Traffic Trace Info
DumpFile: 201210241400.dump
FileSize: 2092.27MB
Id: 201210241400
StartTime: Wed Oct 24 14:00:00 2012
EndTime: Wed Oct 24 14:15:01 2012
TotalTime: 900.25 seconds
TotalCapSize: 1658.52MB CapLen: 96 bytes
# of packets: 28426295 (20301.93MB)
AvgRate: 189.19Mbps stddev:39.15M
IP flow (unique src/dst pair) Information
# of flows: 1970865 (avg. 14.42 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.3% 2.1% 1.8% 1.7% 1.5% 1.3% 1.3% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 1445505
Top 10 bandwidth usage (bytes/total in %):
5.2% 5.0% 4.5% 3.9% 3.7% 3.3% 3.3% 2.9% 2.6% 2.5%
# of IPv6 addresses: 8842
Top 10 bandwidth usage (bytes/total in %):
25.0% 8.6% 6.9% 6.3% 5.3% 4.0% 3.7% 3.2% 3.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201210241400.pktlen.png)
detailed numbers
[ 32- 63]: 5251649
[ 64- 127]: 7184362
[ 128- 255]: 963814
[ 256- 511]: 932200
[ 512- 1023]: 932989
[ 1024- 2047]: 13161281
Protocol Breakdown
![[protocol breakdown chart]](201210241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28426295 (100.00%) 21288113711 (100.00%) 748.89
ip 26629625 ( 93.68%) 19970500882 ( 93.81%) 749.94
tcp 21833862 ( 76.81%) 18050682259 ( 84.79%) 826.73
http(s) 11976893 ( 42.13%) 13790075705 ( 64.78%) 1151.39
http(c) 7589903 ( 26.70%) 2861615004 ( 13.44%) 377.03
squid 102193 ( 0.36%) 27803636 ( 0.13%) 272.07
smtp 137311 ( 0.48%) 76662291 ( 0.36%) 558.31
ftp 22795 ( 0.08%) 4737291 ( 0.02%) 207.82
pop3 4749 ( 0.02%) 2416764 ( 0.01%) 508.90
imap 2893 ( 0.01%) 833956 ( 0.00%) 288.27
telnet 23161 ( 0.08%) 1722595 ( 0.01%) 74.37
ssh 13041 ( 0.05%) 3264188 ( 0.02%) 250.30
dns 4431 ( 0.02%) 427889 ( 0.00%) 96.57
bgp 645 ( 0.00%) 170929 ( 0.00%) 265.01
napster 6 ( 0.00%) 360 ( 0.00%) 60.00
realaud 21 ( 0.00%) 3104 ( 0.00%) 147.81
rtsp 2523 ( 0.01%) 2131663 ( 0.01%) 844.89
icecast 65953 ( 0.23%) 57148454 ( 0.27%) 866.50
hotline 6 ( 0.00%) 408 ( 0.00%) 68.00
other 1887336 ( 6.64%) 1221667902 ( 5.74%) 647.30
udp 2441065 ( 8.59%) 1140238783 ( 5.36%) 467.11
dns 881861 ( 3.10%) 303577247 ( 1.43%) 344.25
rip 2 ( 0.00%) 136 ( 0.00%) 68.00
realaud 7675 ( 0.03%) 5510027 ( 0.03%) 717.92
halflif 18 ( 0.00%) 2541 ( 0.00%) 141.17
starcra 34 ( 0.00%) 3691 ( 0.00%) 108.56
everque 159 ( 0.00%) 34659 ( 0.00%) 217.98
unreal 5 ( 0.00%) 447 ( 0.00%) 89.40
quake 22 ( 0.00%) 2494 ( 0.00%) 113.36
cuseeme 3 ( 0.00%) 378 ( 0.00%) 126.00
other 1551089 ( 5.46%) 831045230 ( 3.90%) 535.78
icmp 1518622 ( 5.34%) 100362224 ( 0.47%) 66.09
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 24693 ( 0.09%) 6863226 ( 0.03%) 277.94
ip6 752972 ( 2.65%) 656871166 ( 3.09%) 872.37
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 58210 ( 0.20%) 15462994 ( 0.07%) 265.64
frag 104207 ( 0.37%) 106905232 ( 0.50%) 1025.89
ip6 1796670 ( 6.32%) 1317612829 ( 6.19%) 733.36
tcp6 1648546 ( 5.80%) 1281118032 ( 6.02%) 777.12
http(s) 1012770 ( 3.56%) 1050993518 ( 4.94%) 1037.74
http(c) 358098 ( 1.26%) 33571012 ( 0.16%) 93.75
smtp 495 ( 0.00%) 155602 ( 0.00%) 314.35
ftp 227 ( 0.00%) 21850 ( 0.00%) 96.26
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 328 ( 0.00%) 73903 ( 0.00%) 225.31
bgp 105 ( 0.00%) 28486 ( 0.00%) 271.30
other 276511 ( 0.97%) 196272653 ( 0.92%) 709.82
udp6 123411 ( 0.43%) 29519149 ( 0.14%) 239.19
dns 112646 ( 0.40%) 25430296 ( 0.12%) 225.75
halflif 2 ( 0.00%) 228 ( 0.00%) 114.00
starcra 1 ( 0.00%) 116 ( 0.00%) 116.00
everque 1 ( 0.00%) 90 ( 0.00%) 90.00
other 10761 ( 0.04%) 4088419 ( 0.02%) 379.93
icmp6 21182 ( 0.07%) 3170501 ( 0.01%) 149.68
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3417 ( 0.01%) 3789655 ( 0.02%) 1109.06
tcpdump file: 201210241400.dump.gz (688.89 MB)