Traffic Trace Info
DumpFile: 201210131400.dump
FileSize: 2233.78MB
Id: 201210131400
StartTime: Sat Oct 13 14:00:01 2012
EndTime: Sat Oct 13 14:15:00 2012
TotalTime: 899.60 seconds
TotalCapSize: 1771.55MB CapLen: 96 bytes
# of packets: 30292117 (23420.51MB)
AvgRate: 218.35Mbps stddev:58.41M
IP flow (unique src/dst pair) Information
# of flows: 1875702 (avg. 16.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.2% 1.5% 1.2% 1.2% 1.1% 1.0% 0.8% 0.8% 0.7% 0.7%
IP address Information
# of IPv4 addresses: 1470641
Top 10 bandwidth usage (bytes/total in %):
25.4% 16.1% 5.1% 3.8% 2.7% 2.5% 2.4% 2.3% 2.1% 1.8%
# of IPv6 addresses: 6948
Top 10 bandwidth usage (bytes/total in %):
87.6% 85.5% 0.9% 0.9% 0.7% 0.7% 0.7% 0.5% 0.5% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201210131400.pktlen.png)
detailed numbers
[ 32- 63]: 5732815
[ 64- 127]: 6909172
[ 128- 255]: 803971
[ 256- 511]: 667920
[ 512- 1023]: 1115862
[ 1024- 2047]: 15062377
Protocol Breakdown
![[protocol breakdown chart]](201210131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30292117 (100.00%) 24558183923 (100.00%) 810.71
ip 26897372 ( 88.79%) 21509368495 ( 87.59%) 799.68
tcp 22964420 ( 75.81%) 20190234927 ( 82.21%) 879.20
http(s) 12818181 ( 42.32%) 16873791805 ( 68.71%) 1316.40
http(c) 6005289 ( 19.82%) 1000915657 ( 4.08%) 166.67
squid 45770 ( 0.15%) 20757134 ( 0.08%) 453.51
smtp 69968 ( 0.23%) 26016237 ( 0.11%) 371.83
ftp 55132 ( 0.18%) 42196791 ( 0.17%) 765.38
pop3 1469 ( 0.00%) 155156 ( 0.00%) 105.62
imap 3219 ( 0.01%) 785417 ( 0.00%) 243.99
telnet 9245 ( 0.03%) 702641 ( 0.00%) 76.00
ssh 870173 ( 2.87%) 268977594 ( 1.10%) 309.11
dns 2249 ( 0.01%) 258157 ( 0.00%) 114.79
bgp 716 ( 0.00%) 290589 ( 0.00%) 405.85
napster 114 ( 0.00%) 8704 ( 0.00%) 76.35
realaud 8 ( 0.00%) 595 ( 0.00%) 74.38
rtsp 1577 ( 0.01%) 2052850 ( 0.01%) 1301.74
icecast 4095 ( 0.01%) 378429 ( 0.00%) 92.41
hotline 48 ( 0.00%) 3741 ( 0.00%) 77.94
other 3077167 ( 10.16%) 1952943430 ( 7.95%) 634.66
udp 2164630 ( 7.15%) 1102895978 ( 4.49%) 509.51
dns 817058 ( 2.70%) 519044460 ( 2.11%) 635.26
rip 2 ( 0.00%) 382 ( 0.00%) 191.00
realaud 7 ( 0.00%) 1086 ( 0.00%) 155.14
halflif 264 ( 0.00%) 181177 ( 0.00%) 686.28
starcra 32 ( 0.00%) 5722 ( 0.00%) 178.81
everque 151 ( 0.00%) 21499 ( 0.00%) 142.38
unreal 1 ( 0.00%) 95 ( 0.00%) 95.00
quake 9 ( 0.00%) 1481 ( 0.00%) 164.56
cuseeme 5 ( 0.00%) 581 ( 0.00%) 116.20
other 1346922 ( 4.45%) 583532743 ( 2.38%) 433.23
icmp 1394733 ( 4.60%) 91911839 ( 0.37%) 65.90
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 5029 ( 0.02%) 1821046 ( 0.01%) 362.11
ip6 329061 ( 1.09%) 109687927 ( 0.45%) 333.34
pim 14 ( 0.00%) 840 ( 0.00%) 60.00
other 39300 ( 0.13%) 12796668 ( 0.05%) 325.61
frag 409749 ( 1.35%) 417824790 ( 1.70%) 1019.71
ip6 3394745 ( 11.21%) 3048815428 ( 12.41%) 898.10
tcp6 3312709 ( 10.94%) 3031992455 ( 12.35%) 915.26
http(s) 1434512 ( 4.74%) 1965572042 ( 8.00%) 1370.20
http(c) 783853 ( 2.59%) 68362348 ( 0.28%) 87.21
smtp 24 ( 0.00%) 2661 ( 0.00%) 110.88
ftp 92 ( 0.00%) 8195 ( 0.00%) 89.08
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 284 ( 0.00%) 44850 ( 0.00%) 157.92
bgp 93 ( 0.00%) 21607 ( 0.00%) 232.33
other 1093839 ( 3.61%) 997979744 ( 4.06%) 912.36
udp6 58359 ( 0.19%) 13058468 ( 0.05%) 223.76
dns 50374 ( 0.17%) 12169242 ( 0.05%) 241.58
other 7985 ( 0.03%) 889226 ( 0.00%) 111.36
icmp6 22914 ( 0.08%) 3121094 ( 0.01%) 136.21
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 650 ( 0.00%) 628037 ( 0.00%) 966.21
tcpdump file: 201210131400.dump.gz (679.20 MB)