Traffic Trace Info
DumpFile: 201204010145.dump
FileSize: 1954.97MB
Id: 201204010145
StartTime: Sun Apr 1 01:45:00 2012
EndTime: Sun Apr 1 02:00:00 2012
TotalTime: 900.32 seconds
TotalCapSize: 1550.69MB CapLen: 96 bytes
# of packets: 26494277 (20937.91MB)
AvgRate: 195.07Mbps stddev:28.31M
IP flow (unique src/dst pair) Information
# of flows: 1996406 (avg. 13.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.9% 4.2% 3.3% 2.7% 2.6% 2.2% 1.9% 1.8% 1.7% 1.6%
IP address Information
# of IPv4 addresses: 1553361
Top 10 bandwidth usage (bytes/total in %):
25.2% 22.0% 8.4% 6.9% 4.4% 4.3% 3.5% 3.3% 3.1% 2.8%
# of IPv6 addresses: 6029
Top 10 bandwidth usage (bytes/total in %):
83.9% 68.5% 10.0% 9.0% 4.4% 2.3% 2.2% 1.5% 1.2% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010145.pktlen.png)
detailed numbers
[ 32- 63]: 3810032
[ 64- 127]: 6396817
[ 128- 255]: 1252762
[ 256- 511]: 573587
[ 512- 1023]: 764471
[ 1024- 2047]: 13696608
Protocol Breakdown
![[protocol breakdown chart]](201204010145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26494277 (100.00%) 21954986317 (100.00%) 828.67
ip 25770216 ( 97.27%) 21114997709 ( 96.17%) 819.36
tcp 18753146 ( 70.78%) 18351626923 ( 83.59%) 978.59
http(s) 9231264 ( 34.84%) 12611129732 ( 57.44%) 1366.13
http(c) 3066452 ( 11.57%) 737071867 ( 3.36%) 240.37
squid 60427 ( 0.23%) 43774619 ( 0.20%) 724.42
smtp 42156 ( 0.16%) 12539418 ( 0.06%) 297.45
nntp 16 ( 0.00%) 996 ( 0.00%) 62.25
ftp 8860 ( 0.03%) 948687 ( 0.00%) 107.08
pop3 2013 ( 0.01%) 431247 ( 0.00%) 214.23
imap 881 ( 0.00%) 337390 ( 0.00%) 382.96
telnet 5531 ( 0.02%) 477417 ( 0.00%) 86.32
ssh 207828 ( 0.78%) 24081216 ( 0.11%) 115.87
dns 3664 ( 0.01%) 371545 ( 0.00%) 101.40
bgp 632 ( 0.00%) 123226 ( 0.00%) 194.98
napster 26 ( 0.00%) 1798 ( 0.00%) 69.15
realaud 5 ( 0.00%) 310 ( 0.00%) 62.00
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 5280 ( 0.02%) 4004302 ( 0.02%) 758.39
hotline 12 ( 0.00%) 802 ( 0.00%) 66.83
other 6118097 ( 23.09%) 4916332231 ( 22.39%) 803.57
udp 3106990 ( 11.73%) 1057891803 ( 4.82%) 340.49
dns 258797 ( 0.98%) 55908451 ( 0.25%) 216.03
realaud 4 ( 0.00%) 343 ( 0.00%) 85.75
halflif 108 ( 0.00%) 16968 ( 0.00%) 157.11
starcra 27 ( 0.00%) 2060 ( 0.00%) 76.30
everque 340 ( 0.00%) 87449 ( 0.00%) 257.20
unreal 122 ( 0.00%) 62210 ( 0.00%) 509.92
quake 49 ( 0.00%) 12376 ( 0.00%) 252.57
cuseeme 6 ( 0.00%) 881 ( 0.00%) 146.83
other 2847365 ( 10.75%) 1001740667 ( 4.56%) 351.81
icmp 1843667 ( 6.96%) 204324765 ( 0.93%) 110.83
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2799 ( 0.01%) 966314 ( 0.00%) 345.24
ip6 2041693 ( 7.71%) 1497323488 ( 6.82%) 733.37
pim 340 ( 0.00%) 20400 ( 0.00%) 60.00
other 21396 ( 0.08%) 2824746 ( 0.01%) 132.02
frag 1019 ( 0.00%) 1048685 ( 0.00%) 1029.13
ip6 724061 ( 2.73%) 839988608 ( 3.83%) 1160.11
tcp6 617487 ( 2.33%) 788102418 ( 3.59%) 1276.31
http(s) 38575 ( 0.15%) 53047632 ( 0.24%) 1375.18
http(c) 27601 ( 0.10%) 2401931 ( 0.01%) 87.02
smtp 809 ( 0.00%) 273816 ( 0.00%) 338.46
dns 144 ( 0.00%) 23528 ( 0.00%) 163.39
bgp 95 ( 0.00%) 17301 ( 0.00%) 182.12
other 550263 ( 2.08%) 732338210 ( 3.34%) 1330.89
udp6 74847 ( 0.28%) 47406142 ( 0.22%) 633.37
dns 37229 ( 0.14%) 8238466 ( 0.04%) 221.29
unreal 2 ( 0.00%) 206 ( 0.00%) 103.00
quake 1 ( 0.00%) 121 ( 0.00%) 121.00
other 37615 ( 0.14%) 39167349 ( 0.18%) 1041.27
icmp6 31358 ( 0.12%) 4206529 ( 0.02%) 134.15
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 254 ( 0.00%) 257859 ( 0.00%) 1015.19
tcpdump file: 201204010145.dump.gz (609.11 MB)