Traffic Trace Info
DumpFile: 201204010430.dump
FileSize: 1838.02MB
Id: 201204010430
StartTime: Sun Apr 1 04:30:00 2012
EndTime: Sun Apr 1 04:45:01 2012
TotalTime: 900.38 seconds
TotalCapSize: 1460.82MB CapLen: 96 bytes
# of packets: 24719481 (18949.47MB)
AvgRate: 176.55Mbps stddev:26.74M
IP flow (unique src/dst pair) Information
# of flows: 1808606 (avg. 13.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 5.8% 4.7% 3.9% 3.4% 2.5% 2.2% 2.2% 1.8% 1.8%
IP address Information
# of IPv4 addresses: 1410434
Top 10 bandwidth usage (bytes/total in %):
19.5% 18.0% 13.6% 7.3% 7.1% 6.6% 6.3% 5.1% 4.1% 4.0%
# of IPv6 addresses: 5186
Top 10 bandwidth usage (bytes/total in %):
96.9% 95.9% 1.1% 0.7% 0.4% 0.4% 0.3% 0.3% 0.3% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010430.pktlen.png)
detailed numbers
[ 32- 63]: 3732428
[ 64- 127]: 6379996
[ 128- 255]: 940472
[ 256- 511]: 572226
[ 512- 1023]: 622640
[ 1024- 2047]: 12471719
Protocol Breakdown
![[protocol breakdown chart]](201204010430.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24719481 (100.00%) 19869964108 (100.00%) 803.82
ip 23866121 ( 96.55%) 18896656058 ( 95.10%) 791.78
tcp 18063831 ( 73.08%) 16487244544 ( 82.98%) 912.72
http(s) 8141664 ( 32.94%) 10617682730 ( 53.44%) 1304.12
http(c) 3174444 ( 12.84%) 537006762 ( 2.70%) 169.17
squid 85424 ( 0.35%) 64880999 ( 0.33%) 759.52
smtp 29047 ( 0.12%) 3991974 ( 0.02%) 137.43
nntp 21 ( 0.00%) 1286 ( 0.00%) 61.24
ftp 6924 ( 0.03%) 704578 ( 0.00%) 101.76
pop3 1596 ( 0.01%) 333897 ( 0.00%) 209.21
imap 603 ( 0.00%) 265269 ( 0.00%) 439.92
telnet 41118 ( 0.17%) 3007934 ( 0.02%) 73.15
ssh 1536144 ( 6.21%) 1237094136 ( 6.23%) 805.32
dns 5731 ( 0.02%) 1739965 ( 0.01%) 303.61
bgp 675 ( 0.00%) 153151 ( 0.00%) 226.89
napster 15 ( 0.00%) 1058 ( 0.00%) 70.53
realaud 20 ( 0.00%) 1252 ( 0.00%) 62.60
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 578 ( 0.00%) 122134 ( 0.00%) 211.30
hotline 4 ( 0.00%) 246 ( 0.00%) 61.50
other 5039822 ( 20.39%) 4020257113 ( 20.23%) 797.70
udp 2384099 ( 9.64%) 794160107 ( 4.00%) 333.11
dns 286030 ( 1.16%) 59280801 ( 0.30%) 207.25
realaud 2 ( 0.00%) 454 ( 0.00%) 227.00
halflif 23 ( 0.00%) 2889 ( 0.00%) 125.61
starcra 24 ( 0.00%) 3154 ( 0.00%) 131.42
everque 291 ( 0.00%) 74781 ( 0.00%) 256.98
unreal 28 ( 0.00%) 3825 ( 0.00%) 136.61
quake 12 ( 0.00%) 1826 ( 0.00%) 152.17
other 2097585 ( 8.49%) 734745244 ( 3.70%) 350.28
icmp 1767373 ( 7.15%) 198911756 ( 1.00%) 112.55
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2819 ( 0.01%) 983042 ( 0.00%) 348.72
ip6 1626816 ( 6.58%) 1412379529 ( 7.11%) 868.19
pim 291 ( 0.00%) 17460 ( 0.00%) 60.00
other 20707 ( 0.08%) 2940350 ( 0.01%) 142.00
frag 530 ( 0.00%) 504619 ( 0.00%) 952.11
ip6 853360 ( 3.45%) 973308050 ( 4.90%) 1140.56
tcp6 785101 ( 3.18%) 960575001 ( 4.83%) 1223.51
http(s) 3760 ( 0.02%) 4220468 ( 0.02%) 1122.46
http(c) 12704 ( 0.05%) 1167158 ( 0.01%) 91.87
smtp 107 ( 0.00%) 34279 ( 0.00%) 320.36
ftp 25 ( 0.00%) 1967 ( 0.00%) 78.68
dns 285 ( 0.00%) 57482 ( 0.00%) 201.69
bgp 97 ( 0.00%) 16286 ( 0.00%) 167.90
other 768123 ( 3.11%) 955077361 ( 4.81%) 1243.39
udp6 39001 ( 0.16%) 8568625 ( 0.04%) 219.70
dns 34502 ( 0.14%) 7811171 ( 0.04%) 226.40
everque 4 ( 0.00%) 429 ( 0.00%) 107.25
quake 1 ( 0.00%) 95 ( 0.00%) 95.00
cuseeme 1 ( 0.00%) 105 ( 0.00%) 105.00
other 4493 ( 0.02%) 756825 ( 0.00%) 168.45
icmp6 28747 ( 0.12%) 3740900 ( 0.02%) 130.13
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 395 ( 0.00%) 407728 ( 0.00%) 1032.22
tcpdump file: 201204010430.dump.gz (582.69 MB)