Traffic Trace Info
DumpFile: 201204010000.dump
FileSize: 2782.48MB
Id: 201204010000
StartTime: Sun Apr 1 00:00:01 2012
EndTime: Sun Apr 1 00:15:00 2012
TotalTime: 899.63 seconds
TotalCapSize: -1952.24MB CapLen: 96 bytes
# of packets: 41858933 (30773.94MB)
AvgRate: 286.97Mbps stddev:43.09M
IP flow (unique src/dst pair) Information
# of flows: 1961842 (avg. 21.34 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.4% 2.3% 1.7% 1.3% 1.2% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 1505353
Top 10 bandwidth usage (bytes/total in %):
18.3% 12.3% 11.3% 10.4% 5.0% 3.2% 3.1% 3.0% 2.8% 2.8%
# of IPv6 addresses: 6149
Top 10 bandwidth usage (bytes/total in %):
27.9% 17.3% 15.3% 8.7% 8.3% 7.9% 7.4% 7.3% 6.8% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010000.pktlen.png)
detailed numbers
[ 32- 63]: 7111173
[ 64- 127]: 10609373
[ 128- 255]: 1130860
[ 256- 511]: 639083
[ 512- 1023]: 2272419
[ 1024- 2047]: 20096025
Protocol Breakdown
![[protocol breakdown chart]](201204010000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41858933 (100.00%) 32268811473 (100.00%) 770.89
ip 41684723 ( 99.58%) 32217046699 ( 99.84%) 772.87
tcp 23949888 ( 57.22%) 21760870222 ( 67.44%) 908.60
http(s) 12269076 ( 29.31%) 17070737440 ( 52.90%) 1391.36
http(c) 5679827 ( 13.57%) 491568530 ( 1.52%) 86.55
squid 52641 ( 0.13%) 34554622 ( 0.11%) 656.42
smtp 98995 ( 0.24%) 78054418 ( 0.24%) 788.47
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 8670 ( 0.02%) 865261 ( 0.00%) 99.80
pop3 5934 ( 0.01%) 779562 ( 0.00%) 131.37
imap 846 ( 0.00%) 538620 ( 0.00%) 636.67
telnet 5215 ( 0.01%) 378710 ( 0.00%) 72.62
ssh 985235 ( 2.35%) 540929803 ( 1.68%) 549.04
dns 5778 ( 0.01%) 493891 ( 0.00%) 85.48
bgp 626 ( 0.00%) 110475 ( 0.00%) 176.48
napster 33 ( 0.00%) 3858 ( 0.00%) 116.91
realaud 110 ( 0.00%) 19236 ( 0.00%) 174.87
rtsp 74 ( 0.00%) 28893 ( 0.00%) 390.45
icecast 669 ( 0.00%) 131802 ( 0.00%) 197.01
hotline 12 ( 0.00%) 1267 ( 0.00%) 105.58
other 4836141 ( 11.55%) 3541673460 ( 10.98%) 732.33
udp 14139235 ( 33.78%) 9128573032 ( 28.29%) 645.62
dns 411861 ( 0.98%) 82106897 ( 0.25%) 199.36
rip 1 ( 0.00%) 62 ( 0.00%) 62.00
realaud 1037 ( 0.00%) 79023 ( 0.00%) 76.20
halflif 168 ( 0.00%) 24445 ( 0.00%) 145.51
starcra 77 ( 0.00%) 11844 ( 0.00%) 153.82
everque 329 ( 0.00%) 76825 ( 0.00%) 233.51
unreal 11 ( 0.00%) 1435 ( 0.00%) 130.45
quake 33 ( 0.00%) 4815 ( 0.00%) 145.91
cuseeme 52 ( 0.00%) 13755 ( 0.00%) 264.52
other 13725531 ( 32.79%) 9046210561 ( 28.03%) 659.08
icmp 2111765 ( 5.04%) 225138978 ( 0.70%) 106.61
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2903 ( 0.01%) 1024858 ( 0.00%) 353.03
ip6 1456963 ( 3.48%) 1098380798 ( 3.40%) 753.88
pim 357 ( 0.00%) 21420 ( 0.00%) 60.00
other 23427 ( 0.06%) 3018121 ( 0.01%) 128.83
frag 936 ( 0.00%) 836274 ( 0.00%) 893.46
ip6 174210 ( 0.42%) 51764774 ( 0.16%) 297.14
tcp6 87684 ( 0.21%) 36248280 ( 0.11%) 413.40
http(s) 8047 ( 0.02%) 9510400 ( 0.03%) 1181.86
http(c) 18188 ( 0.04%) 1596045 ( 0.00%) 87.75
smtp 68 ( 0.00%) 33616 ( 0.00%) 494.35
ftp 3076 ( 0.01%) 4304343 ( 0.01%) 1399.33
dns 271 ( 0.00%) 51986 ( 0.00%) 191.83
bgp 87 ( 0.00%) 14536 ( 0.00%) 167.08
other 57947 ( 0.14%) 20737354 ( 0.06%) 357.87
udp6 52911 ( 0.13%) 10750278 ( 0.03%) 203.18
dns 48242 ( 0.12%) 10217717 ( 0.03%) 211.80
halflif 2 ( 0.00%) 208 ( 0.00%) 104.00
other 4667 ( 0.01%) 532353 ( 0.00%) 114.07
icmp6 33268 ( 0.08%) 4515065 ( 0.01%) 135.72
ip6 81 ( 0.00%) 11058 ( 0.00%) 136.52
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 235 ( 0.00%) 235877 ( 0.00%) 1003.73
tcpdump file: 201204010000.dump.gz (903.54 MB)