Traffic Trace Info
DumpFile: 201210271400.dump
FileSize: 1859.21MB
Id: 201210271400
StartTime: Sat Oct 27 14:00:00 2012
EndTime: Sat Oct 27 14:15:00 2012
TotalTime: 900.12 seconds
TotalCapSize: 1411.26MB CapLen: 96 bytes
# of packets: 29356398 (9722.09MB)
AvgRate: 90.57Mbps stddev:16.29M
IP flow (unique src/dst pair) Information
# of flows: 12864029 (avg. 2.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 4.0% 3.6% 3.4% 2.5% 2.4% 2.0% 1.8% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 10048782
Top 10 bandwidth usage (bytes/total in %):
24.9% 9.7% 8.3% 5.0% 4.1% 4.0% 3.6% 3.5% 3.4% 3.3%
# of IPv6 addresses: 5705
Top 10 bandwidth usage (bytes/total in %):
38.2% 8.9% 5.9% 5.7% 5.6% 5.5% 3.7% 3.4% 3.3% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201210271400.pktlen.png)
detailed numbers
[ 32- 63]: 17672399
[ 64- 127]: 4536091
[ 128- 255]: 469041
[ 256- 511]: 443261
[ 512- 1023]: 677938
[ 1024- 2047]: 5557668
Protocol Breakdown
![[protocol breakdown chart]](201210271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29356398 (100.00%) 10194346998 (100.00%) 347.26
ip 29044374 ( 98.94%) 9996007601 ( 98.05%) 344.16
tcp 8676937 ( 29.56%) 7805302990 ( 76.57%) 899.55
http(s) 4735971 ( 16.13%) 5864281342 ( 57.52%) 1238.24
http(c) 1721922 ( 5.87%) 513463044 ( 5.04%) 298.19
squid 42825 ( 0.15%) 14621342 ( 0.14%) 341.42
smtp 90502 ( 0.31%) 44213355 ( 0.43%) 488.53
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 13033 ( 0.04%) 3242165 ( 0.03%) 248.77
pop3 2103 ( 0.01%) 722645 ( 0.01%) 343.63
imap 2453 ( 0.01%) 252175 ( 0.00%) 102.80
telnet 22731 ( 0.08%) 1696949 ( 0.02%) 74.65
ssh 9548 ( 0.03%) 2707957 ( 0.03%) 283.62
dns 5710 ( 0.02%) 509354 ( 0.00%) 89.20
bgp 615 ( 0.00%) 136056 ( 0.00%) 221.23
napster 18 ( 0.00%) 2238 ( 0.00%) 124.33
realaud 15 ( 0.00%) 1821 ( 0.00%) 121.40
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 1184 ( 0.00%) 134345 ( 0.00%) 113.47
hotline 24 ( 0.00%) 2189 ( 0.00%) 91.21
other 2028273 ( 6.91%) 1359315407 ( 13.33%) 670.18
udp 2571950 ( 8.76%) 917732591 ( 9.00%) 356.82
dns 1428040 ( 4.86%) 461454901 ( 4.53%) 323.14
rip 6 ( 0.00%) 408 ( 0.00%) 68.00
realaud 16 ( 0.00%) 1500 ( 0.00%) 93.75
halflif 28 ( 0.00%) 2859 ( 0.00%) 102.11
starcra 25 ( 0.00%) 3032 ( 0.00%) 121.28
everque 3805 ( 0.01%) 2640701 ( 0.03%) 694.01
unreal 20 ( 0.00%) 2552 ( 0.00%) 127.60
quake 52 ( 0.00%) 5080 ( 0.00%) 97.69
cuseeme 16 ( 0.00%) 1531 ( 0.00%) 95.69
other 1139791 ( 3.88%) 453526983 ( 4.45%) 397.90
icmp 17459815 ( 59.48%) 1068331620 ( 10.48%) 61.19
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 152668 ( 0.52%) 106376812 ( 1.04%) 696.79
ip6 133363 ( 0.45%) 84172726 ( 0.83%) 631.16
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 49440 ( 0.17%) 14070632 ( 0.14%) 284.60
frag 186198 ( 0.63%) 176391341 ( 1.73%) 947.33
ip6 312024 ( 1.06%) 198339397 ( 1.95%) 635.65
tcp6 222316 ( 0.76%) 175932474 ( 1.73%) 791.36
http(s) 131726 ( 0.45%) 141106147 ( 1.38%) 1071.21
http(c) 61053 ( 0.21%) 5746966 ( 0.06%) 94.13
smtp 158 ( 0.00%) 19974 ( 0.00%) 126.42
ftp 93 ( 0.00%) 8289 ( 0.00%) 89.13
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 110 ( 0.00%) 48724 ( 0.00%) 442.95
bgp 98 ( 0.00%) 23772 ( 0.00%) 242.57
other 29066 ( 0.10%) 28977594 ( 0.28%) 996.96
udp6 68639 ( 0.23%) 14168586 ( 0.14%) 206.42
dns 68278 ( 0.23%) 14125864 ( 0.14%) 206.89
starcra 1 ( 0.00%) 109 ( 0.00%) 109.00
everque 2 ( 0.00%) 197 ( 0.00%) 98.50
unreal 1 ( 0.00%) 95 ( 0.00%) 95.00
other 357 ( 0.00%) 42321 ( 0.00%) 118.55
icmp6 15989 ( 0.05%) 2446891 ( 0.02%) 153.04
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4965 ( 0.02%) 5775786 ( 0.06%) 1163.30
tcpdump file: 201210271400.dump.gz (627.26 MB)