Traffic Trace Info
DumpFile: 201210101400.dump
FileSize: 3147.00MB
Id: 201210101400
StartTime: Wed Oct 10 14:00:00 2012
EndTime: Wed Oct 10 14:15:00 2012
TotalTime: 900.31 seconds
TotalCapSize: -1600.68MB CapLen: 96 bytes
# of packets: 42708297 (34796.92MB)
AvgRate: 324.22Mbps stddev:53.29M
IP flow (unique src/dst pair) Information
# of flows: 1918815 (avg. 22.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.3% 1.9% 1.6% 1.4% 1.4% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 1444806
Top 10 bandwidth usage (bytes/total in %):
9.2% 7.3% 6.8% 5.1% 4.4% 4.2% 4.0% 3.3% 2.4% 2.3%
# of IPv6 addresses: 8594
Top 10 bandwidth usage (bytes/total in %):
29.5% 29.5% 7.0% 6.4% 2.7% 2.3% 2.0% 2.0% 2.0% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201210101400.pktlen.png)
detailed numbers
[ 32- 63]: 6532255
[ 64- 127]: 9737674
[ 128- 255]: 921297
[ 256- 511]: 1433466
[ 512- 1023]: 1185471
[ 1024- 2047]: 22898134
Protocol Breakdown
![[protocol breakdown chart]](201210101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42708297 (100.00%) 36487212794 (100.00%) 854.34
ip 40934653 ( 95.85%) 34790786926 ( 95.35%) 849.91
tcp 36069709 ( 84.46%) 32839641935 ( 90.00%) 910.45
http(s) 21626701 ( 50.64%) 28134280842 ( 77.11%) 1300.90
http(c) 11810919 ( 27.65%) 3031107444 ( 8.31%) 256.64
squid 98033 ( 0.23%) 38302369 ( 0.10%) 390.71
smtp 100171 ( 0.23%) 43882416 ( 0.12%) 438.08
ftp 18467 ( 0.04%) 3000702 ( 0.01%) 162.49
pop3 13273 ( 0.03%) 9972699 ( 0.03%) 751.35
imap 2453 ( 0.01%) 446905 ( 0.00%) 182.19
telnet 23116 ( 0.05%) 1745030 ( 0.00%) 75.49
ssh 140065 ( 0.33%) 22975882 ( 0.06%) 164.04
dns 1930 ( 0.00%) 279117 ( 0.00%) 144.62
bgp 604 ( 0.00%) 166269 ( 0.00%) 275.28
napster 7 ( 0.00%) 807 ( 0.00%) 115.29
realaud 95 ( 0.00%) 17859 ( 0.00%) 187.99
rtsp 82824 ( 0.19%) 115443880 ( 0.32%) 1393.85
icecast 15347 ( 0.04%) 15364108 ( 0.04%) 1001.11
hotline 156 ( 0.00%) 9703 ( 0.00%) 62.20
other 2135548 ( 5.00%) 1422645903 ( 3.90%) 666.17
udp 2563515 ( 6.00%) 1454226312 ( 3.99%) 567.28
dns 744508 ( 1.74%) 314936933 ( 0.86%) 423.01
rip 4 ( 0.00%) 258 ( 0.00%) 64.50
realaud 8 ( 0.00%) 756 ( 0.00%) 94.50
halflif 12 ( 0.00%) 1201 ( 0.00%) 100.08
starcra 39 ( 0.00%) 4493 ( 0.00%) 115.21
everque 198 ( 0.00%) 32866 ( 0.00%) 165.99
unreal 16 ( 0.00%) 2527 ( 0.00%) 157.94
quake 10 ( 0.00%) 1000 ( 0.00%) 100.00
cuseeme 3 ( 0.00%) 196 ( 0.00%) 65.33
other 1818577 ( 4.26%) 1139148677 ( 3.12%) 626.40
icmp 1429412 ( 3.35%) 93697394 ( 0.26%) 65.55
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 33086 ( 0.08%) 10477676 ( 0.03%) 316.68
ip6 706807 ( 1.65%) 335022385 ( 0.92%) 473.99
pim 14 ( 0.00%) 840 ( 0.00%) 60.00
other 131926 ( 0.31%) 57701224 ( 0.16%) 437.38
frag 164387 ( 0.38%) 179569920 ( 0.49%) 1092.36
ip6 1773644 ( 4.15%) 1696425868 ( 4.65%) 956.46
tcp6 1629636 ( 3.82%) 1646689576 ( 4.51%) 1010.46
http(s) 1011253 ( 2.37%) 1068918824 ( 2.93%) 1057.02
http(c) 201525 ( 0.47%) 21344032 ( 0.06%) 105.91
smtp 251 ( 0.00%) 167126 ( 0.00%) 665.84
ftp 33193 ( 0.08%) 10308087 ( 0.03%) 310.55
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 331 ( 0.00%) 59422 ( 0.00%) 179.52
bgp 93 ( 0.00%) 21732 ( 0.00%) 233.68
other 382978 ( 0.90%) 545869345 ( 1.50%) 1425.33
udp6 118200 ( 0.28%) 44854412 ( 0.12%) 379.48
dns 73634 ( 0.17%) 21868735 ( 0.06%) 296.99
quake 1 ( 0.00%) 99 ( 0.00%) 99.00
other 44565 ( 0.10%) 22985578 ( 0.06%) 515.78
icmp6 24239 ( 0.06%) 3470690 ( 0.01%) 143.19
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1456 ( 0.00%) 1395798 ( 0.00%) 958.65
tcpdump file: 201210101400.dump.gz (987.21 MB)