Traffic Trace Info
DumpFile: 201210051400.dump
FileSize: 2356.82MB
Id: 201210051400
StartTime: Fri Oct 5 14:00:01 2012
EndTime: Fri Oct 5 14:15:01 2012
TotalTime: 899.72 seconds
TotalCapSize: 1852.72MB CapLen: 96 bytes
# of packets: 33036293 (26378.65MB)
AvgRate: 245.93Mbps stddev:41.25M
IP flow (unique src/dst pair) Information
# of flows: 1775459 (avg. 18.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 2.8% 1.9% 1.9% 1.8% 1.5% 1.4% 1.3% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 1379820
Top 10 bandwidth usage (bytes/total in %):
13.7% 7.4% 5.8% 5.5% 5.4% 5.3% 4.9% 4.7% 4.4% 4.0%
# of IPv6 addresses: 9826
Top 10 bandwidth usage (bytes/total in %):
31.8% 29.0% 13.2% 7.2% 6.5% 4.5% 4.5% 2.8% 2.7% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201210051400.pktlen.png)
detailed numbers
[ 32- 63]: 6727802
[ 64- 127]: 6326096
[ 128- 255]: 812851
[ 256- 511]: 929250
[ 512- 1023]: 924677
[ 1024- 2047]: 17315617
Protocol Breakdown
![[protocol breakdown chart]](201210051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33036293 (100.00%) 27660016271 (100.00%) 837.26
ip 31311569 ( 94.78%) 25889939931 ( 93.60%) 826.85
tcp 25801781 ( 78.10%) 23410999534 ( 84.64%) 907.34
http(s) 14039123 ( 42.50%) 17924953647 ( 64.80%) 1276.79
http(c) 7827169 ( 23.69%) 2635815717 ( 9.53%) 336.75
squid 947124 ( 2.87%) 907325622 ( 3.28%) 957.98
smtp 72568 ( 0.22%) 33727174 ( 0.12%) 464.77
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 19292 ( 0.06%) 4516029 ( 0.02%) 234.09
pop3 6563 ( 0.02%) 4068023 ( 0.01%) 619.84
imap 4089 ( 0.01%) 1184823 ( 0.00%) 289.76
telnet 10234 ( 0.03%) 778583 ( 0.00%) 76.08
ssh 22831 ( 0.07%) 4696678 ( 0.02%) 205.71
dns 5992 ( 0.02%) 4333575 ( 0.02%) 723.23
bgp 556 ( 0.00%) 130000 ( 0.00%) 233.81
napster 17 ( 0.00%) 2238 ( 0.00%) 131.65
realaud 102 ( 0.00%) 11210 ( 0.00%) 109.90
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 798 ( 0.00%) 169481 ( 0.00%) 212.38
hotline 5 ( 0.00%) 671 ( 0.00%) 134.20
other 2845310 ( 8.61%) 1889285577 ( 6.83%) 664.00
udp 3354981 ( 10.16%) 2013950421 ( 7.28%) 600.29
dns 639120 ( 1.93%) 332489624 ( 1.20%) 520.23
rip 5 ( 0.00%) 375 ( 0.00%) 75.00
realaud 7 ( 0.00%) 1233 ( 0.00%) 176.14
halflif 103 ( 0.00%) 109770 ( 0.00%) 1065.73
starcra 40 ( 0.00%) 4534 ( 0.00%) 113.35
everque 166 ( 0.00%) 23049 ( 0.00%) 138.85
unreal 14 ( 0.00%) 1822 ( 0.00%) 130.14
quake 8 ( 0.00%) 697 ( 0.00%) 87.12
cuseeme 11 ( 0.00%) 1153 ( 0.00%) 104.82
other 2715375 ( 8.22%) 1681246693 ( 6.08%) 619.16
icmp 1450403 ( 4.39%) 136783059 ( 0.49%) 94.31
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 11771 ( 0.04%) 4116098 ( 0.01%) 349.68
ip6 628010 ( 1.90%) 306495784 ( 1.11%) 488.04
pim 14 ( 0.00%) 840 ( 0.00%) 60.00
other 64425 ( 0.20%) 17575035 ( 0.06%) 272.80
frag 201229 ( 0.61%) 219806203 ( 0.79%) 1092.32
ip6 1724724 ( 5.22%) 1770076340 ( 6.40%) 1026.30
tcp6 1620966 ( 4.91%) 1742623639 ( 6.30%) 1075.05
http(s) 909585 ( 2.75%) 1025709254 ( 3.71%) 1127.67
http(c) 199312 ( 0.60%) 20620223 ( 0.07%) 103.46
smtp 194 ( 0.00%) 71576 ( 0.00%) 368.95
ftp 7967 ( 0.02%) 815920 ( 0.00%) 102.41
pop3 86 ( 0.00%) 17755 ( 0.00%) 206.45
ssh 14 ( 0.00%) 1240 ( 0.00%) 88.57
dns 384 ( 0.00%) 57799 ( 0.00%) 150.52
bgp 90 ( 0.00%) 21766 ( 0.00%) 241.84
other 503334 ( 1.52%) 695308106 ( 2.51%) 1381.41
udp6 70029 ( 0.21%) 22061343 ( 0.08%) 315.03
dns 59366 ( 0.18%) 18269139 ( 0.07%) 307.74
starcra 1 ( 0.00%) 96 ( 0.00%) 96.00
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
other 10661 ( 0.03%) 3792002 ( 0.01%) 355.69
icmp6 32415 ( 0.10%) 4226497 ( 0.02%) 130.39
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1199 ( 0.00%) 1149201 ( 0.00%) 958.47
tcpdump file: 201210051400.dump.gz (749.97 MB)