Traffic Trace Info
DumpFile: 201210231400.dump
FileSize: 2006.93MB
Id: 201210231400
StartTime: Tue Oct 23 14:00:00 2012
EndTime: Tue Oct 23 14:15:00 2012
TotalTime: 900.22 seconds
TotalCapSize: 1600.24MB CapLen: 96 bytes
# of packets: 26652198 (20023.37MB)
AvgRate: 186.59Mbps stddev:35.08M
IP flow (unique src/dst pair) Information
# of flows: 730207 (avg. 36.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.1% 1.9% 1.4% 1.4% 1.3% 1.3% 1.1% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 366962
Top 10 bandwidth usage (bytes/total in %):
8.9% 4.6% 4.1% 3.7% 3.3% 2.8% 2.7% 2.6% 2.6% 2.4%
# of IPv6 addresses: 8769
Top 10 bandwidth usage (bytes/total in %):
42.2% 23.4% 12.1% 6.7% 5.8% 4.7% 4.7% 4.1% 2.9% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201210231400.pktlen.png)
detailed numbers
[ 32- 63]: 3585664
[ 64- 127]: 7390699
[ 128- 255]: 877580
[ 256- 511]: 870837
[ 512- 1023]: 994887
[ 1024- 2047]: 12932531
Protocol Breakdown
![[protocol breakdown chart]](201210231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26652198 (100.00%) 20996025134 (100.00%) 787.78
ip 24673658 ( 92.58%) 19102538409 ( 90.98%) 774.21
tcp 21574001 ( 80.95%) 18180441370 ( 86.59%) 842.70
http(s) 11317500 ( 42.46%) 14011709689 ( 66.74%) 1238.06
http(c) 6824044 ( 25.60%) 1845693977 ( 8.79%) 270.47
squid 76394 ( 0.29%) 40234075 ( 0.19%) 526.67
smtp 84920 ( 0.32%) 43996856 ( 0.21%) 518.10
ftp 19079 ( 0.07%) 4488327 ( 0.02%) 235.25
pop3 7137 ( 0.03%) 3328827 ( 0.02%) 466.42
imap 2731 ( 0.01%) 431671 ( 0.00%) 158.06
telnet 9488 ( 0.04%) 722025 ( 0.00%) 76.10
ssh 26273 ( 0.10%) 6131499 ( 0.03%) 233.38
dns 5791 ( 0.02%) 2239650 ( 0.01%) 386.75
bgp 577 ( 0.00%) 128733 ( 0.00%) 223.11
napster 38 ( 0.00%) 6544 ( 0.00%) 172.21
realaud 40 ( 0.00%) 4268 ( 0.00%) 106.70
rtsp 80575 ( 0.30%) 112341358 ( 0.54%) 1394.25
icecast 32890 ( 0.12%) 30812680 ( 0.15%) 936.84
hotline 36 ( 0.00%) 3115 ( 0.00%) 86.53
other 3086487 ( 11.58%) 2078167994 ( 9.90%) 673.31
udp 1809073 ( 6.79%) 593470612 ( 2.83%) 328.05
dns 790388 ( 2.97%) 213895463 ( 1.02%) 270.62
realaud 27 ( 0.00%) 4155 ( 0.00%) 153.89
halflif 17 ( 0.00%) 2343 ( 0.00%) 137.82
starcra 24 ( 0.00%) 2828 ( 0.00%) 117.83
everque 225 ( 0.00%) 40863 ( 0.00%) 181.61
unreal 7 ( 0.00%) 1150 ( 0.00%) 164.29
quake 16 ( 0.00%) 1578 ( 0.00%) 98.62
cuseeme 5 ( 0.00%) 862 ( 0.00%) 172.40
other 1017083 ( 3.82%) 378051668 ( 1.80%) 371.70
icmp 291265 ( 1.09%) 24387385 ( 0.12%) 83.73
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 31322 ( 0.12%) 7370212 ( 0.04%) 235.30
ip6 854536 ( 3.21%) 248282564 ( 1.18%) 290.55
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 113261 ( 0.42%) 48566146 ( 0.23%) 428.80
frag 57707 ( 0.22%) 63910247 ( 0.30%) 1107.50
ip6 1978540 ( 7.42%) 1893486725 ( 9.02%) 957.01
tcp6 1822360 ( 6.84%) 1859126456 ( 8.85%) 1020.18
http(s) 1521898 ( 5.71%) 1732996319 ( 8.25%) 1138.71
http(c) 229938 ( 0.86%) 24428442 ( 0.12%) 106.24
smtp 332 ( 0.00%) 345028 ( 0.00%) 1039.24
ftp 117 ( 0.00%) 10410 ( 0.00%) 88.97
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 258 ( 0.00%) 61219 ( 0.00%) 237.28
bgp 88 ( 0.00%) 20097 ( 0.00%) 228.38
other 69717 ( 0.26%) 101263933 ( 0.48%) 1452.50
udp6 119013 ( 0.45%) 25252384 ( 0.12%) 212.18
dns 116513 ( 0.44%) 25000650 ( 0.12%) 214.57
realaud 1 ( 0.00%) 101 ( 0.00%) 101.00
starcra 1 ( 0.00%) 113 ( 0.00%) 113.00
unreal 1 ( 0.00%) 93 ( 0.00%) 93.00
quake 2 ( 0.00%) 213 ( 0.00%) 106.50
other 2495 ( 0.01%) 251214 ( 0.00%) 100.69
icmp6 32986 ( 0.12%) 4517954 ( 0.02%) 136.97
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4069 ( 0.02%) 4574675 ( 0.02%) 1124.28
tcpdump file: 201210231400.dump.gz (642.13 MB)