Traffic Trace Info
DumpFile: 201204010400.dump
FileSize: 1955.96MB
Id: 201204010400
StartTime: Sun Apr 1 04:00:01 2012
EndTime: Sun Apr 1 04:15:00 2012
TotalTime: 899.22 seconds
TotalCapSize: 1554.06MB CapLen: 96 bytes
# of packets: 26338380 (20672.10MB)
AvgRate: 192.86Mbps stddev:24.41M
IP flow (unique src/dst pair) Information
# of flows: 1848513 (avg. 14.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.3% 5.4% 4.0% 3.3% 3.3% 2.4% 2.3% 2.3% 2.1% 2.0%
IP address Information
# of IPv4 addresses: 1461983
Top 10 bandwidth usage (bytes/total in %):
28.6% 15.3% 12.1% 7.0% 6.5% 6.5% 5.6% 4.1% 3.8% 3.3%
# of IPv6 addresses: 5794
Top 10 bandwidth usage (bytes/total in %):
31.1% 20.9% 20.9% 13.3% 13.3% 10.8% 9.4% 9.4% 8.5% 7.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010400.pktlen.png)
detailed numbers
[ 32- 63]: 3664127
[ 64- 127]: 6868911
[ 128- 255]: 974483
[ 256- 511]: 550934
[ 512- 1023]: 642446
[ 1024- 2047]: 13637479
Protocol Breakdown
![[protocol breakdown chart]](201204010400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26338380 (100.00%) 21676263846 (100.00%) 822.99
ip 25960788 ( 98.57%) 21514253705 ( 99.25%) 828.72
tcp 19925685 ( 75.65%) 19011315106 ( 87.71%) 954.11
http(s) 10281675 ( 39.04%) 13770176454 ( 63.53%) 1339.29
http(c) 3611839 ( 13.71%) 547525172 ( 2.53%) 151.59
squid 69711 ( 0.26%) 48261593 ( 0.22%) 692.31
smtp 30211 ( 0.11%) 4211302 ( 0.02%) 139.40
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 8642 ( 0.03%) 847857 ( 0.00%) 98.11
pop3 1700 ( 0.01%) 357804 ( 0.00%) 210.47
imap 1218 ( 0.00%) 550804 ( 0.00%) 452.22
telnet 28447 ( 0.11%) 2098281 ( 0.01%) 73.76
ssh 1328885 ( 5.05%) 1203588819 ( 5.55%) 905.71
dns 7010 ( 0.03%) 649961 ( 0.00%) 92.72
bgp 612 ( 0.00%) 104569 ( 0.00%) 170.86
napster 29 ( 0.00%) 2257 ( 0.00%) 77.83
realaud 14 ( 0.00%) 868 ( 0.00%) 62.00
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 693 ( 0.00%) 154841 ( 0.00%) 223.44
hotline 66 ( 0.00%) 25914 ( 0.00%) 392.64
other 4554925 ( 17.29%) 3432758116 ( 15.84%) 753.64
udp 2525796 ( 9.59%) 717951514 ( 3.31%) 284.25
dns 314942 ( 1.20%) 63518599 ( 0.29%) 201.68
realaud 6 ( 0.00%) 604 ( 0.00%) 100.67
halflif 45 ( 0.00%) 5511 ( 0.00%) 122.47
starcra 54 ( 0.00%) 6733 ( 0.00%) 124.69
everque 309 ( 0.00%) 90246 ( 0.00%) 292.06
unreal 182 ( 0.00%) 89776 ( 0.00%) 493.27
quake 13 ( 0.00%) 1504 ( 0.00%) 115.69
cuseeme 2 ( 0.00%) 189 ( 0.00%) 94.50
other 2210096 ( 8.39%) 654184488 ( 3.02%) 296.00
icmp 1768416 ( 6.71%) 197474852 ( 0.91%) 111.67
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2878 ( 0.01%) 1013428 ( 0.00%) 352.13
ip6 1713294 ( 6.50%) 1583214060 ( 7.30%) 924.08
pim 219 ( 0.00%) 13140 ( 0.00%) 60.00
other 24315 ( 0.09%) 3252335 ( 0.02%) 133.76
frag 859 ( 0.00%) 819496 ( 0.00%) 954.01
ip6 377592 ( 1.43%) 162010141 ( 0.75%) 429.06
tcp6 289421 ( 1.10%) 134330501 ( 0.62%) 464.14
http(s) 23669 ( 0.09%) 33680537 ( 0.16%) 1422.98
http(c) 22220 ( 0.08%) 2027371 ( 0.01%) 91.24
smtp 198 ( 0.00%) 111989 ( 0.00%) 565.60
ftp 98 ( 0.00%) 12566 ( 0.00%) 128.22
ssh 68839 ( 0.26%) 15162471 ( 0.07%) 220.26
dns 292 ( 0.00%) 62511 ( 0.00%) 214.08
bgp 93 ( 0.00%) 17782 ( 0.00%) 191.20
other 174012 ( 0.66%) 83255274 ( 0.38%) 478.45
udp6 57386 ( 0.22%) 23462349 ( 0.11%) 408.85
dns 42629 ( 0.16%) 10776377 ( 0.05%) 252.79
starcra 1 ( 0.00%) 117 ( 0.00%) 117.00
unreal 1 ( 0.00%) 118 ( 0.00%) 118.00
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
other 14754 ( 0.06%) 12685627 ( 0.06%) 859.81
icmp6 30365 ( 0.12%) 3915844 ( 0.02%) 128.96
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 306 ( 0.00%) 285955 ( 0.00%) 934.49
tcpdump file: 201204010400.dump.gz (612.18 MB)