Traffic Trace Info
DumpFile: 201210071400.dump
FileSize: 2367.45MB
Id: 201210071400
StartTime: Sun Oct 7 14:00:00 2012
EndTime: Sun Oct 7 14:15:01 2012
TotalTime: 900.44 seconds
TotalCapSize: 1863.05MB CapLen: 96 bytes
# of packets: 33055757 (27847.30MB)
AvgRate: 259.41Mbps stddev:54.53M
IP flow (unique src/dst pair) Information
# of flows: 1684494 (avg. 19.62 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 4.6% 3.5% 3.4% 2.4% 2.4% 2.0% 2.0% 1.8% 1.5%
IP address Information
# of IPv4 addresses: 1351240
Top 10 bandwidth usage (bytes/total in %):
15.8% 11.9% 10.4% 7.7% 6.8% 6.3% 6.1% 5.6% 4.9% 4.3%
# of IPv6 addresses: 7919
Top 10 bandwidth usage (bytes/total in %):
66.4% 39.4% 27.0% 7.2% 7.2% 6.3% 3.3% 2.2% 1.4% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201210071400.pktlen.png)
detailed numbers
[ 32- 63]: 6000668
[ 64- 127]: 5849756
[ 128- 255]: 685989
[ 256- 511]: 516252
[ 512- 1023]: 1482168
[ 1024- 2047]: 18520924
Protocol Breakdown
![[protocol breakdown chart]](201210071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33055757 (100.00%) 29200013036 (100.00%) 883.36
ip 31608986 ( 95.62%) 27747459914 ( 95.03%) 877.83
tcp 26827071 ( 81.16%) 25525111490 ( 87.41%) 951.47
http(s) 13733257 ( 41.55%) 18316812825 ( 62.73%) 1333.76
http(c) 5854758 ( 17.71%) 1012075534 ( 3.47%) 172.86
squid 238044 ( 0.72%) 177869151 ( 0.61%) 747.21
smtp 38563 ( 0.12%) 10891503 ( 0.04%) 282.43
ftp 18899 ( 0.06%) 4597841 ( 0.02%) 243.28
pop3 1780 ( 0.01%) 509719 ( 0.00%) 286.36
imap 1613 ( 0.00%) 327499 ( 0.00%) 203.04
telnet 7087 ( 0.02%) 544881 ( 0.00%) 76.88
ssh 303139 ( 0.92%) 35036037 ( 0.12%) 115.58
dns 5317 ( 0.02%) 3670548 ( 0.01%) 690.34
bgp 557 ( 0.00%) 124843 ( 0.00%) 224.13
napster 16 ( 0.00%) 3015 ( 0.00%) 188.44
realaud 9 ( 0.00%) 596 ( 0.00%) 66.22
icecast 492 ( 0.00%) 87174 ( 0.00%) 177.18
hotline 80 ( 0.00%) 8874 ( 0.00%) 110.92
other 6623460 ( 20.04%) 5962551450 ( 20.42%) 900.22
udp 2998077 ( 9.07%) 2000801897 ( 6.85%) 667.36
dns 765551 ( 2.32%) 526456727 ( 1.80%) 687.68
realaud 18 ( 0.00%) 1294 ( 0.00%) 71.89
halflif 56 ( 0.00%) 7189 ( 0.00%) 128.38
starcra 47 ( 0.00%) 7000 ( 0.00%) 148.94
everque 177 ( 0.00%) 23034 ( 0.00%) 130.14
unreal 7 ( 0.00%) 1117 ( 0.00%) 159.57
quake 5 ( 0.00%) 451 ( 0.00%) 90.20
cuseeme 6 ( 0.00%) 382 ( 0.00%) 63.67
other 2232136 ( 6.75%) 1474256438 ( 5.05%) 660.47
icmp 1427836 ( 4.32%) 94389913 ( 0.32%) 66.11
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 10855 ( 0.03%) 5669834 ( 0.02%) 522.32
ip6 283377 ( 0.86%) 105760799 ( 0.36%) 373.22
pim 14 ( 0.00%) 840 ( 0.00%) 60.00
other 61572 ( 0.19%) 15705981 ( 0.05%) 255.08
frag 397451 ( 1.20%) 433191137 ( 1.48%) 1089.92
ip6 1446771 ( 4.38%) 1452553122 ( 4.97%) 1004.00
tcp6 1214670 ( 3.67%) 1332149447 ( 4.56%) 1096.72
http(s) 303235 ( 0.92%) 322497974 ( 1.10%) 1063.52
http(c) 108887 ( 0.33%) 10671102 ( 0.04%) 98.00
smtp 39 ( 0.00%) 6759 ( 0.00%) 173.31
ftp 1632 ( 0.00%) 171328 ( 0.00%) 104.98
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 307 ( 0.00%) 40480 ( 0.00%) 131.86
bgp 95 ( 0.00%) 21327 ( 0.00%) 224.49
other 800463 ( 2.42%) 998739469 ( 3.42%) 1247.70
udp6 208807 ( 0.63%) 116697174 ( 0.40%) 558.88
dns 34751 ( 0.11%) 9745810 ( 0.03%) 280.45
starcra 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 2 ( 0.00%) 199 ( 0.00%) 99.50
cuseeme 1 ( 0.00%) 108 ( 0.00%) 108.00
other 174052 ( 0.53%) 106950951 ( 0.37%) 614.48
icmp6 22480 ( 0.07%) 3030415 ( 0.01%) 134.80
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 701 ( 0.00%) 660712 ( 0.00%) 942.53
tcpdump file: 201210071400.dump.gz (713.48 MB)