Traffic Trace Info
DumpFile: 201204010445.dump
FileSize: 1826.96MB
Id: 201204010445
StartTime: Sun Apr 1 04:45:01 2012
EndTime: Sun Apr 1 05:00:00 2012
TotalTime: 899.33 seconds
TotalCapSize: 1453.87MB CapLen: 96 bytes
# of packets: 24449710 (18949.91MB)
AvgRate: 176.76Mbps stddev:28.97M
IP flow (unique src/dst pair) Information
# of flows: 1889793 (avg. 12.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.1% 6.1% 4.7% 3.9% 3.8% 3.0% 2.7% 2.0% 1.9% 1.7%
IP address Information
# of IPv4 addresses: 1481549
Top 10 bandwidth usage (bytes/total in %):
22.4% 18.1% 14.3% 8.3% 7.7% 7.0% 6.7% 4.1% 4.0% 3.2%
# of IPv6 addresses: 5001
Top 10 bandwidth usage (bytes/total in %):
97.7% 91.9% 4.5% 0.8% 0.5% 0.3% 0.3% 0.2% 0.2% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010445.pktlen.png)
detailed numbers
[ 32- 63]: 3722971
[ 64- 127]: 6143126
[ 128- 255]: 930947
[ 256- 511]: 539355
[ 512- 1023]: 593314
[ 1024- 2047]: 12519997
Protocol Breakdown
![[protocol breakdown chart]](201204010445.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24449710 (100.00%) 19870417001 (100.00%) 812.71
ip 23545077 ( 96.30%) 18851878328 ( 94.87%) 800.67
tcp 17715500 ( 72.46%) 16276663290 ( 81.91%) 918.78
http(s) 8616595 ( 35.24%) 11426955831 ( 57.51%) 1326.16
http(c) 3364348 ( 13.76%) 539724429 ( 2.72%) 160.42
squid 70730 ( 0.29%) 58893406 ( 0.30%) 832.65
smtp 29779 ( 0.12%) 4044241 ( 0.02%) 135.81
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 6606 ( 0.03%) 681878 ( 0.00%) 103.22
pop3 1643 ( 0.01%) 348806 ( 0.00%) 212.30
imap 1811 ( 0.01%) 1094443 ( 0.01%) 604.33
telnet 7785 ( 0.03%) 558958 ( 0.00%) 71.80
ssh 1396266 ( 5.71%) 1262245094 ( 6.35%) 904.01
dns 4301 ( 0.02%) 1027520 ( 0.01%) 238.90
bgp 606 ( 0.00%) 95163 ( 0.00%) 157.03
napster 34 ( 0.00%) 2557 ( 0.00%) 75.21
realaud 23 ( 0.00%) 1817 ( 0.00%) 79.00
icecast 640 ( 0.00%) 135690 ( 0.00%) 212.02
hotline 2 ( 0.00%) 132 ( 0.00%) 66.00
other 4214325 ( 17.24%) 2980852951 ( 15.00%) 707.31
udp 2291875 ( 9.37%) 714062075 ( 3.59%) 311.56
dns 256677 ( 1.05%) 55440175 ( 0.28%) 215.99
realaud 8 ( 0.00%) 579 ( 0.00%) 72.38
halflif 84 ( 0.00%) 13882 ( 0.00%) 165.26
starcra 20 ( 0.00%) 2157 ( 0.00%) 107.85
everque 280 ( 0.00%) 71508 ( 0.00%) 255.39
unreal 22 ( 0.00%) 2867 ( 0.00%) 130.32
quake 4 ( 0.00%) 563 ( 0.00%) 140.75
cuseeme 1 ( 0.00%) 101 ( 0.00%) 101.00
other 2034654 ( 8.32%) 658497747 ( 3.31%) 323.64
icmp 1764984 ( 7.22%) 199276753 ( 1.00%) 112.91
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2863 ( 0.01%) 981546 ( 0.00%) 342.84
ip6 1748951 ( 7.15%) 1658096431 ( 8.34%) 948.05
pim 236 ( 0.00%) 14160 ( 0.00%) 60.00
other 20483 ( 0.08%) 2764803 ( 0.01%) 134.98
frag 712 ( 0.00%) 642560 ( 0.00%) 902.47
ip6 904633 ( 3.70%) 1018538673 ( 5.13%) 1125.91
tcp6 840285 ( 3.44%) 1006994483 ( 5.07%) 1198.40
http(s) 33697 ( 0.14%) 48350141 ( 0.24%) 1434.85
http(c) 45541 ( 0.19%) 4085486 ( 0.02%) 89.71
smtp 82 ( 0.00%) 29109 ( 0.00%) 354.99
dns 85 ( 0.00%) 13746 ( 0.00%) 161.72
bgp 85 ( 0.00%) 11924 ( 0.00%) 140.28
other 760795 ( 3.11%) 954504077 ( 4.80%) 1254.61
udp6 35470 ( 0.15%) 7610189 ( 0.04%) 214.55
dns 31144 ( 0.13%) 7072489 ( 0.04%) 227.09
realaud 1 ( 0.00%) 99 ( 0.00%) 99.00
other 4325 ( 0.02%) 537601 ( 0.00%) 124.30
icmp6 28499 ( 0.12%) 3676904 ( 0.02%) 129.02
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 267 ( 0.00%) 241841 ( 0.00%) 905.77
tcpdump file: 201204010445.dump.gz (572.11 MB)