Traffic Trace Info
DumpFile: 201210061400.dump
FileSize: 2378.58MB
Id: 201210061400
StartTime: Sat Oct 6 14:00:00 2012
EndTime: Sat Oct 6 14:15:00 2012
TotalTime: 900.12 seconds
TotalCapSize: 1875.73MB CapLen: 96 bytes
# of packets: 32954564 (28313.27MB)
AvgRate: 263.86Mbps stddev:70.55M
IP flow (unique src/dst pair) Information
# of flows: 1656319 (avg. 19.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 5.5% 4.9% 4.2% 2.8% 2.4% 1.6% 1.4% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 1347968
Top 10 bandwidth usage (bytes/total in %):
25.3% 15.6% 7.5% 6.4% 6.2% 5.5% 5.5% 4.8% 4.7% 3.6%
# of IPv6 addresses: 8319
Top 10 bandwidth usage (bytes/total in %):
60.6% 52.7% 17.6% 13.5% 4.8% 4.0% 2.6% 1.9% 1.8% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201210061400.pktlen.png)
detailed numbers
[ 32- 63]: 6509701
[ 64- 127]: 5321831
[ 128- 255]: 772403
[ 256- 511]: 628931
[ 512- 1023]: 811752
[ 1024- 2047]: 18909946
Protocol Breakdown
![[protocol breakdown chart]](201210061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32954564 (100.00%) 29688613477 (100.00%) 900.90
ip 30383112 ( 92.20%) 26607904557 ( 89.62%) 875.75
tcp 25944902 ( 78.73%) 24822844193 ( 83.61%) 956.75
http(s) 12745385 ( 38.68%) 16798542144 ( 56.58%) 1318.01
http(c) 6257521 ( 18.99%) 1844713510 ( 6.21%) 294.80
squid 340797 ( 1.03%) 282876425 ( 0.95%) 830.04
smtp 55728 ( 0.17%) 16516893 ( 0.06%) 296.38
ftp 17653 ( 0.05%) 4273330 ( 0.01%) 242.07
pop3 1213 ( 0.00%) 252568 ( 0.00%) 208.22
imap 2951 ( 0.01%) 932884 ( 0.00%) 316.12
telnet 6324 ( 0.02%) 489833 ( 0.00%) 77.46
ssh 19130 ( 0.06%) 4282300 ( 0.01%) 223.85
dns 1482 ( 0.00%) 241296 ( 0.00%) 162.82
bgp 2263 ( 0.01%) 1745223 ( 0.01%) 771.20
napster 69 ( 0.00%) 5997 ( 0.00%) 86.91
realaud 148 ( 0.00%) 16607 ( 0.00%) 112.21
icecast 742 ( 0.00%) 135069 ( 0.00%) 182.03
hotline 42 ( 0.00%) 4039 ( 0.00%) 96.17
other 6493454 ( 19.70%) 5867816075 ( 19.76%) 903.65
udp 2462730 ( 7.47%) 1434076214 ( 4.83%) 582.31
dns 516807 ( 1.57%) 306260459 ( 1.03%) 592.60
rip 2 ( 0.00%) 298 ( 0.00%) 149.00
realaud 5 ( 0.00%) 744 ( 0.00%) 148.80
halflif 23 ( 0.00%) 3664 ( 0.00%) 159.30
starcra 50 ( 0.00%) 5155 ( 0.00%) 103.10
everque 98 ( 0.00%) 16589 ( 0.00%) 169.28
unreal 18 ( 0.00%) 2641 ( 0.00%) 146.72
quake 8 ( 0.00%) 799 ( 0.00%) 99.88
cuseeme 5 ( 0.00%) 704 ( 0.00%) 140.80
other 1945386 ( 5.90%) 1127732266 ( 3.80%) 579.70
icmp 1441345 ( 4.37%) 103894908 ( 0.35%) 72.08
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 18020 ( 0.05%) 11006480 ( 0.04%) 610.79
ip6 372909 ( 1.13%) 95073103 ( 0.32%) 254.95
pim 14 ( 0.00%) 840 ( 0.00%) 60.00
other 143007 ( 0.43%) 140989549 ( 0.47%) 985.89
frag 211779 ( 0.64%) 231097191 ( 0.78%) 1091.22
ip6 2571452 ( 7.80%) 3080708920 ( 10.38%) 1198.04
tcp6 2424045 ( 7.36%) 3001217738 ( 10.11%) 1238.10
http(s) 521499 ( 1.58%) 623117598 ( 2.10%) 1194.86
http(c) 110799 ( 0.34%) 10909653 ( 0.04%) 98.46
smtp 217 ( 0.00%) 50462 ( 0.00%) 232.54
ftp 2676 ( 0.01%) 283008 ( 0.00%) 105.76
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 92 ( 0.00%) 30934 ( 0.00%) 336.24
bgp 259 ( 0.00%) 197491 ( 0.00%) 762.51
icecast 4 ( 0.00%) 333 ( 0.00%) 83.25
other 1788487 ( 5.43%) 2366627251 ( 7.97%) 1323.26
udp6 115339 ( 0.35%) 74796246 ( 0.25%) 648.49
dns 38557 ( 0.12%) 11311166 ( 0.04%) 293.36
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 3 ( 0.00%) 316 ( 0.00%) 105.33
other 76778 ( 0.23%) 63484656 ( 0.21%) 826.86
icmp6 31274 ( 0.09%) 4004975 ( 0.01%) 128.06
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 679 ( 0.00%) 674333 ( 0.00%) 993.13
tcpdump file: 201210061400.dump.gz (703.51 MB)