Traffic Trace Info
DumpFile: 201210181400.dump
FileSize: 2450.26MB
Id: 201210181400
StartTime: Thu Oct 18 14:00:01 2012
EndTime: Thu Oct 18 14:15:00 2012
TotalTime: 899.36 seconds
TotalCapSize: 1938.35MB CapLen: 96 bytes
# of packets: 33547974 (25457.06MB)
AvgRate: 237.44Mbps stddev:43.19M
IP flow (unique src/dst pair) Information
# of flows: 1974568 (avg. 16.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 5.1% 2.1% 2.0% 1.6% 1.3% 1.2% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1457816
Top 10 bandwidth usage (bytes/total in %):
11.1% 10.5% 6.0% 5.7% 5.6% 5.2% 4.6% 3.3% 2.6% 2.5%
# of IPv6 addresses: 8281
Top 10 bandwidth usage (bytes/total in %):
26.3% 18.2% 16.4% 8.4% 3.3% 2.8% 2.2% 2.2% 2.2% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201210181400.pktlen.png)
detailed numbers
[ 32- 63]: 5626975
[ 64- 127]: 8182501
[ 128- 255]: 1029454
[ 256- 511]: 976276
[ 512- 1023]: 1159819
[ 1024- 2047]: 16572949
Protocol Breakdown
![[protocol breakdown chart]](201210181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33547974 (100.00%) 26693660321 (100.00%) 795.69
ip 31521402 ( 93.96%) 25017501818 ( 93.72%) 793.67
tcp 26429483 ( 78.78%) 23420759043 ( 87.74%) 886.16
http(s) 14945081 ( 44.55%) 19342324560 ( 72.46%) 1294.23
http(c) 7953950 ( 23.71%) 1750914596 ( 6.56%) 220.13
squid 102585 ( 0.31%) 63614069 ( 0.24%) 620.11
smtp 71202 ( 0.21%) 16982217 ( 0.06%) 238.51
ftp 12417 ( 0.04%) 4600616 ( 0.02%) 370.51
pop3 3181 ( 0.01%) 1265382 ( 0.00%) 397.79
imap 7466 ( 0.02%) 5429433 ( 0.02%) 727.22
telnet 11259 ( 0.03%) 849785 ( 0.00%) 75.48
ssh 38273 ( 0.11%) 8478009 ( 0.03%) 221.51
dns 22364 ( 0.07%) 1502124 ( 0.01%) 67.17
bgp 820 ( 0.00%) 356467 ( 0.00%) 434.72
napster 125 ( 0.00%) 148104 ( 0.00%) 1184.83
realaud 4 ( 0.00%) 246 ( 0.00%) 61.50
rtsp 4444 ( 0.01%) 6273476 ( 0.02%) 1411.67
icecast 8497 ( 0.03%) 6776205 ( 0.03%) 797.48
hotline 6 ( 0.00%) 366 ( 0.00%) 61.00
other 3247808 ( 9.68%) 2211243328 ( 8.28%) 680.84
udp 2880391 ( 8.59%) 1125009504 ( 4.21%) 390.58
dns 723906 ( 2.16%) 300624367 ( 1.13%) 415.28
rip 1 ( 0.00%) 72 ( 0.00%) 72.00
realaud 10 ( 0.00%) 1153 ( 0.00%) 115.30
halflif 53 ( 0.00%) 7567 ( 0.00%) 142.77
starcra 18 ( 0.00%) 1566 ( 0.00%) 87.00
everque 1054 ( 0.00%) 163604 ( 0.00%) 155.22
unreal 6 ( 0.00%) 1013 ( 0.00%) 168.83
quake 32 ( 0.00%) 3455 ( 0.00%) 107.97
cuseeme 8 ( 0.00%) 1890 ( 0.00%) 236.25
other 2154762 ( 6.42%) 824104263 ( 3.09%) 382.46
icmp 1419628 ( 4.23%) 93264319 ( 0.35%) 65.70
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 47075 ( 0.14%) 7910934 ( 0.03%) 168.05
ip6 624111 ( 1.86%) 317631548 ( 1.19%) 508.93
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 120514 ( 0.36%) 52906350 ( 0.20%) 439.01
frag 156505 ( 0.47%) 158108428 ( 0.59%) 1010.25
ip6 2026572 ( 6.04%) 1676158503 ( 6.28%) 827.09
tcp6 1867044 ( 5.57%) 1631959829 ( 6.11%) 874.09
http(s) 1374049 ( 4.10%) 1568900131 ( 5.88%) 1141.81
http(c) 477642 ( 1.42%) 48225037 ( 0.18%) 100.96
smtp 155 ( 0.00%) 49899 ( 0.00%) 321.93
ftp 2793 ( 0.01%) 1236770 ( 0.00%) 442.81
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 188 ( 0.00%) 65142 ( 0.00%) 346.50
bgp 95 ( 0.00%) 23290 ( 0.00%) 245.16
other 12110 ( 0.04%) 13458552 ( 0.05%) 1111.36
udp6 134497 ( 0.40%) 39735979 ( 0.15%) 295.44
dns 117633 ( 0.35%) 25583951 ( 0.10%) 217.49
other 16864 ( 0.05%) 14152028 ( 0.05%) 839.19
icmp6 23905 ( 0.07%) 3403721 ( 0.01%) 142.39
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1013 ( 0.00%) 1043600 ( 0.00%) 1030.21
tcpdump file: 201210181400.dump.gz (786.14 MB)