Traffic Trace Info
DumpFile: 201210291400.dump
FileSize: 2922.65MB
Id: 201210291400
StartTime: Mon Oct 29 14:00:01 2012
EndTime: Mon Oct 29 14:15:01 2012
TotalTime: 899.69 seconds
TotalCapSize: -1834.65MB CapLen: 96 bytes
# of packets: 43338762 (21750.56MB)
AvgRate: 202.79Mbps stddev:49.90M
IP flow (unique src/dst pair) Information
# of flows: 12588718 (avg. 3.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 2.4% 1.7% 1.6% 1.6% 1.5% 1.5% 1.4% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 9912925
Top 10 bandwidth usage (bytes/total in %):
12.2% 8.3% 4.7% 4.7% 4.7% 4.4% 4.3% 3.9% 3.5% 2.6%
# of IPv6 addresses: 8777
Top 10 bandwidth usage (bytes/total in %):
23.6% 17.0% 4.9% 4.2% 3.7% 3.7% 3.6% 3.5% 3.0% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201210291400.pktlen.png)
detailed numbers
[ 32- 63]: 19072406
[ 64- 127]: 7525392
[ 128- 255]: 1092586
[ 256- 511]: 1119270
[ 512- 1023]: 1193824
[ 1024- 2047]: 13335284
Protocol Breakdown
![[protocol breakdown chart]](201210291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 43338762 (100.00%) 22807119249 (100.00%) 526.25
ip 41397000 ( 95.52%) 21116140494 ( 92.59%) 510.09
tcp 20759913 ( 47.90%) 18885199967 ( 82.80%) 909.70
http(s) 12204987 ( 28.16%) 15299389250 ( 67.08%) 1253.54
http(c) 6798518 ( 15.69%) 2562989499 ( 11.24%) 376.99
squid 41369 ( 0.10%) 20842222 ( 0.09%) 503.81
smtp 61279 ( 0.14%) 21294479 ( 0.09%) 347.50
ftp 16226 ( 0.04%) 3089798 ( 0.01%) 190.42
pop3 6157 ( 0.01%) 1996933 ( 0.01%) 324.34
imap 4194 ( 0.01%) 1423170 ( 0.01%) 339.33
telnet 8678 ( 0.02%) 656939 ( 0.00%) 75.70
ssh 104299 ( 0.24%) 49087528 ( 0.22%) 470.64
dns 6282 ( 0.01%) 549054 ( 0.00%) 87.40
bgp 575 ( 0.00%) 144807 ( 0.00%) 251.84
napster 25 ( 0.00%) 4173 ( 0.00%) 166.92
realaud 143 ( 0.00%) 10175 ( 0.00%) 71.15
rtsp 645 ( 0.00%) 46778 ( 0.00%) 72.52
icecast 55776 ( 0.13%) 18182503 ( 0.08%) 325.99
hotline 6 ( 0.00%) 715 ( 0.00%) 119.17
other 1450754 ( 3.35%) 905491944 ( 3.97%) 624.15
udp 2329373 ( 5.37%) 896844586 ( 3.93%) 385.02
dns 1038334 ( 2.40%) 425551385 ( 1.87%) 409.84
realaud 7 ( 0.00%) 842 ( 0.00%) 120.29
halflif 20 ( 0.00%) 2418 ( 0.00%) 120.90
starcra 42 ( 0.00%) 7148 ( 0.00%) 170.19
everque 328 ( 0.00%) 45155 ( 0.00%) 137.67
unreal 6 ( 0.00%) 809 ( 0.00%) 134.83
quake 12 ( 0.00%) 1827 ( 0.00%) 152.25
cuseeme 2 ( 0.00%) 145 ( 0.00%) 72.50
other 1290450 ( 2.98%) 471120836 ( 2.07%) 365.08
icmp 17707848 ( 40.86%) 1086640785 ( 4.76%) 61.36
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 29573 ( 0.07%) 5550662 ( 0.02%) 187.69
ip6 515727 ( 1.19%) 227014032 ( 1.00%) 440.18
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 54365 ( 0.13%) 14870232 ( 0.07%) 273.53
frag 105175 ( 0.24%) 96236581 ( 0.42%) 915.01
ip6 1941762 ( 4.48%) 1690978755 ( 7.41%) 870.85
tcp6 1700486 ( 3.92%) 1561080492 ( 6.84%) 918.02
http(s) 1298170 ( 3.00%) 1405617553 ( 6.16%) 1082.77
http(c) 265123 ( 0.61%) 31075648 ( 0.14%) 117.21
smtp 102 ( 0.00%) 18079 ( 0.00%) 177.25
ftp 286 ( 0.00%) 25152 ( 0.00%) 87.94
ssh 133 ( 0.00%) 15326 ( 0.00%) 115.23
dns 302 ( 0.00%) 55576 ( 0.00%) 184.03
bgp 94 ( 0.00%) 22242 ( 0.00%) 236.62
other 136276 ( 0.31%) 124250916 ( 0.54%) 911.76
udp6 207257 ( 0.48%) 119058805 ( 0.52%) 574.45
dns 120959 ( 0.28%) 25639346 ( 0.11%) 211.97
realaud 1 ( 0.00%) 112 ( 0.00%) 112.00
everque 2 ( 0.00%) 216 ( 0.00%) 108.00
other 86295 ( 0.20%) 93419131 ( 0.41%) 1082.56
icmp6 23914 ( 0.06%) 3312937 ( 0.01%) 138.54
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 9992 ( 0.02%) 7511129 ( 0.03%) 751.71
tcpdump file: 201210291400.dump.gz (958.50 MB)