Traffic Trace Info
DumpFile: 201204010100.dump
FileSize: 2278.86MB
Id: 201204010100
StartTime: Sun Apr 1 01:00:00 2012
EndTime: Sun Apr 1 01:15:00 2012
TotalTime: 900.13 seconds
TotalCapSize: 1795.80MB CapLen: 96 bytes
# of packets: 31656857 (23740.57MB)
AvgRate: 221.22Mbps stddev:39.86M
IP flow (unique src/dst pair) Information
# of flows: 1907933 (avg. 16.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.9% 7.0% 5.6% 2.4% 2.3% 2.3% 1.7% 1.5% 1.4% 1.2%
IP address Information
# of IPv4 addresses: 1451945
Top 10 bandwidth usage (bytes/total in %):
16.3% 15.4% 9.1% 8.6% 7.6% 7.0% 5.8% 5.3% 3.4% 2.9%
# of IPv6 addresses: 6352
Top 10 bandwidth usage (bytes/total in %):
88.1% 87.2% 5.5% 2.3% 1.1% 0.9% 0.8% 0.8% 0.8% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010100.pktlen.png)
detailed numbers
[ 32- 63]: 6422109
[ 64- 127]: 7416826
[ 128- 255]: 970835
[ 256- 511]: 608471
[ 512- 1023]: 661586
[ 1024- 2047]: 15577030
Protocol Breakdown
![[protocol breakdown chart]](201204010100.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31656857 (100.00%) 24893794177 (100.00%) 786.36
ip 30385271 ( 95.98%) 23287318246 ( 93.55%) 766.40
tcp 19871243 ( 62.77%) 18590229245 ( 74.68%) 935.53
http(s) 9267911 ( 29.28%) 12676632073 ( 50.92%) 1367.80
http(c) 3637502 ( 11.49%) 380039495 ( 1.53%) 104.48
squid 100016 ( 0.32%) 54513406 ( 0.22%) 545.05
smtp 33710 ( 0.11%) 4534079 ( 0.02%) 134.50
nntp 19 ( 0.00%) 1182 ( 0.00%) 62.21
ftp 8362 ( 0.03%) 873720 ( 0.00%) 104.49
pop3 4925 ( 0.02%) 3553967 ( 0.01%) 721.62
imap 928 ( 0.00%) 385202 ( 0.00%) 415.09
telnet 5327 ( 0.02%) 393122 ( 0.00%) 73.80
ssh 32999 ( 0.10%) 13963564 ( 0.06%) 423.15
dns 4046 ( 0.01%) 1018793 ( 0.00%) 251.80
bgp 655 ( 0.00%) 131012 ( 0.00%) 200.02
napster 40 ( 0.00%) 3030 ( 0.00%) 75.75
realaud 6 ( 0.00%) 703 ( 0.00%) 117.17
rtsp 7 ( 0.00%) 434 ( 0.00%) 62.00
icecast 7967 ( 0.03%) 592303 ( 0.00%) 74.34
hotline 5 ( 0.00%) 312 ( 0.00%) 62.40
other 6766812 ( 21.38%) 5453592488 ( 21.91%) 805.93
udp 6375808 ( 20.14%) 3135254730 ( 12.59%) 491.74
dns 304972 ( 0.96%) 63961385 ( 0.26%) 209.73
realaud 10 ( 0.00%) 1462 ( 0.00%) 146.20
halflif 35 ( 0.00%) 5662 ( 0.00%) 161.77
starcra 104 ( 0.00%) 19778 ( 0.00%) 190.17
everque 325 ( 0.00%) 71003 ( 0.00%) 218.47
unreal 114 ( 0.00%) 63746 ( 0.00%) 559.18
quake 20 ( 0.00%) 2184 ( 0.00%) 109.20
cuseeme 2 ( 0.00%) 196 ( 0.00%) 98.00
other 6057665 ( 19.14%) 3070270687 ( 12.33%) 506.84
icmp 1780062 ( 5.62%) 200431145 ( 0.81%) 112.60
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2950 ( 0.01%) 1040596 ( 0.00%) 352.74
ip6 2330751 ( 7.36%) 1357222889 ( 5.45%) 582.31
pim 256 ( 0.00%) 15360 ( 0.00%) 60.00
other 24017 ( 0.08%) 3105121 ( 0.01%) 129.29
frag 2625864 ( 8.29%) 2004067149 ( 8.05%) 763.20
ip6 1271586 ( 4.02%) 1606475931 ( 6.45%) 1263.36
tcp6 1156954 ( 3.65%) 1553262051 ( 6.24%) 1342.54
http(s) 7665 ( 0.02%) 8194199 ( 0.03%) 1069.04
http(c) 27484 ( 0.09%) 2447826 ( 0.01%) 89.06
smtp 491 ( 0.00%) 178119 ( 0.00%) 362.77
ftp 72 ( 0.00%) 6245 ( 0.00%) 86.74
dns 273 ( 0.00%) 85468 ( 0.00%) 313.07
bgp 90 ( 0.00%) 15060 ( 0.00%) 167.33
other 1120879 ( 3.54%) 1542335134 ( 6.20%) 1376.01
udp6 81908 ( 0.26%) 47766099 ( 0.19%) 583.17
dns 45451 ( 0.14%) 10709786 ( 0.04%) 235.63
halflif 1 ( 0.00%) 95 ( 0.00%) 95.00
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
unreal 1 ( 0.00%) 103 ( 0.00%) 103.00
other 36454 ( 0.12%) 37056008 ( 0.15%) 1016.51
icmp6 31212 ( 0.10%) 4195180 ( 0.02%) 134.41
ip6 87 ( 0.00%) 11816 ( 0.00%) 135.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1395 ( 0.00%) 1236705 ( 0.00%) 886.53
tcpdump file: 201204010100.dump.gz (705.01 MB)