Traffic Trace Info
DumpFile: 201210121400.dump
FileSize: 2659.21MB
Id: 201210121400
StartTime: Fri Oct 12 14:00:01 2012
EndTime: Fri Oct 12 14:15:00 2012
TotalTime: 899.74 seconds
TotalCapSize: -2006.98MB CapLen: 96 bytes
# of packets: 37367751 (29036.57MB)
AvgRate: 270.72Mbps stddev:42.77M
IP flow (unique src/dst pair) Information
# of flows: 3315017 (avg. 11.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 2.6% 1.8% 1.4% 1.2% 1.1% 1.0% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 2397552
Top 10 bandwidth usage (bytes/total in %):
12.0% 7.5% 6.6% 5.8% 4.1% 3.3% 2.8% 2.8% 2.8% 2.6%
# of IPv6 addresses: 7717
Top 10 bandwidth usage (bytes/total in %):
15.7% 11.2% 5.3% 3.6% 3.6% 3.3% 2.9% 2.6% 2.6% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201210121400.pktlen.png)
detailed numbers
[ 32- 63]: 7626497
[ 64- 127]: 7423464
[ 128- 255]: 1005549
[ 256- 511]: 999002
[ 512- 1023]: 1146441
[ 1024- 2047]: 19166798
Protocol Breakdown
![[protocol breakdown chart]](201210121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37367751 (100.00%) 30447048365 (100.00%) 814.79
ip 36128240 ( 96.68%) 29387741649 ( 96.52%) 813.43
tcp 28491310 ( 76.25%) 26399746239 ( 86.71%) 926.59
http(s) 16867076 ( 45.14%) 21754845881 ( 71.45%) 1289.78
http(c) 8129532 ( 21.76%) 2159078575 ( 7.09%) 265.58
squid 57319 ( 0.15%) 17660921 ( 0.06%) 308.12
smtp 93667 ( 0.25%) 43495877 ( 0.14%) 464.37
ftp 41075 ( 0.11%) 32299263 ( 0.11%) 786.35
pop3 3303 ( 0.01%) 1333667 ( 0.00%) 403.77
imap 3238 ( 0.01%) 770284 ( 0.00%) 237.89
telnet 8284 ( 0.02%) 630564 ( 0.00%) 76.12
ssh 296132 ( 0.79%) 189721516 ( 0.62%) 640.67
dns 2464 ( 0.01%) 287614 ( 0.00%) 116.73
bgp 742 ( 0.00%) 311191 ( 0.00%) 419.39
napster 10 ( 0.00%) 606 ( 0.00%) 60.60
realaud 28 ( 0.00%) 3668 ( 0.00%) 131.00
rtsp 4891 ( 0.01%) 341605 ( 0.00%) 69.84
icecast 59020 ( 0.16%) 57308769 ( 0.19%) 971.01
hotline 56 ( 0.00%) 8564 ( 0.00%) 152.93
other 2924473 ( 7.83%) 2141647674 ( 7.03%) 732.32
udp 3597515 ( 9.63%) 1950455594 ( 6.41%) 542.17
dns 1056345 ( 2.83%) 693223028 ( 2.28%) 656.25
realaud 7 ( 0.00%) 950 ( 0.00%) 135.71
halflif 66 ( 0.00%) 11864 ( 0.00%) 179.76
starcra 35 ( 0.00%) 3179 ( 0.00%) 90.83
everque 9231 ( 0.02%) 6479545 ( 0.02%) 701.93
unreal 5 ( 0.00%) 748 ( 0.00%) 149.60
quake 44 ( 0.00%) 3409 ( 0.00%) 77.48
cuseeme 5 ( 0.00%) 520 ( 0.00%) 104.00
other 2531515 ( 6.77%) 1250635018 ( 4.11%) 494.03
icmp 2911414 ( 7.79%) 197844706 ( 0.65%) 67.95
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 483672 ( 1.29%) 567183480 ( 1.86%) 1172.66
ip6 584706 ( 1.56%) 256904819 ( 0.84%) 439.37
pim 14 ( 0.00%) 840 ( 0.00%) 60.00
other 59424 ( 0.16%) 15586701 ( 0.05%) 262.30
frag 565782 ( 1.51%) 576218542 ( 1.89%) 1018.45
ip6 1239511 ( 3.32%) 1059306716 ( 3.48%) 854.62
tcp6 1152695 ( 3.08%) 1035703205 ( 3.40%) 898.51
http(s) 955219 ( 2.56%) 1004065167 ( 3.30%) 1051.14
http(c) 183330 ( 0.49%) 18332206 ( 0.06%) 100.00
smtp 188 ( 0.00%) 87825 ( 0.00%) 467.15
ftp 617 ( 0.00%) 62901 ( 0.00%) 101.95
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 374 ( 0.00%) 86112 ( 0.00%) 230.25
bgp 112 ( 0.00%) 26960 ( 0.00%) 240.71
other 12843 ( 0.03%) 13041026 ( 0.04%) 1015.42
udp6 66432 ( 0.18%) 19248573 ( 0.06%) 289.75
dns 64404 ( 0.17%) 18928185 ( 0.06%) 293.90
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 2027 ( 0.01%) 320284 ( 0.00%) 158.01
icmp6 18713 ( 0.05%) 2796218 ( 0.01%) 149.43
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1557 ( 0.00%) 1543228 ( 0.01%) 991.15
tcpdump file: 201210121400.dump.gz (850.84 MB)