Traffic Trace Info
DumpFile: 201204010300.dump
FileSize: 1615.26MB
Id: 201204010300
StartTime: Sun Apr 1 03:00:00 2012
EndTime: Sun Apr 1 03:15:00 2012
TotalTime: 899.96 seconds
TotalCapSize: 1277.30MB CapLen: 96 bytes
# of packets: 22148164 (17669.60MB)
AvgRate: 176.99Mbps stddev:23.95M
IP flow (unique src/dst pair) Information
# of flows: 1605721 (avg. 13.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 5.9% 4.8% 4.2% 3.6% 2.8% 2.7% 2.6% 2.0% 2.0%
IP address Information
# of IPv4 addresses: 1276658
Top 10 bandwidth usage (bytes/total in %):
15.5% 13.8% 12.7% 10.3% 6.8% 6.4% 6.3% 5.0% 4.9% 4.4%
# of IPv6 addresses: 5417
Top 10 bandwidth usage (bytes/total in %):
73.0% 57.5% 17.3% 11.9% 5.1% 3.2% 3.0% 3.0% 2.3% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010300.pktlen.png)
detailed numbers
[ 32- 63]: 3310162
[ 64- 127]: 5239642
[ 128- 255]: 834798
[ 256- 511]: 478678
[ 512- 1023]: 567775
[ 1024- 2047]: 11717109
Protocol Breakdown
![[protocol breakdown chart]](201204010300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22148164 (100.00%) 18527916416 (100.00%) 836.54
ip 21562310 ( 97.35%) 17879054062 ( 96.50%) 829.18
tcp 15773652 ( 71.22%) 15584824832 ( 84.12%) 988.03
http(s) 7424475 ( 33.52%) 10082725457 ( 54.42%) 1358.04
http(c) 2717644 ( 12.27%) 288658110 ( 1.56%) 106.22
squid 49483 ( 0.22%) 30087226 ( 0.16%) 608.03
smtp 29501 ( 0.13%) 3966973 ( 0.02%) 134.47
ftp 9657 ( 0.04%) 994191 ( 0.01%) 102.95
pop3 1500 ( 0.01%) 319699 ( 0.00%) 213.13
imap 1326 ( 0.01%) 771485 ( 0.00%) 581.81
telnet 5405 ( 0.02%) 388498 ( 0.00%) 71.88
ssh 1276827 ( 5.76%) 1157683945 ( 6.25%) 906.69
dns 8223 ( 0.04%) 4780537 ( 0.03%) 581.36
bgp 571 ( 0.00%) 103586 ( 0.00%) 181.41
napster 17 ( 0.00%) 1122 ( 0.00%) 66.00
realaud 13 ( 0.00%) 866 ( 0.00%) 66.62
rtsp 24 ( 0.00%) 1464 ( 0.00%) 61.00
icecast 584 ( 0.00%) 126987 ( 0.00%) 217.44
hotline 15 ( 0.00%) 930 ( 0.00%) 62.00
other 4248387 ( 19.18%) 4014213756 ( 21.67%) 944.88
udp 2569144 ( 11.60%) 867287624 ( 4.68%) 337.58
dns 273447 ( 1.23%) 56834695 ( 0.31%) 207.85
realaud 18 ( 0.00%) 2486 ( 0.00%) 138.11
halflif 24 ( 0.00%) 2656 ( 0.00%) 110.67
starcra 31 ( 0.00%) 7845 ( 0.00%) 253.06
everque 264 ( 0.00%) 59630 ( 0.00%) 225.87
unreal 119 ( 0.00%) 43592 ( 0.00%) 366.32
quake 9 ( 0.00%) 792 ( 0.00%) 88.00
other 2295084 ( 10.36%) 810276370 ( 4.37%) 353.05
icmp 1598688 ( 7.22%) 176167877 ( 0.95%) 110.20
ipip 171 ( 0.00%) 17814 ( 0.00%) 104.18
ipsec 2426 ( 0.01%) 824556 ( 0.00%) 339.88
ip6 1597258 ( 7.21%) 1247210139 ( 6.73%) 780.84
pim 233 ( 0.00%) 13980 ( 0.00%) 60.00
other 20738 ( 0.09%) 2707240 ( 0.01%) 130.54
frag 5176 ( 0.02%) 4001819 ( 0.02%) 773.15
ip6 585854 ( 2.65%) 648862354 ( 3.50%) 1107.55
tcp6 474421 ( 2.14%) 580457153 ( 3.13%) 1223.51
http(s) 68370 ( 0.31%) 98878501 ( 0.53%) 1446.23
http(c) 46458 ( 0.21%) 4110451 ( 0.02%) 88.48
smtp 384 ( 0.00%) 112278 ( 0.00%) 292.39
ftp 8758 ( 0.04%) 911082 ( 0.00%) 104.03
dns 278 ( 0.00%) 55092 ( 0.00%) 198.17
bgp 85 ( 0.00%) 16755 ( 0.00%) 197.12
other 350088 ( 1.58%) 476372994 ( 2.57%) 1360.72
udp6 80998 ( 0.37%) 61782171 ( 0.33%) 762.76
dns 33823 ( 0.15%) 7912637 ( 0.04%) 233.94
other 47175 ( 0.21%) 53869534 ( 0.29%) 1141.91
icmp6 26033 ( 0.12%) 3507839 ( 0.02%) 134.75
ip6 78 ( 0.00%) 10604 ( 0.00%) 135.95
pim6 29 ( 0.00%) 3944 ( 0.00%) 136.00
other6 4295 ( 0.02%) 3100643 ( 0.02%) 721.92
tcpdump file: 201204010300.dump.gz (505.19 MB)