Traffic Trace Info
DumpFile: 201210311400.dump
FileSize: 3354.85MB
Id: 201210311400
StartTime: Wed Oct 31 14:00:00 2012
EndTime: Wed Oct 31 14:15:00 2012
TotalTime: 899.98 seconds
TotalCapSize: -1488.16MB CapLen: 96 bytes
# of packets: 48955923 (29801.52MB)
AvgRate: 277.75Mbps stddev:53.72M
IP flow (unique src/dst pair) Information
# of flows: 11301782 (avg. 4.33 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.9% 3.2% 3.2% 2.4% 2.3% 2.2% 1.6% 1.5% 1.5% 1.3%
IP address Information
# of IPv4 addresses: 8750512
Top 10 bandwidth usage (bytes/total in %):
14.8% 10.4% 9.4% 4.4% 3.5% 3.4% 3.2% 3.0% 3.0% 2.6%
# of IPv6 addresses: 11678
Top 10 bandwidth usage (bytes/total in %):
20.9% 18.7% 7.9% 4.9% 4.9% 3.9% 3.3% 3.3% 2.8% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201210311400.pktlen.png)
detailed numbers
[ 32- 63]: 18325197
[ 64- 127]: 7952019
[ 128- 255]: 1062921
[ 256- 511]: 1280827
[ 512- 1023]: 1267620
[ 1024- 2047]: 19067339
Protocol Breakdown
![[protocol breakdown chart]](201210311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 48955923 (100.00%) 31249159930 (100.00%) 638.31
ip 46871491 ( 95.74%) 29563683455 ( 94.61%) 630.74
tcp 27148563 ( 55.46%) 26524286742 ( 84.88%) 977.01
http(s) 16071114 ( 32.83%) 20808180744 ( 66.59%) 1294.76
http(c) 7898464 ( 16.13%) 3364030198 ( 10.77%) 425.91
squid 44395 ( 0.09%) 26593625 ( 0.09%) 599.02
smtp 73154 ( 0.15%) 19269983 ( 0.06%) 263.42
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 8086 ( 0.02%) 2296353 ( 0.01%) 283.99
pop3 5111 ( 0.01%) 2300923 ( 0.01%) 450.19
imap 5304 ( 0.01%) 1445953 ( 0.00%) 272.62
telnet 61742 ( 0.13%) 4583834 ( 0.01%) 74.24
ssh 127257 ( 0.26%) 20192689 ( 0.06%) 158.68
dns 9785 ( 0.02%) 2548390 ( 0.01%) 260.44
bgp 570 ( 0.00%) 139789 ( 0.00%) 245.24
napster 15 ( 0.00%) 1658 ( 0.00%) 110.53
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 65134 ( 0.13%) 61604388 ( 0.20%) 945.81
hotline 26 ( 0.00%) 2189 ( 0.00%) 84.19
other 2778403 ( 5.68%) 2211095846 ( 7.08%) 795.82
udp 2817335 ( 5.75%) 1309933254 ( 4.19%) 464.95
dns 1283276 ( 2.62%) 624643278 ( 2.00%) 486.76
realaud 11 ( 0.00%) 760 ( 0.00%) 69.09
halflif 14 ( 0.00%) 1123 ( 0.00%) 80.21
starcra 33 ( 0.00%) 3447 ( 0.00%) 104.45
everque 129 ( 0.00%) 29300 ( 0.00%) 227.13
unreal 6 ( 0.00%) 1155 ( 0.00%) 192.50
quake 21 ( 0.00%) 1481 ( 0.00%) 70.52
cuseeme 4 ( 0.00%) 298 ( 0.00%) 74.50
other 1533738 ( 3.13%) 685182459 ( 2.19%) 446.74
icmp 15901644 ( 32.48%) 976811316 ( 3.13%) 61.43
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 18167 ( 0.04%) 3747818 ( 0.01%) 206.30
ip6 903246 ( 1.85%) 729810135 ( 2.34%) 807.99
pim 16 ( 0.00%) 960 ( 0.00%) 60.00
other 82335 ( 0.17%) 19073960 ( 0.06%) 231.66
frag 293250 ( 0.60%) 298868905 ( 0.96%) 1019.16
ip6 2084432 ( 4.26%) 1685476475 ( 5.39%) 808.60
tcp6 1901589 ( 3.88%) 1628193680 ( 5.21%) 856.23
http(s) 1386500 ( 2.83%) 1499802716 ( 4.80%) 1081.72
http(c) 404000 ( 0.83%) 42355344 ( 0.14%) 104.84
smtp 72 ( 0.00%) 25362 ( 0.00%) 352.25
ftp 199 ( 0.00%) 17520 ( 0.00%) 88.04
ssh 121 ( 0.00%) 15386 ( 0.00%) 127.16
dns 279 ( 0.00%) 59190 ( 0.00%) 212.15
bgp 95 ( 0.00%) 19787 ( 0.00%) 208.28
other 110323 ( 0.23%) 85898375 ( 0.27%) 778.61
udp6 151576 ( 0.31%) 50872817 ( 0.16%) 335.63
dns 114614 ( 0.23%) 25339023 ( 0.08%) 221.08
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
other 36961 ( 0.08%) 25533687 ( 0.08%) 690.83
icmp6 28720 ( 0.06%) 3725263 ( 0.01%) 129.71
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2432 ( 0.00%) 2669087 ( 0.01%) 1097.49
tcpdump file: 201210311400.dump.gz (1082.18 MB)