Traffic Trace Info
DumpFile: 201210261400.dump
FileSize: 1796.26MB
Id: 201210261400
StartTime: Fri Oct 26 14:00:01 2012
EndTime: Fri Oct 26 14:15:01 2012
TotalTime: 900.04 seconds
TotalCapSize: 1416.43MB CapLen: 96 bytes
# of packets: 24891790 (17937.53MB)
AvgRate: 167.14Mbps stddev:40.24M
IP flow (unique src/dst pair) Information
# of flows: 2072355 (avg. 12.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.7% 2.7% 2.1% 1.7% 1.3% 1.2% 1.1% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 1489653
Top 10 bandwidth usage (bytes/total in %):
8.0% 6.0% 5.2% 4.1% 3.0% 3.0% 2.9% 2.7% 2.5% 2.2%
# of IPv6 addresses: 8211
Top 10 bandwidth usage (bytes/total in %):
32.8% 26.0% 5.5% 5.5% 4.7% 4.7% 4.2% 3.1% 3.1% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201210261400.pktlen.png)
detailed numbers
[ 32- 63]: 5417210
[ 64- 127]: 5292920
[ 128- 255]: 867123
[ 256- 511]: 840804
[ 512- 1023]: 688148
[ 1024- 2047]: 11785585
Protocol Breakdown
![[protocol breakdown chart]](201210261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24891790 (100.00%) 18808867045 (100.00%) 755.63
ip 23221866 ( 93.29%) 17274297619 ( 91.84%) 743.88
tcp 18580074 ( 74.64%) 15927295284 ( 84.68%) 857.22
http(s) 10271490 ( 41.26%) 12668873387 ( 67.36%) 1233.40
http(c) 5686987 ( 22.85%) 1716642706 ( 9.13%) 301.85
squid 73891 ( 0.30%) 44818042 ( 0.24%) 606.54
smtp 214266 ( 0.86%) 133732801 ( 0.71%) 624.14
ftp 18936 ( 0.08%) 3901012 ( 0.02%) 206.01
pop3 3953 ( 0.02%) 1499718 ( 0.01%) 379.39
imap 10002 ( 0.04%) 1489802 ( 0.01%) 148.95
telnet 14104 ( 0.06%) 1110044 ( 0.01%) 78.70
ssh 49132 ( 0.20%) 5735217 ( 0.03%) 116.73
dns 7338 ( 0.03%) 764062 ( 0.00%) 104.12
bgp 632 ( 0.00%) 140220 ( 0.00%) 221.87
napster 18 ( 0.00%) 2511 ( 0.00%) 139.50
realaud 53 ( 0.00%) 5868 ( 0.00%) 110.72
icecast 9058 ( 0.04%) 5285428 ( 0.03%) 583.51
hotline 10 ( 0.00%) 1321 ( 0.00%) 132.10
other 2220204 ( 8.92%) 1343293145 ( 7.14%) 605.03
udp 2523501 ( 10.14%) 1072528507 ( 5.70%) 425.02
dns 537639 ( 2.16%) 129180503 ( 0.69%) 240.27
realaud 8 ( 0.00%) 1046 ( 0.00%) 130.75
halflif 6 ( 0.00%) 981 ( 0.00%) 163.50
starcra 327 ( 0.00%) 230967 ( 0.00%) 706.32
everque 88 ( 0.00%) 19026 ( 0.00%) 216.20
unreal 4 ( 0.00%) 605 ( 0.00%) 151.25
quake 23 ( 0.00%) 3260 ( 0.00%) 141.74
cuseeme 3 ( 0.00%) 255 ( 0.00%) 85.00
other 1985077 ( 7.97%) 942913403 ( 5.01%) 475.00
icmp 1483111 ( 5.96%) 110711169 ( 0.59%) 74.65
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 151487 ( 0.61%) 22378518 ( 0.12%) 147.73
ip6 423831 ( 1.70%) 126014643 ( 0.67%) 297.32
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 59662 ( 0.24%) 15349378 ( 0.08%) 257.27
frag 4628 ( 0.02%) 5309161 ( 0.03%) 1147.18
ip6 1669924 ( 6.71%) 1534569426 ( 8.16%) 918.95
tcp6 1495948 ( 6.01%) 1489997742 ( 7.92%) 996.02
http(s) 887024 ( 3.56%) 934269844 ( 4.97%) 1053.26
http(c) 133212 ( 0.54%) 15140211 ( 0.08%) 113.66
smtp 129 ( 0.00%) 25307 ( 0.00%) 196.18
ftp 12554 ( 0.05%) 5808183 ( 0.03%) 462.66
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 396 ( 0.00%) 68371 ( 0.00%) 172.65
bgp 106 ( 0.00%) 24523 ( 0.00%) 231.35
other 462515 ( 1.86%) 534660295 ( 2.84%) 1155.98
udp6 145628 ( 0.59%) 38576467 ( 0.21%) 264.90
dns 118665 ( 0.48%) 25248393 ( 0.13%) 212.77
realaud 1 ( 0.00%) 109 ( 0.00%) 109.00
halflif 1 ( 0.00%) 116 ( 0.00%) 116.00
unreal 1 ( 0.00%) 118 ( 0.00%) 118.00
quake 1 ( 0.00%) 99 ( 0.00%) 99.00
other 26959 ( 0.11%) 13327632 ( 0.07%) 494.37
icmp6 24788 ( 0.10%) 3265303 ( 0.02%) 131.73
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3446 ( 0.01%) 2714422 ( 0.01%) 787.70
tcpdump file: 201210261400.dump.gz (577.51 MB)