Traffic Trace Info
DumpFile: 201204010030.dump
FileSize: 3126.84MB
Id: 201204010030
StartTime: Sun Apr 1 00:30:01 2012
EndTime: Sun Apr 1 00:45:00 2012
TotalTime: 899.44 seconds
TotalCapSize: -1663.97MB CapLen: 96 bytes
# of packets: 45534758 (34251.81MB)
AvgRate: 319.46Mbps stddev:75.90M
IP flow (unique src/dst pair) Information
# of flows: 1751319 (avg. 26.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 4.8% 2.8% 2.4% 2.1% 1.8% 1.7% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 1382463
Top 10 bandwidth usage (bytes/total in %):
13.0% 11.0% 10.1% 9.9% 9.0% 8.2% 8.2% 5.0% 4.8% 4.2%
# of IPv6 addresses: 5824
Top 10 bandwidth usage (bytes/total in %):
60.9% 31.0% 10.6% 9.1% 7.8% 5.9% 4.7% 4.7% 4.1% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010030.pktlen.png)
detailed numbers
[ 32- 63]: 6929314
[ 64- 127]: 12597762
[ 128- 255]: 1256449
[ 256- 511]: 584245
[ 512- 1023]: 1322967
[ 1024- 2047]: 22844021
Protocol Breakdown
![[protocol breakdown chart]](201204010030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 45534758 (100.00%) 35915622514 (100.00%) 788.75
ip 45265523 ( 99.41%) 35753140356 ( 99.55%) 789.85
tcp 28695936 ( 63.02%) 25940423958 ( 72.23%) 903.98
http(s) 11993659 ( 26.34%) 16655527838 ( 46.37%) 1388.69
http(c) 5035076 ( 11.06%) 463142782 ( 1.29%) 91.98
squid 58808 ( 0.13%) 40941167 ( 0.11%) 696.18
smtp 37029 ( 0.08%) 8635576 ( 0.02%) 233.21
nntp 10 ( 0.00%) 626 ( 0.00%) 62.60
ftp 21710 ( 0.05%) 1792343 ( 0.00%) 82.56
pop3 4220 ( 0.01%) 970646 ( 0.00%) 230.01
imap 766 ( 0.00%) 470906 ( 0.00%) 614.76
telnet 4932 ( 0.01%) 361402 ( 0.00%) 73.28
ssh 1262499 ( 2.77%) 201942455 ( 0.56%) 159.95
dns 3621 ( 0.01%) 391802 ( 0.00%) 108.20
bgp 639 ( 0.00%) 116289 ( 0.00%) 181.99
napster 60 ( 0.00%) 4900 ( 0.00%) 81.67
realaud 18 ( 0.00%) 1130 ( 0.00%) 62.78
icecast 638 ( 0.00%) 133713 ( 0.00%) 209.58
hotline 46 ( 0.00%) 3666 ( 0.00%) 79.70
other 10272200 ( 22.56%) 8565986417 ( 23.85%) 833.90
udp 12680932 ( 27.85%) 8025427375 ( 22.35%) 632.87
dns 292180 ( 0.64%) 60513217 ( 0.17%) 207.11
realaud 84 ( 0.00%) 14678 ( 0.00%) 174.74
halflif 157 ( 0.00%) 25054 ( 0.00%) 159.58
starcra 28 ( 0.00%) 3874 ( 0.00%) 138.36
everque 388 ( 0.00%) 91879 ( 0.00%) 236.80
unreal 113 ( 0.00%) 33076 ( 0.00%) 292.71
quake 28 ( 0.00%) 7350 ( 0.00%) 262.50
cuseeme 21 ( 0.00%) 5442 ( 0.00%) 259.14
other 12374395 ( 27.18%) 7963845344 ( 22.17%) 643.57
icmp 1918344 ( 4.21%) 210572831 ( 0.59%) 109.77
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2798 ( 0.01%) 977812 ( 0.00%) 349.47
ip6 1943704 ( 4.27%) 1572554602 ( 4.38%) 809.05
pim 323 ( 0.00%) 19380 ( 0.00%) 60.00
other 23302 ( 0.05%) 3145238 ( 0.01%) 134.98
frag 37920 ( 0.08%) 28692364 ( 0.08%) 756.66
ip6 269235 ( 0.59%) 162482158 ( 0.45%) 603.50
tcp6 101779 ( 0.22%) 53968121 ( 0.15%) 530.25
http(s) 5126 ( 0.01%) 4278597 ( 0.01%) 834.69
http(c) 14374 ( 0.03%) 1262795 ( 0.00%) 87.85
smtp 46 ( 0.00%) 23616 ( 0.00%) 513.39
ftp 23 ( 0.00%) 1819 ( 0.00%) 79.09
dns 384 ( 0.00%) 75149 ( 0.00%) 195.70
bgp 87 ( 0.00%) 14207 ( 0.00%) 163.30
other 81739 ( 0.18%) 48311938 ( 0.13%) 591.05
udp6 116858 ( 0.26%) 89282665 ( 0.25%) 764.03
dns 42990 ( 0.09%) 9262177 ( 0.03%) 215.45
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
other 73867 ( 0.16%) 80020380 ( 0.22%) 1083.30
icmp6 29009 ( 0.06%) 4019338 ( 0.01%) 138.55
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 21477 ( 0.05%) 15196778 ( 0.04%) 707.58
tcpdump file: 201204010030.dump.gz (996.42 MB)