Traffic Trace Info
DumpFile: 201204010230.dump
FileSize: 1699.80MB
Id: 201204010230
StartTime: Sun Apr 1 02:30:01 2012
EndTime: Sun Apr 1 02:45:00 2012
TotalTime: 899.26 seconds
TotalCapSize: 1343.45MB CapLen: 96 bytes
# of packets: 23352747 (18266.09MB)
AvgRate: 170.38Mbps stddev:34.04M
IP flow (unique src/dst pair) Information
# of flows: 1776732 (avg. 13.14 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.3% 5.4% 4.7% 3.7% 1.9% 1.9% 1.5% 1.4% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 1415155
Top 10 bandwidth usage (bytes/total in %):
21.0% 13.7% 12.8% 9.8% 6.7% 5.6% 5.0% 4.1% 3.8% 3.1%
# of IPv6 addresses: 5719
Top 10 bandwidth usage (bytes/total in %):
80.0% 78.1% 13.3% 2.4% 2.3% 2.3% 2.2% 1.5% 1.5% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010230.pktlen.png)
detailed numbers
[ 32- 63]: 3730216
[ 64- 127]: 5508621
[ 128- 255]: 948575
[ 256- 511]: 515263
[ 512- 1023]: 526652
[ 1024- 2047]: 12123420
Protocol Breakdown
![[protocol breakdown chart]](201204010230.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23352747 (100.00%) 19153381537 (100.00%) 820.18
ip 22619564 ( 96.86%) 18257350023 ( 95.32%) 807.15
tcp 16023097 ( 68.61%) 15678099803 ( 81.86%) 978.47
http(s) 7714309 ( 33.03%) 10440978347 ( 54.51%) 1353.46
http(c) 2440802 ( 10.45%) 251572804 ( 1.31%) 103.07
squid 44545 ( 0.19%) 29987183 ( 0.16%) 673.19
smtp 39889 ( 0.17%) 6259504 ( 0.03%) 156.92
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 9050 ( 0.04%) 900215 ( 0.00%) 99.47
pop3 1704 ( 0.01%) 366107 ( 0.00%) 214.85
imap 989 ( 0.00%) 791304 ( 0.00%) 800.11
telnet 5876 ( 0.03%) 423408 ( 0.00%) 72.06
ssh 112504 ( 0.48%) 11739343 ( 0.06%) 104.35
dns 3385 ( 0.01%) 336638 ( 0.00%) 99.45
bgp 689 ( 0.00%) 154891 ( 0.00%) 224.81
napster 20 ( 0.00%) 1722 ( 0.00%) 86.10
realaud 6 ( 0.00%) 366 ( 0.00%) 61.00
icecast 7292 ( 0.03%) 5840387 ( 0.03%) 800.93
hotline 5 ( 0.00%) 732 ( 0.00%) 146.40
other 5642020 ( 24.16%) 4928746104 ( 25.73%) 873.58
udp 2865081 ( 12.27%) 1106698666 ( 5.78%) 386.27
dns 262174 ( 1.12%) 54762877 ( 0.29%) 208.88
realaud 3 ( 0.00%) 294 ( 0.00%) 98.00
halflif 111 ( 0.00%) 18427 ( 0.00%) 166.01
starcra 13 ( 0.00%) 1857 ( 0.00%) 142.85
everque 302 ( 0.00%) 81262 ( 0.00%) 269.08
unreal 140 ( 0.00%) 81037 ( 0.00%) 578.84
quake 21 ( 0.00%) 2302 ( 0.00%) 109.62
other 2602173 ( 11.14%) 1051714836 ( 5.49%) 404.17
icmp 1758809 ( 7.53%) 198007985 ( 1.03%) 112.58
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2889 ( 0.01%) 1033862 ( 0.01%) 357.86
ip6 1948002 ( 8.34%) 1270235236 ( 6.63%) 652.07
pim 211 ( 0.00%) 12660 ( 0.00%) 60.00
other 21290 ( 0.09%) 3242541 ( 0.02%) 152.30
frag 3854 ( 0.02%) 2956357 ( 0.02%) 767.09
ip6 733183 ( 3.14%) 896031514 ( 4.68%) 1222.11
tcp6 580427 ( 2.49%) 796420587 ( 4.16%) 1372.13
http(s) 4738 ( 0.02%) 4871706 ( 0.03%) 1028.22
http(c) 12072 ( 0.05%) 1069350 ( 0.01%) 88.58
smtp 110 ( 0.00%) 93224 ( 0.00%) 847.49
ftp 15 ( 0.00%) 1426 ( 0.00%) 95.07
dns 293 ( 0.00%) 55288 ( 0.00%) 188.70
bgp 92 ( 0.00%) 20768 ( 0.00%) 225.74
other 563107 ( 2.41%) 790308825 ( 4.13%) 1403.48
udp6 107621 ( 0.46%) 84289336 ( 0.44%) 783.21
dns 37311 ( 0.16%) 8576105 ( 0.04%) 229.85
starcra 1 ( 0.00%) 117 ( 0.00%) 117.00
everque 2 ( 0.00%) 237 ( 0.00%) 118.50
quake 2 ( 0.00%) 212 ( 0.00%) 106.00
other 70305 ( 0.30%) 75712665 ( 0.40%) 1076.92
icmp6 29028 ( 0.12%) 3975914 ( 0.02%) 136.97
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 15993 ( 0.07%) 11330185 ( 0.06%) 708.45
tcpdump file: 201204010230.dump.gz (543.39 MB)