Traffic Trace Info
DumpFile: 201204010215.dump
FileSize: 1904.01MB
Id: 201204010215
StartTime: Sun Apr 1 02:15:00 2012
EndTime: Sun Apr 1 02:30:01 2012
TotalTime: 900.45 seconds
TotalCapSize: 1510.86MB CapLen: 96 bytes
# of packets: 25765069 (21122.18MB)
AvgRate: 196.79Mbps stddev:42.10M
IP flow (unique src/dst pair) Information
# of flows: 1728278 (avg. 14.91 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.7% 4.6% 4.4% 3.1% 2.4% 2.4% 2.0% 1.9% 1.5% 1.5%
IP address Information
# of IPv4 addresses: 1368815
Top 10 bandwidth usage (bytes/total in %):
20.7% 14.6% 8.9% 8.2% 7.3% 6.8% 4.9% 4.7% 3.8% 3.7%
# of IPv6 addresses: 5612
Top 10 bandwidth usage (bytes/total in %):
54.0% 53.2% 32.0% 32.0% 9.3% 2.0% 1.7% 1.7% 1.4% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010215.pktlen.png)
detailed numbers
[ 32- 63]: 3569865
[ 64- 127]: 6053046
[ 128- 255]: 978365
[ 256- 511]: 555900
[ 512- 1023]: 615932
[ 1024- 2047]: 13991961
Protocol Breakdown
![[protocol breakdown chart]](201204010215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25765069 (100.00%) 22148212584 (100.00%) 859.62
ip 24766071 ( 96.12%) 20859536593 ( 94.18%) 842.26
tcp 17951699 ( 69.67%) 17995772451 ( 81.25%) 1002.46
http(s) 8455858 ( 32.82%) 11557978711 ( 52.18%) 1366.86
http(c) 2764021 ( 10.73%) 301766315 ( 1.36%) 109.18
squid 56140 ( 0.22%) 39872388 ( 0.18%) 710.23
smtp 37010 ( 0.14%) 5523274 ( 0.02%) 149.24
ftp 8541 ( 0.03%) 873343 ( 0.00%) 102.25
pop3 1835 ( 0.01%) 405532 ( 0.00%) 221.00
imap 727 ( 0.00%) 271145 ( 0.00%) 372.96
telnet 4677 ( 0.02%) 336914 ( 0.00%) 72.04
ssh 31035 ( 0.12%) 14438030 ( 0.07%) 465.22
dns 3502 ( 0.01%) 348454 ( 0.00%) 99.50
bgp 631 ( 0.00%) 121374 ( 0.00%) 192.35
napster 16 ( 0.00%) 1078 ( 0.00%) 67.38
realaud 6 ( 0.00%) 366 ( 0.00%) 61.00
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 5890 ( 0.02%) 4837923 ( 0.02%) 821.38
hotline 22 ( 0.00%) 1358 ( 0.00%) 61.73
other 6581786 ( 25.55%) 6068996126 ( 27.40%) 922.09
udp 2921452 ( 11.34%) 1149896046 ( 5.19%) 393.60
dns 271953 ( 1.06%) 57048388 ( 0.26%) 209.77
realaud 16 ( 0.00%) 1584 ( 0.00%) 99.00
halflif 53 ( 0.00%) 6287 ( 0.00%) 118.62
starcra 23 ( 0.00%) 2348 ( 0.00%) 102.09
everque 397 ( 0.00%) 153368 ( 0.00%) 386.32
unreal 156 ( 0.00%) 60264 ( 0.00%) 386.31
quake 15 ( 0.00%) 1659 ( 0.00%) 110.60
cuseeme 4 ( 0.00%) 640 ( 0.00%) 160.00
other 2648616 ( 10.28%) 1092566331 ( 4.93%) 412.50
icmp 1809284 ( 7.02%) 202525717 ( 0.91%) 111.94
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2780 ( 0.01%) 977240 ( 0.00%) 351.53
ip6 2058278 ( 7.99%) 1507423874 ( 6.81%) 732.37
pim 241 ( 0.00%) 14460 ( 0.00%) 60.00
other 22152 ( 0.09%) 2907535 ( 0.01%) 131.25
frag 934 ( 0.00%) 840630 ( 0.00%) 900.03
ip6 998998 ( 3.88%) 1288675991 ( 5.82%) 1289.97
tcp6 856739 ( 3.33%) 1198553781 ( 5.41%) 1398.97
http(s) 9515 ( 0.04%) 11581779 ( 0.05%) 1217.21
http(c) 21371 ( 0.08%) 1906313 ( 0.01%) 89.20
smtp 388 ( 0.00%) 148523 ( 0.00%) 382.79
ftp 19 ( 0.00%) 2167 ( 0.00%) 114.05
dns 156 ( 0.00%) 19693 ( 0.00%) 126.24
bgp 91 ( 0.00%) 15762 ( 0.00%) 173.21
other 825199 ( 3.20%) 1184879544 ( 5.35%) 1435.87
udp6 103511 ( 0.40%) 81599851 ( 0.37%) 788.32
dns 37280 ( 0.14%) 8424988 ( 0.04%) 225.99
halflif 2 ( 0.00%) 226 ( 0.00%) 113.00
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 2 ( 0.00%) 220 ( 0.00%) 110.00
other 66226 ( 0.26%) 73174311 ( 0.33%) 1104.92
icmp6 32983 ( 0.13%) 4426320 ( 0.02%) 134.20
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 5648 ( 0.02%) 4080175 ( 0.02%) 722.41
tcpdump file: 201204010215.dump.gz (591.06 MB)