Traffic Trace Info
DumpFile: 201204010115.dump
FileSize: 2091.73MB
Id: 201204010115
StartTime: Sun Apr 1 01:15:00 2012
EndTime: Sun Apr 1 01:30:01 2012
TotalTime: 900.61 seconds
TotalCapSize: 1661.76MB CapLen: 96 bytes
# of packets: 28177889 (21892.12MB)
AvgRate: 203.90Mbps stddev:38.21M
IP flow (unique src/dst pair) Information
# of flows: 1795320 (avg. 15.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 3.4% 3.2% 3.0% 3.0% 2.1% 2.0% 1.8% 1.8% 1.8%
IP address Information
# of IPv4 addresses: 1405050
Top 10 bandwidth usage (bytes/total in %):
21.4% 19.2% 8.1% 6.9% 5.8% 4.3% 3.6% 3.3% 3.2% 3.1%
# of IPv6 addresses: 6174
Top 10 bandwidth usage (bytes/total in %):
81.4% 79.7% 4.8% 4.4% 4.4% 3.4% 1.9% 1.2% 1.2% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010115.pktlen.png)
detailed numbers
[ 32- 63]: 3949371
[ 64- 127]: 7641793
[ 128- 255]: 1019637
[ 256- 511]: 549388
[ 512- 1023]: 629545
[ 1024- 2047]: 14388155
Protocol Breakdown
![[protocol breakdown chart]](201204010115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28177889 (100.00%) 22955546485 (100.00%) 814.67
ip 27298285 ( 96.88%) 21969423368 ( 95.70%) 804.79
tcp 20124946 ( 71.42%) 19357601869 ( 84.33%) 961.87
http(s) 9675722 ( 34.34%) 13283023617 ( 57.86%) 1372.82
http(c) 3242744 ( 11.51%) 326580467 ( 1.42%) 100.71
squid 76283 ( 0.27%) 60908029 ( 0.27%) 798.45
smtp 49047 ( 0.17%) 15237145 ( 0.07%) 310.66
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 6964 ( 0.02%) 721484 ( 0.00%) 103.60
pop3 3426 ( 0.01%) 574082 ( 0.00%) 167.57
imap 1486 ( 0.01%) 977030 ( 0.00%) 657.49
telnet 5108 ( 0.02%) 372905 ( 0.00%) 73.00
ssh 30086 ( 0.11%) 11644873 ( 0.05%) 387.05
dns 3184 ( 0.01%) 331700 ( 0.00%) 104.18
bgp 625 ( 0.00%) 113667 ( 0.00%) 181.87
napster 70 ( 0.00%) 4708 ( 0.00%) 67.26
realaud 29 ( 0.00%) 2194 ( 0.00%) 75.66
rtsp 6 ( 0.00%) 374 ( 0.00%) 62.33
icecast 3983 ( 0.01%) 300561 ( 0.00%) 75.46
other 7026181 ( 24.94%) 5656808913 ( 24.64%) 805.10
udp 3279971 ( 11.64%) 1034817477 ( 4.51%) 315.50
dns 284032 ( 1.01%) 58746076 ( 0.26%) 206.83
realaud 9 ( 0.00%) 1045 ( 0.00%) 116.11
halflif 28 ( 0.00%) 3699 ( 0.00%) 132.11
starcra 74 ( 0.00%) 12443 ( 0.00%) 168.15
everque 1705 ( 0.01%) 1479323 ( 0.01%) 867.64
unreal 122 ( 0.00%) 45780 ( 0.00%) 375.25
quake 26 ( 0.00%) 2454 ( 0.00%) 94.38
cuseeme 2 ( 0.00%) 454 ( 0.00%) 227.00
other 2991904 ( 10.62%) 974374527 ( 4.24%) 325.67
icmp 1796801 ( 6.38%) 203721192 ( 0.89%) 113.38
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2877 ( 0.01%) 1015534 ( 0.00%) 352.98
ip6 2070869 ( 7.35%) 1369289623 ( 5.96%) 661.21
pim 236 ( 0.00%) 14160 ( 0.00%) 60.00
other 22400 ( 0.08%) 2944243 ( 0.01%) 131.44
frag 5083 ( 0.02%) 4015352 ( 0.02%) 789.96
ip6 879604 ( 3.12%) 986123117 ( 4.30%) 1121.10
tcp6 792752 ( 2.81%) 960658384 ( 4.18%) 1211.80
http(s) 7993 ( 0.03%) 8268630 ( 0.04%) 1034.48
http(c) 58573 ( 0.21%) 5130756 ( 0.02%) 87.60
smtp 48 ( 0.00%) 10809 ( 0.00%) 225.19
ftp 87 ( 0.00%) 10700 ( 0.00%) 122.99
dns 185 ( 0.00%) 26654 ( 0.00%) 144.08
bgp 96 ( 0.00%) 17103 ( 0.00%) 178.16
other 725770 ( 2.58%) 947193732 ( 4.13%) 1305.09
udp6 56233 ( 0.20%) 20956430 ( 0.09%) 372.67
dns 40225 ( 0.14%) 8753378 ( 0.04%) 217.61
halflif 1 ( 0.00%) 93 ( 0.00%) 93.00
everque 1 ( 0.00%) 159 ( 0.00%) 159.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 16005 ( 0.06%) 12202692 ( 0.05%) 762.43
icmp6 30078 ( 0.11%) 4066625 ( 0.02%) 135.20
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 426 ( 0.00%) 426068 ( 0.00%) 1000.16
tcpdump file: 201204010115.dump.gz (656.41 MB)