Traffic Trace Info
DumpFile: 201210171400.dump
FileSize: 2551.48MB
Id: 201210171400
StartTime: Wed Oct 17 14:00:00 2012
EndTime: Wed Oct 17 14:15:01 2012
TotalTime: 900.29 seconds
TotalCapSize: 2016.74MB CapLen: 96 bytes
# of packets: 35044323 (26661.52MB)
AvgRate: 248.45Mbps stddev:54.36M
IP flow (unique src/dst pair) Information
# of flows: 4101688 (avg. 8.54 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 3.4% 2.8% 1.7% 1.6% 1.6% 1.6% 1.5% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 2837997
Top 10 bandwidth usage (bytes/total in %):
9.5% 7.9% 5.1% 5.0% 3.9% 3.7% 3.7% 3.3% 3.1% 2.7%
# of IPv6 addresses: 8574
Top 10 bandwidth usage (bytes/total in %):
28.0% 26.1% 19.1% 15.1% 3.6% 3.3% 2.9% 2.3% 2.2% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201210171400.pktlen.png)
detailed numbers
[ 32- 63]: 6619704
[ 64- 127]: 7599167
[ 128- 255]: 1094474
[ 256- 511]: 974523
[ 512- 1023]: 1265824
[ 1024- 2047]: 17490631
Protocol Breakdown
![[protocol breakdown chart]](201210171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35044323 (100.00%) 27956634619 (100.00%) 797.75
ip 32547599 ( 92.88%) 25664001574 ( 91.80%) 788.51
tcp 24004790 ( 68.50%) 22913838225 ( 81.96%) 954.55
http(s) 14913576 ( 42.56%) 19035918183 ( 68.09%) 1276.42
http(c) 6489243 ( 18.52%) 2161951931 ( 7.73%) 333.16
squid 93962 ( 0.27%) 61003775 ( 0.22%) 649.24
smtp 86750 ( 0.25%) 24488970 ( 0.09%) 282.29
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 27030 ( 0.08%) 5641987 ( 0.02%) 208.73
pop3 5000 ( 0.01%) 2273472 ( 0.01%) 454.69
imap 14374 ( 0.04%) 17491859 ( 0.06%) 1216.91
telnet 16437 ( 0.05%) 1235795 ( 0.00%) 75.18
ssh 91694 ( 0.26%) 30675567 ( 0.11%) 334.54
dns 3872 ( 0.01%) 462582 ( 0.00%) 119.47
bgp 815 ( 0.00%) 344027 ( 0.00%) 422.12
napster 472 ( 0.00%) 35643 ( 0.00%) 75.51
realaud 68 ( 0.00%) 6872 ( 0.00%) 101.06
rtsp 14 ( 0.00%) 1024 ( 0.00%) 73.14
icecast 18184 ( 0.05%) 14704894 ( 0.05%) 808.67
hotline 7 ( 0.00%) 832 ( 0.00%) 118.86
other 2243290 ( 6.40%) 1557600692 ( 5.57%) 694.34
udp 3825878 ( 10.92%) 2164533839 ( 7.74%) 565.76
dns 1285738 ( 3.67%) 689018753 ( 2.46%) 535.89
realaud 23 ( 0.00%) 1916 ( 0.00%) 83.30
halflif 32 ( 0.00%) 6492 ( 0.00%) 202.88
starcra 33 ( 0.00%) 3789 ( 0.00%) 114.82
everque 203 ( 0.00%) 42321 ( 0.00%) 208.48
unreal 2 ( 0.00%) 454 ( 0.00%) 227.00
quake 27 ( 0.00%) 3498 ( 0.00%) 129.56
other 2538986 ( 7.25%) 1474589779 ( 5.27%) 580.78
icmp 3822819 ( 10.91%) 240399695 ( 0.86%) 62.89
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 11100 ( 0.03%) 3076928 ( 0.01%) 277.20
ip6 824243 ( 2.35%) 326598118 ( 1.17%) 396.24
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 58568 ( 0.17%) 15534539 ( 0.06%) 265.24
frag 416321 ( 1.19%) 425373280 ( 1.52%) 1021.74
ip6 2496724 ( 7.12%) 2292633045 ( 8.20%) 918.26
tcp6 2342978 ( 6.69%) 2259009519 ( 8.08%) 964.16
http(s) 1580285 ( 4.51%) 1763065183 ( 6.31%) 1115.66
http(c) 363326 ( 1.04%) 40405843 ( 0.14%) 111.21
squid 67 ( 0.00%) 36853 ( 0.00%) 550.04
smtp 158 ( 0.00%) 43268 ( 0.00%) 273.85
ftp 681 ( 0.00%) 66384 ( 0.00%) 97.48
pop3 6 ( 0.00%) 444 ( 0.00%) 74.00
imap 624 ( 0.00%) 476196 ( 0.00%) 763.13
ssh 117 ( 0.00%) 14838 ( 0.00%) 126.82
dns 350 ( 0.00%) 57311 ( 0.00%) 163.75
bgp 92 ( 0.00%) 20660 ( 0.00%) 224.57
other 397272 ( 1.13%) 454822539 ( 1.63%) 1144.86
udp6 122968 ( 0.35%) 26100655 ( 0.09%) 212.26
dns 116119 ( 0.33%) 25345344 ( 0.09%) 218.27
other 6849 ( 0.02%) 755311 ( 0.00%) 110.28
icmp6 27394 ( 0.08%) 3810302 ( 0.01%) 139.09
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3271 ( 0.01%) 3697177 ( 0.01%) 1130.29
tcpdump file: 201210171400.dump.gz (804.81 MB)