1% 20.6% 16.0% 7.3% 7.2% 5.4% 1.7% 1.7% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201210031400.pktlen.png)
detailed numbers
[ 32- 63]: 6980494
[ 64- 127]: 8655437
[ 128- 255]: 856633
[ 256- 511]: 979898
[ 512- 1023]: 1146602
[ 1024- 2047]: 20245365
Protocol Breakdown
![[protocol breakdown chart]](201210031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38864429 (100.00%) 32254963996 (100.00%) 829.94
ip 35449229 ( 91.21%) 28358019891 ( 87.92%) 799.96
tcp 29994981 ( 77.18%) 25747017015 ( 79.82%) 858.38
http(s) 17473111 ( 44.96%) 22378874669 ( 69.38%) 1280.76
http(c) 10102538 ( 25.99%) 1784973889 ( 5.53%) 176.69
squid 114917 ( 0.30%) 88834107 ( 0.28%) 773.03
smtp 54857 ( 0.14%) 15690740 ( 0.05%) 286.03
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 11974 ( 0.03%) 2362654 ( 0.01%) 197.32
pop3 5250 ( 0.01%) 2707744 ( 0.01%) 515.76
imap 4496 ( 0.01%) 1865874 ( 0.01%) 415.01
telnet 22497 ( 0.06%) 1682528 ( 0.01%) 74.79
ssh 48673 ( 0.13%) 28852233 ( 0.09%) 592.78
dns 1640 ( 0.00%) 251001 ( 0.00%) 153.05
bgp 612 ( 0.00%) 155637 ( 0.00%) 254.31
napster 39 ( 0.00%) 3398 ( 0.00%) 87.13
realaud 133 ( 0.00%) 19125 ( 0.00%) 143.80
rtsp 4587 ( 0.01%) 6468593 ( 0.02%) 1410.20
icecast 33390 ( 0.09%) 30832232 ( 0.10%) 923.40
hotline 7 ( 0.00%) 740 ( 0.00%) 105.71
other 2116259 ( 5.45%) 1403441791 ( 4.35%) 663.17
udp 3513541 ( 9.04%) 2364188718 ( 7.33%) 672.88
dns 778578 ( 2.00%) 392368745 ( 1.22%) 503.96
realaud 6 ( 0.00%) 576 ( 0.00%) 96.00
halflif 126 ( 0.00%) 54297 ( 0.00%) 430.93
starcra 28 ( 0.00%) 3292 ( 0.00%) 117.57
everque 142 ( 0.00%) 29748 ( 0.00%) 209.49
unreal 9 ( 0.00%) 1586 ( 0.00%) 176.22
quake 4 ( 0.00%) 655 ( 0.00%) 163.75
cuseeme 2 ( 0.00%) 205 ( 0.00%) 102.50
other 2734460 ( 7.04%) 1971641206 ( 6.11%) 721.03
icmp 1339721 ( 3.45%) 88223817 ( 0.27%) 65.85
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 14260 ( 0.04%) 3752608 ( 0.01%) 263.16
ip6 516334 ( 1.33%) 137879418 ( 0.43%) 267.04
pim 90 ( 0.00%) 5400 ( 0.00%) 60.00
other 70117 ( 0.18%) 16933645 ( 0.05%) 241.51
frag 247327 ( 0.64%) 269970984 ( 0.84%) 1091.55
ip6 3415200 ( 8.79%) 3896944105 ( 12.08%) 1141.06
tcp6 3288382 ( 8.46%) 3846703005 ( 11.93%) 1169.79
http(s) 1238158 ( 3.19%) 1350465369 ( 4.19%) 1090.71
http(c) 257841 ( 0.66%) 27377656 ( 0.08%) 106.18
smtp 81 ( 0.00%) 26249 ( 0.00%) 324.06
ftp 4468 ( 0.01%) 470028 ( 0.00%) 105.20
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 314 ( 0.00%) 60492 ( 0.00%) 192.65
bgp 98 ( 0.00%) 25285 ( 0.00%) 258.01
other 1787410 ( 4.60%) 2468276918 ( 7.65%) 1380.92
udp6 97742 ( 0.25%) 45206667 ( 0.14%) 462.51
dns 74271 ( 0.19%) 22880489 ( 0.07%) 308.07
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 2 ( 0.00%) 216 ( 0.00%) 108.00
other 23468 ( 0.06%) 22325855 ( 0.07%) 951.33
icmp6 27664 ( 0.07%) 3777366 ( 0.01%) 136.54
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1300 ( 0.00%) 1241811 ( 0.00%) 955.24
tcpdump file: 201210031400.dump.gz (867.33 MB)