Traffic Trace Info
DumpFile: 201204010045.dump
FileSize: 2488.46MB
Id: 201204010045
StartTime: Sun Apr 1 00:45:00 2012
EndTime: Sun Apr 1 01:00:00 2012
TotalTime: 899.94 seconds
TotalCapSize: 1938.11MB CapLen: 96 bytes
# of packets: 36067467 (26770.90MB)
AvgRate: 249.53Mbps stddev:40.15M
IP flow (unique src/dst pair) Information
# of flows: 1995162 (avg. 18.08 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 6.2% 4.0% 2.8% 2.1% 1.7% 1.3% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1512404
Top 10 bandwidth usage (bytes/total in %):
17.4% 10.9% 10.0% 7.0% 7.0% 6.7% 6.4% 6.0% 4.8% 4.1%
# of IPv6 addresses: 6111
Top 10 bandwidth usage (bytes/total in %):
53.9% 9.7% 7.9% 7.7% 7.3% 6.7% 6.4% 6.4% 6.3% 5.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010045.pktlen.png)
detailed numbers
[ 32- 63]: 6341847
[ 64- 127]: 9212936
[ 128- 255]: 1059929
[ 256- 511]: 655503
[ 512- 1023]: 1022581
[ 1024- 2047]: 17774671
Protocol Breakdown
![[protocol breakdown chart]](201204010045.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36067467 (100.00%) 28071321317 (100.00%) 778.30
ip 35796075 ( 99.25%) 27926116860 ( 99.48%) 780.14
tcp 21241060 ( 58.89%) 19674618477 ( 70.09%) 926.25
http(s) 8936388 ( 24.78%) 12146934815 ( 43.27%) 1359.27
http(c) 2963695 ( 8.22%) 318065384 ( 1.13%) 107.32
squid 60811 ( 0.17%) 43019589 ( 0.15%) 707.43
smtp 36158 ( 0.10%) 9901340 ( 0.04%) 273.84
nntp 10 ( 0.00%) 614 ( 0.00%) 61.40
ftp 6156 ( 0.02%) 619598 ( 0.00%) 100.65
pop3 1639 ( 0.00%) 403850 ( 0.00%) 246.40
imap 948 ( 0.00%) 291944 ( 0.00%) 307.96
telnet 5030 ( 0.01%) 370948 ( 0.00%) 73.75
ssh 288288 ( 0.80%) 41471734 ( 0.15%) 143.86
dns 3732 ( 0.01%) 408569 ( 0.00%) 109.48
bgp 610 ( 0.00%) 104725 ( 0.00%) 171.68
napster 57 ( 0.00%) 19071 ( 0.00%) 334.58
realaud 6 ( 0.00%) 374 ( 0.00%) 62.33
icecast 3299 ( 0.01%) 265532 ( 0.00%) 80.49
hotline 12 ( 0.00%) 744 ( 0.00%) 62.00
other 8934221 ( 24.77%) 7112739646 ( 25.34%) 796.12
udp 10615632 ( 29.43%) 6290165325 ( 22.41%) 592.54
dns 271300 ( 0.75%) 59951220 ( 0.21%) 220.98
realaud 35 ( 0.00%) 6401 ( 0.00%) 182.89
halflif 22 ( 0.00%) 1894 ( 0.00%) 86.09
starcra 33 ( 0.00%) 4156 ( 0.00%) 125.94
everque 368 ( 0.00%) 81835 ( 0.00%) 222.38
unreal 131 ( 0.00%) 56729 ( 0.00%) 433.05
quake 74 ( 0.00%) 36711 ( 0.00%) 496.09
cuseeme 36 ( 0.00%) 9886 ( 0.00%) 274.61
other 9578235 ( 26.56%) 6183916441 ( 22.03%) 645.62
icmp 1812764 ( 5.03%) 204826885 ( 0.73%) 112.99
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2937 ( 0.01%) 1029270 ( 0.00%) 350.45
ip6 2101048 ( 5.83%) 1752573687 ( 6.24%) 834.14
pim 285 ( 0.00%) 17100 ( 0.00%) 60.00
other 22164 ( 0.06%) 2866846 ( 0.01%) 129.35
frag 1689112 ( 4.68%) 1289756991 ( 4.59%) 763.57
ip6 271392 ( 0.75%) 145204457 ( 0.52%) 535.04
tcp6 147023 ( 0.41%) 81981349 ( 0.29%) 557.61
http(s) 5370 ( 0.01%) 5435189 ( 0.02%) 1012.14
http(c) 14445 ( 0.04%) 1288885 ( 0.00%) 89.23
smtp 99 ( 0.00%) 49422 ( 0.00%) 499.21
ftp 123 ( 0.00%) 14408 ( 0.00%) 117.14
dns 216 ( 0.00%) 47946 ( 0.00%) 221.97
bgp 93 ( 0.00%) 14844 ( 0.00%) 159.61
other 126677 ( 0.35%) 75130655 ( 0.27%) 593.09
udp6 88898 ( 0.25%) 55202721 ( 0.20%) 620.97
dns 41671 ( 0.12%) 9225319 ( 0.03%) 221.38
halflif 1 ( 0.00%) 109 ( 0.00%) 109.00
starcra 1 ( 0.00%) 115 ( 0.00%) 115.00
everque 2 ( 0.00%) 225 ( 0.00%) 112.50
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
cuseeme 1 ( 0.00%) 109 ( 0.00%) 109.00
other 47221 ( 0.13%) 45976736 ( 0.16%) 973.65
icmp6 30304 ( 0.08%) 4071467 ( 0.01%) 134.35
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 5051 ( 0.01%) 3933174 ( 0.01%) 778.69
tcpdump file: 201204010045.dump.gz (780.62 MB)