Traffic Trace Info
DumpFile: 201210301400.dump
FileSize: 3020.17MB
Id: 201210301400
StartTime: Tue Oct 30 14:00:01 2012
EndTime: Tue Oct 30 14:15:01 2012
TotalTime: 899.61 seconds
TotalCapSize: -1759.78MB CapLen: 96 bytes
# of packets: 44822736 (21438.29MB)
AvgRate: 199.90Mbps stddev:37.29M
IP flow (unique src/dst pair) Information
# of flows: 12748704 (avg. 3.52 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 2.5% 1.8% 1.5% 1.4% 1.4% 1.4% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 9909023
Top 10 bandwidth usage (bytes/total in %):
8.8% 5.6% 5.2% 4.8% 4.7% 4.6% 3.5% 3.3% 3.0% 3.0%
# of IPv6 addresses: 9112
Top 10 bandwidth usage (bytes/total in %):
14.6% 7.1% 6.9% 5.8% 3.8% 3.7% 3.5% 3.1% 2.9% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201210301400.pktlen.png)
detailed numbers
[ 32- 63]: 19560852
[ 64- 127]: 8883481
[ 128- 255]: 920844
[ 256- 511]: 988111
[ 512- 1023]: 1041152
[ 1024- 2047]: 13428296
Protocol Breakdown
![[protocol breakdown chart]](201210301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44822736 (100.00%) 22479679921 (100.00%) 501.52
ip 42505868 ( 94.83%) 20580584117 ( 91.55%) 484.18
tcp 20876062 ( 46.57%) 17612418907 ( 78.35%) 843.67
http(s) 9557814 ( 21.32%) 11700210403 ( 52.05%) 1224.15
http(c) 6339436 ( 14.14%) 2032904258 ( 9.04%) 320.68
squid 566234 ( 1.26%) 492474158 ( 2.19%) 869.74
smtp 69883 ( 0.16%) 22583097 ( 0.10%) 323.16
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 14243 ( 0.03%) 3628870 ( 0.02%) 254.78
pop3 6023 ( 0.01%) 4104503 ( 0.02%) 681.47
imap 2682 ( 0.01%) 295930 ( 0.00%) 110.34
telnet 30926 ( 0.07%) 2287071 ( 0.01%) 73.95
ssh 88404 ( 0.20%) 46727688 ( 0.21%) 528.57
dns 6919 ( 0.02%) 2516454 ( 0.01%) 363.70
bgp 585 ( 0.00%) 159222 ( 0.00%) 272.17
napster 17 ( 0.00%) 1764 ( 0.00%) 103.76
realaud 1404 ( 0.00%) 686578 ( 0.00%) 489.02
rtsp 11104 ( 0.02%) 8030685 ( 0.04%) 723.22
icecast 33428 ( 0.07%) 30718871 ( 0.14%) 918.96
other 4146959 ( 9.25%) 3265089295 ( 14.52%) 787.35
udp 3683465 ( 8.22%) 1688168414 ( 7.51%) 458.31
dns 831401 ( 1.85%) 313840813 ( 1.40%) 377.48
rip 1 ( 0.00%) 72 ( 0.00%) 72.00
realaud 10 ( 0.00%) 1083 ( 0.00%) 108.30
halflif 11 ( 0.00%) 1240 ( 0.00%) 112.73
starcra 22 ( 0.00%) 3574 ( 0.00%) 162.45
everque 57 ( 0.00%) 12294 ( 0.00%) 215.68
unreal 10 ( 0.00%) 2076 ( 0.00%) 207.60
quake 11 ( 0.00%) 875 ( 0.00%) 79.55
cuseeme 27 ( 0.00%) 1942 ( 0.00%) 71.93
other 2851763 ( 6.36%) 1374169821 ( 6.11%) 481.87
icmp 17299433 ( 38.60%) 1062977098 ( 4.73%) 61.45
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 10367 ( 0.02%) 3005238 ( 0.01%) 289.89
ip6 577686 ( 1.29%) 197282384 ( 0.88%) 341.50
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 58655 ( 0.13%) 16711956 ( 0.07%) 284.92
frag 151200 ( 0.34%) 140183150 ( 0.62%) 927.14
ip6 2316868 ( 5.17%) 1899095804 ( 8.45%) 819.68
tcp6 1960312 ( 4.37%) 1658617822 ( 7.38%) 846.10
http(s) 1370020 ( 3.06%) 1429364466 ( 6.36%) 1043.32
http(c) 373316 ( 0.83%) 46721033 ( 0.21%) 125.15
smtp 1348 ( 0.00%) 371158 ( 0.00%) 275.34
ftp 932 ( 0.00%) 83860 ( 0.00%) 89.98
pop3 1048 ( 0.00%) 1555409 ( 0.01%) 1484.17
ssh 12 ( 0.00%) 1008 ( 0.00%) 84.00
dns 139 ( 0.00%) 40052 ( 0.00%) 288.14
bgp 89 ( 0.00%) 18080 ( 0.00%) 203.15
other 213408 ( 0.48%) 180462756 ( 0.80%) 845.62
udp6 329057 ( 0.73%) 235272071 ( 1.05%) 714.99
dns 118564 ( 0.26%) 25583126 ( 0.11%) 215.77
quake 4 ( 0.00%) 368 ( 0.00%) 92.00
other 210489 ( 0.47%) 209688577 ( 0.93%) 996.20
icmp6 25342 ( 0.06%) 3437949 ( 0.02%) 135.66
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2044 ( 0.00%) 1752588 ( 0.01%) 857.43
tcpdump file: 201210301400.dump.gz (1008.09 MB)