Traffic Trace Info
DumpFile: 201204010245.dump
FileSize: 1742.88MB
Id: 201204010245
StartTime: Sun Apr 1 02:45:00 2012
EndTime: Sun Apr 1 03:00:00 2012
TotalTime: 900.06 seconds
TotalCapSize: 1380.07MB CapLen: 96 bytes
# of packets: 23776885 (18833.43MB)
AvgRate: 175.50Mbps stddev:38.15M
IP flow (unique src/dst pair) Information
# of flows: 1700980 (avg. 13.98 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.8% 8.3% 5.4% 4.7% 3.2% 2.3% 1.7% 1.4% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 1360591
Top 10 bandwidth usage (bytes/total in %):
19.6% 14.3% 12.5% 10.9% 10.2% 8.7% 5.9% 5.9% 4.9% 4.3%
# of IPv6 addresses: 5354
Top 10 bandwidth usage (bytes/total in %):
74.1% 70.6% 16.8% 4.3% 3.6% 3.6% 2.0% 2.0% 1.8% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010245.pktlen.png)
detailed numbers
[ 32- 63]: 3062141
[ 64- 127]: 6238934
[ 128- 255]: 921980
[ 256- 511]: 490633
[ 512- 1023]: 504359
[ 1024- 2047]: 12558838
Protocol Breakdown
![[protocol breakdown chart]](201204010245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23776885 (100.00%) 19748277597 (100.00%) 830.57
ip 23043035 ( 96.91%) 18858778638 ( 95.50%) 818.42
tcp 16889805 ( 71.03%) 16691147907 ( 84.52%) 988.24
http(s) 8246215 ( 34.68%) 11264739364 ( 57.04%) 1366.05
http(c) 2931413 ( 12.33%) 305388610 ( 1.55%) 104.18
squid 98137 ( 0.41%) 47216092 ( 0.24%) 481.12
smtp 32719 ( 0.14%) 4423329 ( 0.02%) 135.19
nntp 8 ( 0.00%) 494 ( 0.00%) 61.75
ftp 10424 ( 0.04%) 1019532 ( 0.01%) 97.81
pop3 1768 ( 0.01%) 400528 ( 0.00%) 226.54
imap 371 ( 0.00%) 51918 ( 0.00%) 139.94
telnet 5072 ( 0.02%) 367978 ( 0.00%) 72.55
ssh 1200713 ( 5.05%) 1116249818 ( 5.65%) 929.66
dns 4016 ( 0.02%) 394708 ( 0.00%) 98.28
bgp 630 ( 0.00%) 119739 ( 0.00%) 190.06
napster 18 ( 0.00%) 1266 ( 0.00%) 70.33
realaud 6 ( 0.00%) 444 ( 0.00%) 74.00
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 1808 ( 0.01%) 918923 ( 0.00%) 508.25
hotline 14 ( 0.00%) 1565 ( 0.00%) 111.79
other 4356472 ( 18.32%) 3949853539 ( 20.00%) 906.66
udp 2859813 ( 12.03%) 1122838727 ( 5.69%) 392.63
dns 241435 ( 1.02%) 52724076 ( 0.27%) 218.38
realaud 13 ( 0.00%) 1087 ( 0.00%) 83.62
halflif 94 ( 0.00%) 15864 ( 0.00%) 168.77
starcra 42 ( 0.00%) 7040 ( 0.00%) 167.62
everque 359 ( 0.00%) 79554 ( 0.00%) 221.60
unreal 183 ( 0.00%) 119252 ( 0.00%) 651.65
quake 20 ( 0.00%) 1799 ( 0.00%) 89.95
cuseeme 3 ( 0.00%) 298 ( 0.00%) 99.33
other 2617548 ( 11.01%) 1069847807 ( 5.42%) 408.72
icmp 1744860 ( 7.34%) 200209526 ( 1.01%) 114.74
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2651 ( 0.01%) 895906 ( 0.00%) 337.95
ip6 1523724 ( 6.41%) 840240752 ( 4.25%) 551.44
pim 308 ( 0.00%) 18480 ( 0.00%) 60.00
other 21690 ( 0.09%) 3408180 ( 0.02%) 157.13
frag 21261 ( 0.09%) 15808667 ( 0.08%) 743.55
ip6 733850 ( 3.09%) 889498959 ( 4.50%) 1212.10
tcp6 580514 ( 2.44%) 774670497 ( 3.92%) 1334.46
http(s) 25741 ( 0.11%) 36806222 ( 0.19%) 1429.87
http(c) 19525 ( 0.08%) 1643563 ( 0.01%) 84.18
smtp 16 ( 0.00%) 1974 ( 0.00%) 123.38
ftp 129 ( 0.00%) 11697 ( 0.00%) 90.67
dns 118 ( 0.00%) 13741 ( 0.00%) 116.45
bgp 90 ( 0.00%) 15453 ( 0.00%) 171.70
other 534895 ( 2.25%) 736177847 ( 3.73%) 1376.30
udp6 114932 ( 0.48%) 103518749 ( 0.52%) 900.70
dns 35465 ( 0.15%) 8327165 ( 0.04%) 234.80
realaud 1 ( 0.00%) 117 ( 0.00%) 117.00
halflif 1 ( 0.00%) 119 ( 0.00%) 119.00
other 79465 ( 0.33%) 95191348 ( 0.48%) 1197.90
icmp6 27713 ( 0.12%) 3793483 ( 0.02%) 136.88
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 10578 ( 0.04%) 7500806 ( 0.04%) 709.09
tcpdump file: 201204010245.dump.gz (542.52 MB)