Traffic Trace Info
DumpFile: 201204010415.dump
FileSize: 1910.05MB
Id: 201204010415
StartTime: Sun Apr 1 04:15:00 2012
EndTime: Sun Apr 1 04:30:00 2012
TotalTime: 900.28 seconds
TotalCapSize: 1517.11MB CapLen: 96 bytes
# of packets: 25751284 (19033.49MB)
AvgRate: 177.35Mbps stddev:32.62M
IP flow (unique src/dst pair) Information
# of flows: 1784800 (avg. 14.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.7% 6.5% 3.5% 3.5% 2.8% 2.5% 1.8% 1.8% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 1384569
Top 10 bandwidth usage (bytes/total in %):
20.1% 17.3% 13.8% 7.2% 7.0% 6.8% 5.7% 4.8% 3.7% 3.6%
# of IPv6 addresses: 5288
Top 10 bandwidth usage (bytes/total in %):
35.4% 29.1% 27.2% 21.8% 21.8% 8.8% 4.9% 4.7% 3.7% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010415.pktlen.png)
detailed numbers
[ 32- 63]: 3727319
[ 64- 127]: 7326789
[ 128- 255]: 978743
[ 256- 511]: 597295
[ 512- 1023]: 675498
[ 1024- 2047]: 12445640
Protocol Breakdown
![[protocol breakdown chart]](201204010415.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25751284 (100.00%) 19958057307 (100.00%) 775.03
ip 25396406 ( 98.62%) 19693458743 ( 98.67%) 775.44
tcp 19495216 ( 75.71%) 17199153634 ( 86.18%) 882.22
http(s) 8248209 ( 32.03%) 10704772083 ( 53.64%) 1297.83
http(c) 3607005 ( 14.01%) 576767231 ( 2.89%) 159.90
squid 68837 ( 0.27%) 47207547 ( 0.24%) 685.79
smtp 27822 ( 0.11%) 4536987 ( 0.02%) 163.07
nntp 12 ( 0.00%) 740 ( 0.00%) 61.67
ftp 7236 ( 0.03%) 769455 ( 0.00%) 106.34
pop3 1672 ( 0.01%) 349152 ( 0.00%) 208.82
imap 1496 ( 0.01%) 1451096 ( 0.01%) 969.98
telnet 6891 ( 0.03%) 493598 ( 0.00%) 71.63
ssh 1746200 ( 6.78%) 1387553036 ( 6.95%) 794.61
dns 5616 ( 0.02%) 1125424 ( 0.01%) 200.40
bgp 582 ( 0.00%) 87685 ( 0.00%) 150.66
napster 28 ( 0.00%) 1923 ( 0.00%) 68.68
realaud 14 ( 0.00%) 1014 ( 0.00%) 72.43
icecast 538 ( 0.00%) 64352 ( 0.00%) 119.61
hotline 33 ( 0.00%) 2838 ( 0.00%) 86.00
other 5773025 ( 22.42%) 4473969473 ( 22.42%) 774.98
udp 2480264 ( 9.63%) 798650884 ( 4.00%) 322.00
dns 280984 ( 1.09%) 58908897 ( 0.30%) 209.65
realaud 16 ( 0.00%) 3615 ( 0.00%) 225.94
halflif 92 ( 0.00%) 16545 ( 0.00%) 179.84
starcra 41 ( 0.00%) 4705 ( 0.00%) 114.76
everque 234 ( 0.00%) 50417 ( 0.00%) 215.46
unreal 36 ( 0.00%) 4863 ( 0.00%) 135.08
quake 13 ( 0.00%) 1370 ( 0.00%) 105.38
cuseeme 3 ( 0.00%) 561 ( 0.00%) 187.00
other 2198748 ( 8.54%) 739618037 ( 3.71%) 336.38
icmp 1770261 ( 6.87%) 200421239 ( 1.00%) 113.22
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2786 ( 0.01%) 974124 ( 0.00%) 349.65
ip6 1625063 ( 6.31%) 1490998622 ( 7.47%) 917.50
pim 307 ( 0.00%) 18420 ( 0.00%) 60.00
other 22324 ( 0.09%) 3222550 ( 0.02%) 144.35
frag 600 ( 0.00%) 590722 ( 0.00%) 984.54
ip6 354876 ( 1.38%) 264598444 ( 1.33%) 745.61
tcp6 272986 ( 1.06%) 238509621 ( 1.20%) 873.71
http(s) 5495 ( 0.02%) 6366000 ( 0.03%) 1158.51
http(c) 12841 ( 0.05%) 1198077 ( 0.01%) 93.30
smtp 409 ( 0.00%) 141128 ( 0.00%) 345.06
ftp 20 ( 0.00%) 2254 ( 0.00%) 112.70
dns 84 ( 0.00%) 10011 ( 0.00%) 119.18
bgp 86 ( 0.00%) 13444 ( 0.00%) 156.33
other 254051 ( 0.99%) 230778707 ( 1.16%) 908.40
udp6 50637 ( 0.20%) 21206406 ( 0.11%) 418.79
dns 34601 ( 0.13%) 7848518 ( 0.04%) 226.83
halflif 1 ( 0.00%) 108 ( 0.00%) 108.00
starcra 2 ( 0.00%) 224 ( 0.00%) 112.00
other 16033 ( 0.06%) 13357556 ( 0.07%) 833.13
icmp6 29783 ( 0.12%) 3825791 ( 0.02%) 128.46
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1356 ( 0.01%) 1041134 ( 0.01%) 767.80
tcpdump file: 201204010415.dump.gz (613.79 MB)