Traffic Trace Info
DumpFile: 201210041400.dump
FileSize: 2593.31MB
Id: 201210041400
StartTime: Thu Oct 4 14:00:00 2012
EndTime: Thu Oct 4 14:15:01 2012
TotalTime: 900.71 seconds
TotalCapSize: -2044.34MB CapLen: 96 bytes
# of packets: 35497528 (26655.40MB)
AvgRate: 248.24Mbps stddev:44.74M
IP flow (unique src/dst pair) Information
# of flows: 1895926 (avg. 18.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 2.1% 2.0% 1.8% 1.6% 1.6% 1.2% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1380331
Top 10 bandwidth usage (bytes/total in %):
11.9% 6.7% 4.7% 4.5% 4.0% 3.6% 3.1% 3.1% 2.8% 2.6%
# of IPv6 addresses: 9334
Top 10 bandwidth usage (bytes/total in %):
29.1% 25.0% 25.0% 14.7% 4.6% 4.5% 4.0% 3.4% 2.4% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201210041400.pktlen.png)
detailed numbers
[ 32- 63]: 6137227
[ 64- 127]: 9222125
[ 128- 255]: 803671
[ 256- 511]: 952220
[ 512- 1023]: 888502
[ 1024- 2047]: 17493783
Protocol Breakdown
![[protocol breakdown chart]](201210041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35497528 (100.00%) 27950211133 (100.00%) 787.38
ip 33135290 ( 93.35%) 25672070253 ( 91.85%) 774.77
tcp 28221217 ( 79.50%) 23501799694 ( 84.08%) 832.77
http(s) 14559009 ( 41.01%) 18501414640 ( 66.19%) 1270.79
http(c) 8791899 ( 24.77%) 1980931708 ( 7.09%) 225.31
squid 465518 ( 1.31%) 295640303 ( 1.06%) 635.08
smtp 79559 ( 0.22%) 41098876 ( 0.15%) 516.58
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 127116 ( 0.36%) 12498420 ( 0.04%) 98.32
pop3 4621 ( 0.01%) 1932767 ( 0.01%) 418.26
imap 2204 ( 0.01%) 501584 ( 0.00%) 227.58
telnet 4391 ( 0.01%) 347100 ( 0.00%) 79.05
ssh 258851 ( 0.73%) 41788145 ( 0.15%) 161.44
dns 3726 ( 0.01%) 2264362 ( 0.01%) 607.72
bgp 558 ( 0.00%) 125293 ( 0.00%) 224.54
napster 105 ( 0.00%) 7169 ( 0.00%) 68.28
realaud 140 ( 0.00%) 17191 ( 0.00%) 122.79
icecast 2034 ( 0.01%) 474179 ( 0.00%) 233.13
hotline 41 ( 0.00%) 3501 ( 0.00%) 85.39
other 3921444 ( 11.05%) 2622754396 ( 9.38%) 668.82
udp 3049868 ( 8.59%) 1910596878 ( 6.84%) 626.45
dns 724485 ( 2.04%) 379504748 ( 1.36%) 523.83
realaud 9 ( 0.00%) 1051 ( 0.00%) 116.78
halflif 36 ( 0.00%) 4596 ( 0.00%) 127.67
starcra 31 ( 0.00%) 3725 ( 0.00%) 120.16
everque 162 ( 0.00%) 32811 ( 0.00%) 202.54
unreal 15 ( 0.00%) 2013 ( 0.00%) 134.20
quake 27 ( 0.00%) 4872 ( 0.00%) 180.44
cuseeme 4 ( 0.00%) 615 ( 0.00%) 153.75
other 2324865 ( 6.55%) 1530929688 ( 5.48%) 658.50
icmp 1396885 ( 3.94%) 92502609 ( 0.33%) 66.22
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 11760 ( 0.03%) 3774024 ( 0.01%) 320.92
ip6 387941 ( 1.09%) 145836233 ( 0.52%) 375.92
pim 85 ( 0.00%) 5100 ( 0.00%) 60.00
other 67350 ( 0.19%) 17536555 ( 0.06%) 260.38
frag 252656 ( 0.71%) 275875816 ( 0.99%) 1091.90
ip6 2362238 ( 6.65%) 2278140880 ( 8.15%) 964.40
tcp6 2252926 ( 6.35%) 2244683966 ( 8.03%) 996.34
http(s) 1353109 ( 3.81%) 1537583526 ( 5.50%) 1136.33
http(c) 240055 ( 0.68%) 26043369 ( 0.09%) 108.49
smtp 169 ( 0.00%) 42561 ( 0.00%) 251.84
ftp 2288 ( 0.01%) 235756 ( 0.00%) 103.04
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 300 ( 0.00%) 47859 ( 0.00%) 159.53
bgp 96 ( 0.00%) 22858 ( 0.00%) 238.10
other 656897 ( 1.85%) 680707029 ( 2.44%) 1036.25
udp6 79420 ( 0.22%) 28318719 ( 0.10%) 356.57
dns 66579 ( 0.19%) 20291601 ( 0.07%) 304.77
halflif 2 ( 0.00%) 203 ( 0.00%) 101.50
quake 3 ( 0.00%) 276 ( 0.00%) 92.00
other 12836 ( 0.04%) 8026639 ( 0.03%) 625.32
icmp6 28467 ( 0.08%) 3860769 ( 0.01%) 135.62
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1309 ( 0.00%) 1261630 ( 0.00%) 963.81
tcpdump file: 201210041400.dump.gz (830.09 MB)