Traffic Trace Info
DumpFile: 201210191400.dump
FileSize: 1935.83MB
Id: 201210191400
StartTime: Fri Oct 19 14:00:00 2012
EndTime: Fri Oct 19 14:15:01 2012
TotalTime: 900.65 seconds
TotalCapSize: 1538.54MB CapLen: 96 bytes
# of packets: 26036370 (19655.35MB)
AvgRate: 183.08Mbps stddev:32.75M
IP flow (unique src/dst pair) Information
# of flows: 1878547 (avg. 13.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 3.0% 2.1% 1.4% 1.3% 1.1% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 1442782
Top 10 bandwidth usage (bytes/total in %):
6.9% 5.7% 4.3% 3.4% 3.3% 3.2% 3.0% 2.3% 2.3% 2.2%
# of IPv6 addresses: 7926
Top 10 bandwidth usage (bytes/total in %):
46.0% 37.3% 8.7% 5.2% 2.7% 2.7% 1.9% 1.7% 1.7% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201210191400.pktlen.png)
detailed numbers
[ 32- 63]: 3913180
[ 64- 127]: 6891657
[ 128- 255]: 826205
[ 256- 511]: 808626
[ 512- 1023]: 856896
[ 1024- 2047]: 12739806
Protocol Breakdown
![[protocol breakdown chart]](201210191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26036370 (100.00%) 20610131206 (100.00%) 791.59
ip 23843126 ( 91.58%) 18714253681 ( 90.80%) 784.89
tcp 19611426 ( 75.32%) 17436665423 ( 84.60%) 889.11
http(s) 11196291 ( 43.00%) 14013162706 ( 67.99%) 1251.59
http(c) 5978057 ( 22.96%) 1783760651 ( 8.65%) 298.38
squid 61147 ( 0.23%) 37401690 ( 0.18%) 611.67
smtp 71219 ( 0.27%) 28070263 ( 0.14%) 394.14
ftp 20962 ( 0.08%) 4687375 ( 0.02%) 223.61
pop3 9976 ( 0.04%) 7106871 ( 0.03%) 712.40
imap 3810 ( 0.01%) 2125219 ( 0.01%) 557.80
telnet 11190 ( 0.04%) 844070 ( 0.00%) 75.43
ssh 97545 ( 0.37%) 17695684 ( 0.09%) 181.41
dns 5272 ( 0.02%) 487306 ( 0.00%) 92.43
bgp 730 ( 0.00%) 297202 ( 0.00%) 407.13
napster 5 ( 0.00%) 658 ( 0.00%) 131.60
realaud 9 ( 0.00%) 934 ( 0.00%) 103.78
rtsp 3548 ( 0.01%) 3038905 ( 0.01%) 856.51
icecast 9161 ( 0.04%) 7130515 ( 0.03%) 778.36
hotline 39 ( 0.00%) 6764 ( 0.00%) 173.44
other 2142465 ( 8.23%) 1530848610 ( 7.43%) 714.53
udp 2127258 ( 8.17%) 951438449 ( 4.62%) 447.26
dns 760005 ( 2.92%) 289557507 ( 1.40%) 380.99
rip 1 ( 0.00%) 68 ( 0.00%) 68.00
realaud 24 ( 0.00%) 4893 ( 0.00%) 203.88
halflif 19 ( 0.00%) 2204 ( 0.00%) 116.00
starcra 36 ( 0.00%) 5191 ( 0.00%) 144.19
everque 171 ( 0.00%) 31823 ( 0.00%) 186.10
unreal 13 ( 0.00%) 1071 ( 0.00%) 82.38
quake 15 ( 0.00%) 1435 ( 0.00%) 95.67
other 1366884 ( 5.25%) 661763870 ( 3.21%) 484.14
icmp 1518713 ( 5.83%) 109115447 ( 0.53%) 71.85
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 25857 ( 0.10%) 5487374 ( 0.03%) 212.22
ip6 496466 ( 1.91%) 194834065 ( 0.95%) 392.44
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 63206 ( 0.24%) 16692803 ( 0.08%) 264.10
frag 117954 ( 0.45%) 120220282 ( 0.58%) 1019.21
ip6 2193244 ( 8.42%) 1895877525 ( 9.20%) 864.42
tcp6 2075202 ( 7.97%) 1866329234 ( 9.06%) 899.35
http(s) 1060037 ( 4.07%) 1101320723 ( 5.34%) 1038.95
http(c) 194298 ( 0.75%) 20809601 ( 0.10%) 107.10
smtp 214 ( 0.00%) 111981 ( 0.00%) 523.28
ftp 172 ( 0.00%) 15950 ( 0.00%) 92.73
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 141 ( 0.00%) 40347 ( 0.00%) 286.15
bgp 102 ( 0.00%) 27408 ( 0.00%) 268.71
icecast 7 ( 0.00%) 932 ( 0.00%) 133.14
other 820219 ( 3.15%) 744001284 ( 3.61%) 907.08
udp6 90598 ( 0.35%) 23213086 ( 0.11%) 256.22
dns 86983 ( 0.33%) 21610913 ( 0.10%) 248.45
halflif 2 ( 0.00%) 211 ( 0.00%) 105.50
quake 1 ( 0.00%) 123 ( 0.00%) 123.00
other 3612 ( 0.01%) 1601839 ( 0.01%) 443.48
icmp6 24710 ( 0.09%) 3499167 ( 0.02%) 141.61
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2619 ( 0.01%) 2820410 ( 0.01%) 1076.90
tcpdump file: 201210191400.dump.gz (616.91 MB)