Traffic Trace Info
DumpFile: 201204010315.dump
FileSize: 2001.04MB
Id: 201204010315
StartTime: Sun Apr 1 03:15:00 2012
EndTime: Sun Apr 1 03:30:00 2012
TotalTime: 900.53 seconds
TotalCapSize: 1580.86MB CapLen: 96 bytes
# of packets: 27535999 (22266.39MB)
AvgRate: 207.41Mbps stddev:35.37M
IP flow (unique src/dst pair) Information
# of flows: 1965652 (avg. 14.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 4.9% 4.6% 3.5% 3.3% 3.2% 2.7% 2.5% 2.0% 1.9%
IP address Information
# of IPv4 addresses: 1502260
Top 10 bandwidth usage (bytes/total in %):
21.7% 11.5% 9.6% 9.3% 6.5% 6.4% 5.1% 5.1% 4.8% 3.5%
# of IPv6 addresses: 5647
Top 10 bandwidth usage (bytes/total in %):
39.1% 19.1% 19.1% 17.3% 12.5% 9.2% 8.5% 7.2% 6.7% 5.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010315.pktlen.png)
detailed numbers
[ 32- 63]: 4520708
[ 64- 127]: 6051278
[ 128- 255]: 1030192
[ 256- 511]: 506111
[ 512- 1023]: 679617
[ 1024- 2047]: 14748093
Protocol Breakdown
![[protocol breakdown chart]](201204010315.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27535999 (100.00%) 23348005738 (100.00%) 847.91
ip 27228878 ( 98.88%) 23121052167 ( 99.03%) 849.14
tcp 21230542 ( 77.10%) 20879921754 ( 89.43%) 983.49
http(s) 10713082 ( 38.91%) 14693822541 ( 62.93%) 1371.58
http(c) 4052761 ( 14.72%) 574316228 ( 2.46%) 141.71
squid 56979 ( 0.21%) 40003722 ( 0.17%) 702.08
smtp 30368 ( 0.11%) 4696402 ( 0.02%) 154.65
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 10636 ( 0.04%) 1100969 ( 0.00%) 103.51
pop3 1710 ( 0.01%) 368400 ( 0.00%) 215.44
imap 781 ( 0.00%) 376307 ( 0.00%) 481.83
telnet 4661 ( 0.02%) 337624 ( 0.00%) 72.44
ssh 1297378 ( 4.71%) 1189315991 ( 5.09%) 916.71
dns 4705 ( 0.02%) 1389429 ( 0.01%) 295.31
bgp 645 ( 0.00%) 112767 ( 0.00%) 174.83
napster 28 ( 0.00%) 2674 ( 0.00%) 95.50
realaud 14 ( 0.00%) 946 ( 0.00%) 67.57
rtsp 50 ( 0.00%) 3048 ( 0.00%) 60.96
icecast 611 ( 0.00%) 72310 ( 0.00%) 118.35
hotline 3 ( 0.00%) 200 ( 0.00%) 66.67
other 5056116 ( 18.36%) 4374001342 ( 18.73%) 865.09
udp 2590097 ( 9.41%) 759352142 ( 3.25%) 293.18
dns 267851 ( 0.97%) 56203324 ( 0.24%) 209.83
rip 1 ( 0.00%) 238 ( 0.00%) 238.00
realaud 14 ( 0.00%) 1420 ( 0.00%) 101.43
halflif 46 ( 0.00%) 4037 ( 0.00%) 87.76
starcra 13 ( 0.00%) 2000 ( 0.00%) 153.85
everque 304 ( 0.00%) 82751 ( 0.00%) 272.21
unreal 100 ( 0.00%) 35578 ( 0.00%) 355.78
quake 20 ( 0.00%) 2250 ( 0.00%) 112.50
cuseeme 3 ( 0.00%) 594 ( 0.00%) 198.00
other 2321581 ( 8.43%) 702971537 ( 3.01%) 302.80
icmp 1784885 ( 6.48%) 200176607 ( 0.86%) 112.15
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2789 ( 0.01%) 967646 ( 0.00%) 346.95
ip6 1595990 ( 5.80%) 1276611691 ( 5.47%) 799.89
pim 373 ( 0.00%) 22380 ( 0.00%) 60.00
other 24017 ( 0.09%) 3980677 ( 0.02%) 165.74
frag 904 ( 0.00%) 849984 ( 0.00%) 940.25
ip6 307121 ( 1.12%) 226953571 ( 0.97%) 738.97
tcp6 187841 ( 0.68%) 155493953 ( 0.67%) 827.80
http(s) 5380 ( 0.02%) 5498707 ( 0.02%) 1022.06
http(c) 18737 ( 0.07%) 1593824 ( 0.01%) 85.06
smtp 777 ( 0.00%) 259981 ( 0.00%) 334.60
ftp 13109 ( 0.05%) 1299691 ( 0.01%) 99.14
dns 152 ( 0.00%) 25845 ( 0.00%) 170.03
bgp 84 ( 0.00%) 13301 ( 0.00%) 158.35
other 149602 ( 0.54%) 146802604 ( 0.63%) 981.29
udp6 81623 ( 0.30%) 61297722 ( 0.26%) 750.99
dns 35461 ( 0.13%) 8253719 ( 0.04%) 232.75
everque 1 ( 0.00%) 113 ( 0.00%) 113.00
quake 1 ( 0.00%) 111 ( 0.00%) 111.00
other 46160 ( 0.17%) 53043779 ( 0.23%) 1149.13
icmp6 28739 ( 0.10%) 3829336 ( 0.02%) 133.25
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8804 ( 0.03%) 6317068 ( 0.03%) 717.52
tcpdump file: 201204010315.dump.gz (617.69 MB)