Traffic Trace Info
DumpFile: 201210201400.dump
FileSize: 1615.89MB
Id: 201210201400
StartTime: Sat Oct 20 14:00:01 2012
EndTime: Sat Oct 20 14:15:01 2012
TotalTime: 899.99 seconds
TotalCapSize: 1279.98MB CapLen: 96 bytes
# of packets: 22013735 (16641.87MB)
AvgRate: 155.12Mbps stddev:30.96M
IP flow (unique src/dst pair) Information
# of flows: 1848795 (avg. 11.91 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.5% 2.5% 2.4% 2.1% 2.1% 2.0% 1.7% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 1458594
Top 10 bandwidth usage (bytes/total in %):
13.0% 5.7% 4.6% 4.3% 4.2% 4.1% 3.6% 3.5% 3.3% 3.2%
# of IPv6 addresses: 6420
Top 10 bandwidth usage (bytes/total in %):
24.0% 11.1% 6.3% 5.1% 5.1% 3.4% 3.2% 3.2% 3.2% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201210201400.pktlen.png)
detailed numbers
[ 32- 63]: 3821896
[ 64- 127]: 5164359
[ 128- 255]: 673387
[ 256- 511]: 918590
[ 512- 1023]: 663608
[ 1024- 2047]: 10771895
Protocol Breakdown
![[protocol breakdown chart]](201210201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22013735 (100.00%) 17450265911 (100.00%) 792.70
ip 21144262 ( 96.05%) 16787882978 ( 96.20%) 793.97
tcp 17528604 ( 79.63%) 15575768768 ( 89.26%) 888.59
http(s) 8650430 ( 39.30%) 11121703333 ( 63.73%) 1285.68
http(c) 5630624 ( 25.58%) 2021120135 ( 11.58%) 358.95
squid 54909 ( 0.25%) 12005171 ( 0.07%) 218.64
smtp 57024 ( 0.26%) 14350393 ( 0.08%) 251.66
ftp 17921 ( 0.08%) 4045238 ( 0.02%) 225.73
pop3 2476 ( 0.01%) 711391 ( 0.00%) 287.31
imap 2414 ( 0.01%) 1398803 ( 0.01%) 579.45
telnet 9151 ( 0.04%) 693945 ( 0.00%) 75.83
ssh 66877 ( 0.30%) 8270282 ( 0.05%) 123.66
dns 2780 ( 0.01%) 320011 ( 0.00%) 115.11
bgp 629 ( 0.00%) 164269 ( 0.00%) 261.16
napster 10 ( 0.00%) 1020 ( 0.00%) 102.00
realaud 3 ( 0.00%) 184 ( 0.00%) 61.33
icecast 1431 ( 0.01%) 340885 ( 0.00%) 238.21
other 3031925 ( 13.77%) 2390643708 ( 13.70%) 788.49
udp 1821037 ( 8.27%) 961367572 ( 5.51%) 527.92
dns 579366 ( 2.63%) 283864237 ( 1.63%) 489.96
realaud 8 ( 0.00%) 957 ( 0.00%) 119.62
halflif 3568 ( 0.02%) 250070 ( 0.00%) 70.09
starcra 25 ( 0.00%) 8057 ( 0.00%) 322.28
everque 154 ( 0.00%) 24339 ( 0.00%) 158.05
unreal 6 ( 0.00%) 1090 ( 0.00%) 181.67
quake 22 ( 0.00%) 2883 ( 0.00%) 131.05
cuseeme 1 ( 0.00%) 93 ( 0.00%) 93.00
other 1237811 ( 5.62%) 677155630 ( 3.88%) 547.06
icmp 1369646 ( 6.22%) 89270949 ( 0.51%) 65.18
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 10442 ( 0.05%) 7227692 ( 0.04%) 692.18
ip6 355492 ( 1.61%) 140441979 ( 0.80%) 395.06
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 58840 ( 0.27%) 13785788 ( 0.08%) 234.29
frag 167619 ( 0.76%) 170828341 ( 0.98%) 1019.15
ip6 869473 ( 3.95%) 662382933 ( 3.80%) 761.82
tcp6 747299 ( 3.39%) 637144411 ( 3.65%) 852.60
http(s) 505374 ( 2.30%) 499072008 ( 2.86%) 987.53
http(c) 105741 ( 0.48%) 12848760 ( 0.07%) 121.51
smtp 46 ( 0.00%) 18966 ( 0.00%) 412.30
ftp 604 ( 0.00%) 58659 ( 0.00%) 97.12
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 67 ( 0.00%) 27508 ( 0.00%) 410.57
bgp 98 ( 0.00%) 18531 ( 0.00%) 189.09
other 135357 ( 0.61%) 125098971 ( 0.72%) 924.22
udp6 86916 ( 0.39%) 19846381 ( 0.11%) 228.34
dns 69909 ( 0.32%) 14768577 ( 0.08%) 211.25
unreal 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 113 ( 0.00%) 113.00
other 17005 ( 0.08%) 5077584 ( 0.03%) 298.59
icmp6 34322 ( 0.16%) 4555719 ( 0.03%) 132.73
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 821 ( 0.00%) 820794 ( 0.00%) 999.75
tcpdump file: 201210201400.dump.gz (506.55 MB)