Traffic Trace Info
DumpFile: 201204010130.dump
FileSize: 1980.51MB
Id: 201204010130
StartTime: Sun Apr 1 01:30:01 2012
EndTime: Sun Apr 1 01:45:00 2012
TotalTime: 899.38 seconds
TotalCapSize: 1571.96MB CapLen: 96 bytes
# of packets: 26774350 (20697.34MB)
AvgRate: 193.08Mbps stddev:35.11M
IP flow (unique src/dst pair) Information
# of flows: 1769256 (avg. 15.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.0% 3.5% 3.2% 2.8% 2.7% 2.7% 2.7% 2.3% 2.0% 1.9%
IP address Information
# of IPv4 addresses: 1388128
Top 10 bandwidth usage (bytes/total in %):
23.6% 18.0% 8.5% 7.9% 7.1% 5.8% 5.6% 3.4% 3.2% 2.9%
# of IPv6 addresses: 6093
Top 10 bandwidth usage (bytes/total in %):
87.0% 86.8% 4.5% 2.5% 1.9% 1.7% 1.3% 1.1% 0.7% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010130.pktlen.png)
detailed numbers
[ 32- 63]: 4032253
[ 64- 127]: 6827652
[ 128- 255]: 1119531
[ 256- 511]: 565092
[ 512- 1023]: 597212
[ 1024- 2047]: 13632610
Protocol Breakdown
![[protocol breakdown chart]](201204010130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26774350 (100.00%) 21702738307 (100.00%) 810.58
ip 26035187 ( 97.24%) 20829553243 ( 95.98%) 800.05
tcp 18756418 ( 70.05%) 17888364939 ( 82.42%) 953.72
http(s) 8919469 ( 33.31%) 12172322801 ( 56.09%) 1364.69
http(c) 3085696 ( 11.52%) 422557110 ( 1.95%) 136.94
squid 81576 ( 0.30%) 58760004 ( 0.27%) 720.31
smtp 38693 ( 0.14%) 10101081 ( 0.05%) 261.06
nntp 18 ( 0.00%) 1122 ( 0.00%) 62.33
ftp 8488 ( 0.03%) 810430 ( 0.00%) 95.48
pop3 4868 ( 0.02%) 1212385 ( 0.01%) 249.05
imap 666 ( 0.00%) 159293 ( 0.00%) 239.18
telnet 7718 ( 0.03%) 558622 ( 0.00%) 72.38
ssh 50068 ( 0.19%) 32138570 ( 0.15%) 641.90
dns 3607 ( 0.01%) 360153 ( 0.00%) 99.85
bgp 622 ( 0.00%) 105535 ( 0.00%) 169.67
napster 25 ( 0.00%) 1616 ( 0.00%) 64.64
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 8353 ( 0.03%) 5746535 ( 0.03%) 687.96
other 6546549 ( 24.45%) 5183529562 ( 23.88%) 791.80
udp 3190942 ( 11.92%) 1191779207 ( 5.49%) 373.49
dns 278059 ( 1.04%) 57670734 ( 0.27%) 207.40
realaud 22 ( 0.00%) 3067 ( 0.00%) 139.41
halflif 68 ( 0.00%) 8865 ( 0.00%) 130.37
starcra 39 ( 0.00%) 3390 ( 0.00%) 86.92
everque 2500 ( 0.01%) 1946963 ( 0.01%) 778.79
unreal 177 ( 0.00%) 74501 ( 0.00%) 420.91
quake 19 ( 0.00%) 1822 ( 0.00%) 95.89
other 2909808 ( 10.87%) 1131957737 ( 5.22%) 389.01
icmp 1867914 ( 6.98%) 205661902 ( 0.95%) 110.10
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2702 ( 0.01%) 920980 ( 0.00%) 340.85
ip6 2193203 ( 8.19%) 1537556816 ( 7.08%) 701.06
pim 327 ( 0.00%) 19620 ( 0.00%) 60.00
other 23497 ( 0.09%) 5230619 ( 0.02%) 222.61
frag 1146 ( 0.00%) 1080777 ( 0.00%) 943.09
ip6 739163 ( 2.76%) 873185064 ( 4.02%) 1181.32
tcp6 639954 ( 2.39%) 836712150 ( 3.86%) 1307.46
http(s) 7715 ( 0.03%) 8046654 ( 0.04%) 1042.99
http(c) 15268 ( 0.06%) 1353306 ( 0.01%) 88.64
smtp 18 ( 0.00%) 2074 ( 0.00%) 115.22
dns 355 ( 0.00%) 66857 ( 0.00%) 188.33
bgp 88 ( 0.00%) 15024 ( 0.00%) 170.73
other 616510 ( 2.30%) 827228235 ( 3.81%) 1341.79
udp6 67727 ( 0.25%) 31894555 ( 0.15%) 470.93
dns 40068 ( 0.15%) 8889955 ( 0.04%) 221.87
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 1 ( 0.00%) 104 ( 0.00%) 104.00
unreal 1 ( 0.00%) 109 ( 0.00%) 109.00
other 27656 ( 0.10%) 23004281 ( 0.11%) 831.80
icmp6 30927 ( 0.12%) 4153661 ( 0.02%) 134.31
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 442 ( 0.00%) 409306 ( 0.00%) 926.03
tcpdump file: 201204010130.dump.gz (619.71 MB)