Traffic Trace Info
DumpFile: 201204010015.dump
FileSize: 3153.59MB
Id: 201204010015
StartTime: Sun Apr 1 00:15:00 2012
EndTime: Sun Apr 1 00:30:01 2012
TotalTime: 900.28 seconds
TotalCapSize: -1657.50MB CapLen: 96 bytes
# of packets: 46863937 (35792.77MB)
AvgRate: 333.52Mbps stddev:50.80M
IP flow (unique src/dst pair) Information
# of flows: 1867519 (avg. 25.09 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.5% 2.4% 1.9% 1.6% 1.4% 1.1% 1.1% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 1461816
Top 10 bandwidth usage (bytes/total in %):
18.8% 12.0% 9.8% 9.7% 9.3% 7.7% 7.5% 3.1% 2.5% 2.3%
# of IPv6 addresses: 5892
Top 10 bandwidth usage (bytes/total in %):
34.9% 34.9% 20.7% 17.8% 11.7% 10.9% 9.8% 6.1% 5.2% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010015.pktlen.png)
detailed numbers
[ 32- 63]: 7503967
[ 64- 127]: 11759876
[ 128- 255]: 1145967
[ 256- 511]: 613498
[ 512- 1023]: 2232769
[ 1024- 2047]: 23607860
Protocol Breakdown
![[protocol breakdown chart]](201204010015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 46863937 (100.00%) 37531443925 (100.00%) 800.86
ip 46645320 ( 99.53%) 37407262203 ( 99.67%) 801.95
tcp 28889325 ( 61.65%) 26711498488 ( 71.17%) 924.61
http(s) 14795164 ( 31.57%) 20720539714 ( 55.21%) 1400.49
http(c) 6320880 ( 13.49%) 552614526 ( 1.47%) 87.43
squid 53909 ( 0.12%) 36070267 ( 0.10%) 669.10
smtp 46844 ( 0.10%) 19084249 ( 0.05%) 407.40
nntp 7 ( 0.00%) 434 ( 0.00%) 62.00
ftp 22074 ( 0.05%) 1827102 ( 0.00%) 82.77
pop3 6131 ( 0.01%) 762851 ( 0.00%) 124.43
imap 1056 ( 0.00%) 615821 ( 0.00%) 583.16
telnet 9241 ( 0.02%) 4816452 ( 0.01%) 521.20
ssh 1222087 ( 2.61%) 565544508 ( 1.51%) 462.77
dns 3650 ( 0.01%) 383915 ( 0.00%) 105.18
bgp 620 ( 0.00%) 101794 ( 0.00%) 164.18
napster 72 ( 0.00%) 4800 ( 0.00%) 66.67
realaud 8 ( 0.00%) 508 ( 0.00%) 63.50
rtsp 15 ( 0.00%) 6603 ( 0.00%) 440.20
icecast 694 ( 0.00%) 102699 ( 0.00%) 147.98
hotline 17 ( 0.00%) 1427 ( 0.00%) 83.94
other 6406855 ( 13.67%) 4809020758 ( 12.81%) 750.61
udp 14219225 ( 30.34%) 9248617076 ( 24.64%) 650.43
dns 326433 ( 0.70%) 66592681 ( 0.18%) 204.00
realaud 84 ( 0.00%) 12399 ( 0.00%) 147.61
halflif 194 ( 0.00%) 24654 ( 0.00%) 127.08
starcra 77 ( 0.00%) 11050 ( 0.00%) 143.51
everque 309 ( 0.00%) 68105 ( 0.00%) 220.40
unreal 64 ( 0.00%) 18586 ( 0.00%) 290.41
quake 10 ( 0.00%) 1073 ( 0.00%) 107.30
cuseeme 29 ( 0.00%) 12434 ( 0.00%) 428.76
other 13891802 ( 29.64%) 9181831888 ( 24.46%) 660.95
icmp 1959951 ( 4.18%) 214968458 ( 0.57%) 109.68
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2947 ( 0.01%) 1039074 ( 0.00%) 352.59
ip6 1550356 ( 3.31%) 1228083623 ( 3.27%) 792.13
pim 257 ( 0.00%) 15420 ( 0.00%) 60.00
other 23074 ( 0.05%) 3020794 ( 0.01%) 130.92
frag 9340 ( 0.02%) 7016776 ( 0.02%) 751.26
ip6 218615 ( 0.47%) 124181602 ( 0.33%) 568.04
tcp6 117189 ( 0.25%) 83845896 ( 0.22%) 715.48
http(s) 4070 ( 0.01%) 4491720 ( 0.01%) 1103.62
http(c) 15505 ( 0.03%) 1379051 ( 0.00%) 88.94
smtp 108 ( 0.00%) 68639 ( 0.00%) 635.55
ftp 25 ( 0.00%) 3270 ( 0.00%) 130.80
dns 116 ( 0.00%) 16054 ( 0.00%) 138.40
bgp 91 ( 0.00%) 14163 ( 0.00%) 155.64
other 97274 ( 0.21%) 77872999 ( 0.21%) 800.55
udp6 71141 ( 0.15%) 35768071 ( 0.10%) 502.78
dns 44946 ( 0.10%) 9978729 ( 0.03%) 222.02
realaud 1 ( 0.00%) 118 ( 0.00%) 118.00
other 26194 ( 0.06%) 25789224 ( 0.07%) 984.55
icmp6 29673 ( 0.06%) 4076906 ( 0.01%) 137.39
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 497 ( 0.00%) 475069 ( 0.00%) 955.87
tcpdump file: 201204010015.dump.gz (1010.26 MB)