Traffic Trace Info
DumpFile: 201210141400.dump
FileSize: 1603.09MB
Id: 201210141400
StartTime: Sun Oct 14 14:00:00 2012
EndTime: Sun Oct 14 14:15:00 2012
TotalTime: 899.53 seconds
TotalCapSize: 1272.18MB CapLen: 96 bytes
# of packets: 21685851 (17406.25MB)
AvgRate: 162.32Mbps stddev:29.59M
IP flow (unique src/dst pair) Information
# of flows: 2759745 (avg. 7.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.7% 3.8% 2.7% 2.3% 1.8% 1.5% 1.4% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1735895
Top 10 bandwidth usage (bytes/total in %):
32.0% 6.3% 4.5% 4.5% 3.2% 2.7% 2.6% 2.4% 2.2% 2.1%
# of IPv6 addresses: 6531
Top 10 bandwidth usage (bytes/total in %):
80.0% 71.8% 3.6% 2.5% 2.1% 1.9% 1.7% 1.4% 1.1% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201210141400.pktlen.png)
detailed numbers
[ 32- 63]: 3949226
[ 64- 127]: 4456513
[ 128- 255]: 586299
[ 256- 511]: 464348
[ 512- 1023]: 814079
[ 1024- 2047]: 11415386
Protocol Breakdown
![[protocol breakdown chart]](201210141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21685851 (100.00%) 18251776238 (100.00%) 841.64
ip 19242545 ( 88.73%) 15271853852 ( 83.67%) 793.65
tcp 13799757 ( 63.63%) 13681347207 ( 74.96%) 991.42
http(s) 9129633 ( 42.10%) 11826250084 ( 64.80%) 1295.37
http(c) 3041676 ( 14.03%) 719039272 ( 3.94%) 236.40
squid 144031 ( 0.66%) 86594230 ( 0.47%) 601.22
smtp 48478 ( 0.22%) 7866787 ( 0.04%) 162.28
ftp 16783 ( 0.08%) 3604571 ( 0.02%) 214.78
pop3 28735 ( 0.13%) 2223996 ( 0.01%) 77.40
imap 12367 ( 0.06%) 10353792 ( 0.06%) 837.21
telnet 10953 ( 0.05%) 827163 ( 0.00%) 75.52
ssh 16481 ( 0.08%) 2998194 ( 0.02%) 181.92
dns 2077 ( 0.01%) 272241 ( 0.00%) 131.07
bgp 753 ( 0.00%) 316401 ( 0.00%) 420.19
napster 11 ( 0.00%) 1399 ( 0.00%) 127.18
realaud 12 ( 0.00%) 728 ( 0.00%) 60.67
rtsp 23088 ( 0.11%) 31907201 ( 0.17%) 1381.98
icecast 698 ( 0.00%) 198070 ( 0.00%) 283.77
hotline 6 ( 0.00%) 366 ( 0.00%) 61.00
other 1323975 ( 6.11%) 988892712 ( 5.42%) 746.91
udp 2335686 ( 10.77%) 1154774596 ( 6.33%) 494.40
dns 747184 ( 3.45%) 513502837 ( 2.81%) 687.25
rip 5 ( 0.00%) 2576 ( 0.00%) 515.20
realaud 10 ( 0.00%) 691 ( 0.00%) 69.10
halflif 61 ( 0.00%) 15964 ( 0.00%) 261.70
starcra 38 ( 0.00%) 5036 ( 0.00%) 132.53
everque 705 ( 0.00%) 408130 ( 0.00%) 578.91
unreal 2 ( 0.00%) 473 ( 0.00%) 236.50
quake 14 ( 0.00%) 1525 ( 0.00%) 108.93
cuseeme 5 ( 0.00%) 710 ( 0.00%) 142.00
other 1572339 ( 7.25%) 639868815 ( 3.51%) 406.95
icmp 2546098 ( 11.74%) 161306818 ( 0.88%) 63.35
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4135 ( 0.02%) 1645762 ( 0.01%) 398.01
ip6 502936 ( 2.32%) 257359816 ( 1.41%) 511.71
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 53732 ( 0.25%) 15399423 ( 0.08%) 286.60
frag 477761 ( 2.20%) 474776634 ( 2.60%) 993.75
ip6 2443306 ( 11.27%) 2979922386 ( 16.33%) 1219.63
tcp6 2349568 ( 10.83%) 2955561263 ( 16.19%) 1257.92
http(s) 585002 ( 2.70%) 650945333 ( 3.57%) 1112.72
http(c) 121441 ( 0.56%) 11769681 ( 0.06%) 96.92
smtp 120 ( 0.00%) 58919 ( 0.00%) 490.99
ftp 8742 ( 0.04%) 2214925 ( 0.01%) 253.37
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 254 ( 0.00%) 38061 ( 0.00%) 149.85
bgp 95 ( 0.00%) 23588 ( 0.00%) 248.29
other 1633902 ( 7.53%) 2290509748 ( 12.55%) 1401.86
udp6 75119 ( 0.35%) 21191345 ( 0.12%) 282.10
dns 60826 ( 0.28%) 12777360 ( 0.07%) 210.06
other 14293 ( 0.07%) 8413985 ( 0.05%) 588.68
icmp6 17989 ( 0.08%) 2659276 ( 0.01%) 147.83
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 516 ( 0.00%) 495010 ( 0.00%) 959.32
tcpdump file: 201210141400.dump.gz (481.13 MB)