Traffic Trace Info
DumpFile: 201210111400.dump
FileSize: 2745.13MB
Id: 201210111400
StartTime: Thu Oct 11 14:00:01 2012
EndTime: Thu Oct 11 14:15:00 2012
TotalTime: 899.64 seconds
TotalCapSize: -1926.43MB CapLen: 96 bytes
# of packets: 37719584 (29029.76MB)
AvgRate: 270.64Mbps stddev:47.85M
IP flow (unique src/dst pair) Information
# of flows: 1938036 (avg. 19.46 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 2.9% 2.4% 1.8% 1.7% 1.6% 1.6% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 1441843
Top 10 bandwidth usage (bytes/total in %):
8.3% 7.6% 7.2% 5.4% 3.8% 3.2% 3.1% 3.1% 2.9% 2.7%
# of IPv6 addresses: 8515
Top 10 bandwidth usage (bytes/total in %):
25.9% 8.4% 8.2% 6.9% 3.1% 3.0% 2.9% 2.8% 2.0% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201210111400.pktlen.png)
detailed numbers
[ 32- 63]: 6786783
[ 64- 127]: 8377497
[ 128- 255]: 979584
[ 256- 511]: 1493049
[ 512- 1023]: 1161804
[ 1024- 2047]: 18920867
Protocol Breakdown
![[protocol breakdown chart]](201210111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37719584 (100.00%) 30439909277 (100.00%) 807.01
ip 35941681 ( 95.29%) 28897658262 ( 94.93%) 804.02
tcp 30394854 ( 80.58%) 26145416542 ( 85.89%) 860.19
http(s) 15963416 ( 42.32%) 20480062837 ( 67.28%) 1282.94
http(c) 11019292 ( 29.21%) 3380743721 ( 11.11%) 306.80
squid 81748 ( 0.22%) 27998197 ( 0.09%) 342.49
smtp 70707 ( 0.19%) 17775029 ( 0.06%) 251.39
ftp 38481 ( 0.10%) 35703085 ( 0.12%) 927.81
pop3 5695 ( 0.02%) 3379570 ( 0.01%) 593.43
imap 2318 ( 0.01%) 266929 ( 0.00%) 115.15
telnet 51754 ( 0.14%) 3848228 ( 0.01%) 74.36
ssh 446015 ( 1.18%) 64189290 ( 0.21%) 143.92
dns 1675 ( 0.00%) 259416 ( 0.00%) 154.88
bgp 596 ( 0.00%) 159793 ( 0.00%) 268.11
napster 5 ( 0.00%) 323 ( 0.00%) 64.60
realaud 53 ( 0.00%) 5766 ( 0.00%) 108.79
icecast 7445 ( 0.02%) 6209778 ( 0.02%) 834.09
hotline 37 ( 0.00%) 3531 ( 0.00%) 95.43
other 2705616 ( 7.17%) 2124810989 ( 6.98%) 785.33
udp 3211998 ( 8.52%) 2125766757 ( 6.98%) 661.82
dns 949338 ( 2.52%) 624021991 ( 2.05%) 657.32
realaud 4 ( 0.00%) 390 ( 0.00%) 97.50
halflif 32 ( 0.00%) 8854 ( 0.00%) 276.69
starcra 21 ( 0.00%) 2421 ( 0.00%) 115.29
everque 151 ( 0.00%) 29327 ( 0.00%) 194.22
unreal 4 ( 0.00%) 492 ( 0.00%) 123.00
quake 18 ( 0.00%) 2076 ( 0.00%) 115.33
cuseeme 2 ( 0.00%) 158 ( 0.00%) 79.00
other 2262269 ( 6.00%) 1501629082 ( 4.93%) 663.77
icmp 1389747 ( 3.68%) 90657899 ( 0.30%) 65.23
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 27097 ( 0.07%) 5268478 ( 0.02%) 194.43
ip6 855176 ( 2.27%) 515712828 ( 1.69%) 603.05
pim 14 ( 0.00%) 840 ( 0.00%) 60.00
other 62611 ( 0.17%) 14815758 ( 0.05%) 236.63
frag 473855 ( 1.26%) 517684365 ( 1.70%) 1092.50
ip6 1777903 ( 4.71%) 1542251015 ( 5.07%) 867.46
tcp6 1631881 ( 4.33%) 1476974472 ( 4.85%) 905.07
http(s) 1222209 ( 3.24%) 1384156970 ( 4.55%) 1132.50
http(c) 312759 ( 0.83%) 30362282 ( 0.10%) 97.08
smtp 218 ( 0.00%) 131718 ( 0.00%) 604.21
ftp 14105 ( 0.04%) 5199945 ( 0.02%) 368.66
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 506 ( 0.00%) 92462 ( 0.00%) 182.73
bgp 91 ( 0.00%) 20598 ( 0.00%) 226.35
other 81981 ( 0.22%) 57009489 ( 0.19%) 695.40
udp6 123501 ( 0.33%) 60833584 ( 0.20%) 492.58
dns 69295 ( 0.18%) 20738012 ( 0.07%) 299.27
halflif 1 ( 0.00%) 111 ( 0.00%) 111.00
unreal 1 ( 0.00%) 118 ( 0.00%) 118.00
quake 2 ( 0.00%) 228 ( 0.00%) 114.00
other 54202 ( 0.14%) 40095115 ( 0.13%) 739.73
icmp6 21026 ( 0.06%) 3119431 ( 0.01%) 148.36
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1382 ( 0.00%) 1308104 ( 0.00%) 946.53
tcpdump file: 201210111400.dump.gz (879.84 MB)