Traffic Trace Info
DumpFile: 201204010200.dump
FileSize: 2024.56MB
Id: 201204010200
StartTime: Sun Apr 1 02:00:00 2012
EndTime: Sun Apr 1 02:15:00 2012
TotalTime: 899.68 seconds
TotalCapSize: 1600.32MB CapLen: 96 bytes
# of packets: 27802228 (22273.06MB)
AvgRate: 207.69Mbps stddev:31.65M
IP flow (unique src/dst pair) Information
# of flows: 1749011 (avg. 15.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.7% 7.5% 4.8% 3.2% 2.6% 2.6% 2.1% 1.7% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 1381748
Top 10 bandwidth usage (bytes/total in %):
24.6% 16.1% 8.0% 7.9% 6.3% 6.3% 5.0% 5.0% 4.8% 3.3%
# of IPv6 addresses: 5935
Top 10 bandwidth usage (bytes/total in %):
70.0% 67.0% 21.0% 4.5% 4.4% 3.8% 2.5% 1.8% 1.7% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010200.pktlen.png)
detailed numbers
[ 32- 63]: 4313128
[ 64- 127]: 6429911
[ 128- 255]: 1084394
[ 256- 511]: 604293
[ 512- 1023]: 733408
[ 1024- 2047]: 14637094
Protocol Breakdown
![[protocol breakdown chart]](201204010200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27802228 (100.00%) 23354999691 (100.00%) 840.04
ip 27146657 ( 97.64%) 22610091094 ( 96.81%) 832.89
tcp 20597856 ( 74.09%) 20172351729 ( 86.37%) 979.34
http(s) 9795710 ( 35.23%) 13520235362 ( 57.89%) 1380.22
http(c) 3584755 ( 12.89%) 552493518 ( 2.37%) 154.12
squid 57590 ( 0.21%) 40519546 ( 0.17%) 703.59
smtp 31548 ( 0.11%) 4360444 ( 0.02%) 138.22
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 6895 ( 0.02%) 721223 ( 0.00%) 104.60
pop3 1811 ( 0.01%) 378366 ( 0.00%) 208.93
imap 2052 ( 0.01%) 1281975 ( 0.01%) 624.74
telnet 3885 ( 0.01%) 280842 ( 0.00%) 72.29
ssh 107996 ( 0.39%) 16879864 ( 0.07%) 156.30
dns 3797 ( 0.01%) 369214 ( 0.00%) 97.24
bgp 650 ( 0.00%) 128618 ( 0.00%) 197.87
napster 72 ( 0.00%) 4917 ( 0.00%) 68.29
realaud 4 ( 0.00%) 248 ( 0.00%) 62.00
rtsp 6 ( 0.00%) 360 ( 0.00%) 60.00
icecast 634 ( 0.00%) 130903 ( 0.00%) 206.47
hotline 25 ( 0.00%) 1968 ( 0.00%) 78.72
other 7000420 ( 25.18%) 6034563987 ( 25.84%) 862.03
udp 3002421 ( 10.80%) 1086366083 ( 4.65%) 361.83
dns 297646 ( 1.07%) 62345607 ( 0.27%) 209.46
rip 5 ( 0.00%) 320 ( 0.00%) 64.00
realaud 23 ( 0.00%) 2468 ( 0.00%) 107.30
halflif 40 ( 0.00%) 5445 ( 0.00%) 136.12
starcra 30 ( 0.00%) 3961 ( 0.00%) 132.03
everque 302 ( 0.00%) 80748 ( 0.00%) 267.38
unreal 91 ( 0.00%) 34858 ( 0.00%) 383.05
quake 13 ( 0.00%) 1957 ( 0.00%) 150.54
other 2703604 ( 9.72%) 1023825976 ( 4.38%) 378.69
icmp 1813256 ( 6.52%) 203969567 ( 0.87%) 112.49
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2772 ( 0.01%) 970296 ( 0.00%) 350.03
ip6 1705229 ( 6.13%) 1143104200 ( 4.89%) 670.35
pim 240 ( 0.00%) 14400 ( 0.00%) 60.00
other 24699 ( 0.09%) 3295659 ( 0.01%) 133.43
frag 2213 ( 0.01%) 1855888 ( 0.01%) 838.63
ip6 655571 ( 2.36%) 744908597 ( 3.19%) 1136.27
tcp6 490599 ( 1.76%) 627122489 ( 2.69%) 1278.28
http(s) 8474 ( 0.03%) 10142384 ( 0.04%) 1196.88
http(c) 14241 ( 0.05%) 1332026 ( 0.01%) 93.53
smtp 746 ( 0.00%) 233646 ( 0.00%) 313.20
ftp 40 ( 0.00%) 7729 ( 0.00%) 193.22
dns 251 ( 0.00%) 52056 ( 0.00%) 207.39
bgp 94 ( 0.00%) 22568 ( 0.00%) 240.09
other 466753 ( 1.68%) 615332080 ( 2.63%) 1318.32
udp6 132551 ( 0.48%) 113157309 ( 0.48%) 853.69
dns 39095 ( 0.14%) 8950149 ( 0.04%) 228.93
realaud 2 ( 0.00%) 201 ( 0.00%) 100.50
halflif 1 ( 0.00%) 109 ( 0.00%) 109.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 1 ( 0.00%) 102 ( 0.00%) 102.00
other 93451 ( 0.34%) 104206640 ( 0.45%) 1115.09
icmp6 31992 ( 0.12%) 4297993 ( 0.02%) 134.35
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 315 ( 0.00%) 315314 ( 0.00%) 1001.00
tcpdump file: 201204010200.dump.gz (635.10 MB)