Traffic Trace Info
DumpFile: 201204010500.dump
FileSize: 1860.55MB
Id: 201204010500
StartTime: Sun Apr 1 05:00:00 2012
EndTime: Sun Apr 1 05:15:00 2012
TotalTime: 899.77 seconds
TotalCapSize: 1473.29MB CapLen: 96 bytes
# of packets: 25378759 (19510.34MB)
AvgRate: 181.90Mbps stddev:26.02M
IP flow (unique src/dst pair) Information
# of flows: 1819958 (avg. 13.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.1% 5.6% 4.3% 3.3% 3.2% 2.2% 1.8% 1.5% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 1429861
Top 10 bandwidth usage (bytes/total in %):
18.9% 16.9% 13.2% 9.4% 7.4% 5.9% 5.9% 5.8% 4.3% 3.4%
# of IPv6 addresses: 5209
Top 10 bandwidth usage (bytes/total in %):
71.1% 58.9% 8.7% 5.6% 5.0% 5.0% 4.6% 4.4% 4.4% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010500.pktlen.png)
detailed numbers
[ 32- 63]: 4209638
[ 64- 127]: 6310564
[ 128- 255]: 909743
[ 256- 511]: 538128
[ 512- 1023]: 594209
[ 1024- 2047]: 12816477
Protocol Breakdown
![[protocol breakdown chart]](201204010500.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25378759 (100.00%) 20458070659 (100.00%) 806.11
ip 25117051 ( 98.97%) 20298208012 ( 99.22%) 808.14
tcp 19558619 ( 77.07%) 18197308657 ( 88.95%) 930.40
http(s) 9392911 ( 37.01%) 12637241227 ( 61.77%) 1345.40
http(c) 3886575 ( 15.31%) 569853439 ( 2.79%) 146.62
squid 76390 ( 0.30%) 66780827 ( 0.33%) 874.21
smtp 34779 ( 0.14%) 4807190 ( 0.02%) 138.22
nntp 13 ( 0.00%) 808 ( 0.00%) 62.15
ftp 6151 ( 0.02%) 621716 ( 0.00%) 101.08
pop3 1533 ( 0.01%) 305562 ( 0.00%) 199.32
imap 1195 ( 0.00%) 522904 ( 0.00%) 437.58
telnet 6667 ( 0.03%) 478963 ( 0.00%) 71.84
ssh 1287100 ( 5.07%) 1186380246 ( 5.80%) 921.75
dns 3565 ( 0.01%) 370532 ( 0.00%) 103.94
bgp 673 ( 0.00%) 139284 ( 0.00%) 206.96
napster 10 ( 0.00%) 686 ( 0.00%) 68.60
realaud 6 ( 0.00%) 378 ( 0.00%) 63.00
icecast 727 ( 0.00%) 163189 ( 0.00%) 224.47
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 4860315 ( 19.15%) 3729641166 ( 18.23%) 767.37
udp 2326770 ( 9.17%) 657513744 ( 3.21%) 282.59
dns 295908 ( 1.17%) 61543785 ( 0.30%) 207.98
rip 2 ( 0.00%) 202 ( 0.00%) 101.00
realaud 1 ( 0.00%) 90 ( 0.00%) 90.00
halflif 24 ( 0.00%) 2220 ( 0.00%) 92.50
starcra 33 ( 0.00%) 5595 ( 0.00%) 169.55
everque 271 ( 0.00%) 68603 ( 0.00%) 253.15
unreal 29 ( 0.00%) 4064 ( 0.00%) 140.14
quake 8 ( 0.00%) 1315 ( 0.00%) 164.38
other 2030353 ( 8.00%) 595835755 ( 2.91%) 293.46
icmp 1779549 ( 7.01%) 200003462 ( 0.98%) 112.39
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2717 ( 0.01%) 914558 ( 0.00%) 336.61
ip6 1427375 ( 5.62%) 1239312561 ( 6.06%) 868.25
pim 317 ( 0.00%) 19020 ( 0.00%) 60.00
other 21519 ( 0.08%) 3116740 ( 0.02%) 144.84
frag 924 ( 0.00%) 845961 ( 0.00%) 915.54
ip6 261708 ( 1.03%) 159862647 ( 0.78%) 610.84
tcp6 190689 ( 0.75%) 145924329 ( 0.71%) 765.25
http(s) 87482 ( 0.34%) 126709699 ( 0.62%) 1448.41
http(c) 70137 ( 0.28%) 6310435 ( 0.03%) 89.97
smtp 480 ( 0.00%) 174195 ( 0.00%) 362.91
ftp 8 ( 0.00%) 604 ( 0.00%) 75.50
dns 335 ( 0.00%) 61200 ( 0.00%) 182.69
bgp 94 ( 0.00%) 19496 ( 0.00%) 207.40
other 32153 ( 0.13%) 12648700 ( 0.06%) 393.39
udp6 42224 ( 0.17%) 9877718 ( 0.05%) 233.94
dns 34177 ( 0.13%) 8190880 ( 0.04%) 239.66
other 8047 ( 0.03%) 1686838 ( 0.01%) 209.62
icmp6 28328 ( 0.11%) 3712502 ( 0.02%) 131.05
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 350 ( 0.00%) 332234 ( 0.00%) 949.24
tcpdump file: 201204010500.dump.gz (593.38 MB)