Traffic Trace Info
DumpFile: 201204010530.dump
FileSize: 1876.45MB
Id: 201204010530
StartTime: Sun Apr 1 05:30:00 2012
EndTime: Sun Apr 1 05:45:00 2012
TotalTime: 899.41 seconds
TotalCapSize: 1490.67MB CapLen: 96 bytes
# of packets: 25281530 (19417.55MB)
AvgRate: 181.11Mbps stddev:22.77M
IP flow (unique src/dst pair) Information
# of flows: 1688443 (avg. 14.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.3% 5.7% 5.4% 4.0% 3.1% 3.0% 2.0% 1.8% 1.6% 1.4%
IP address Information
# of IPv4 addresses: 1353977
Top 10 bandwidth usage (bytes/total in %):
18.0% 16.8% 13.5% 7.6% 6.4% 6.0% 5.9% 5.8% 5.4% 4.1%
# of IPv6 addresses: 4719
Top 10 bandwidth usage (bytes/total in %):
35.3% 35.3% 30.3% 23.8% 15.1% 12.5% 5.3% 5.3% 4.8% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010530.pktlen.png)
detailed numbers
[ 32- 63]: 3943343
[ 64- 127]: 6579705
[ 128- 255]: 880294
[ 256- 511]: 539463
[ 512- 1023]: 563118
[ 1024- 2047]: 12775607
Protocol Breakdown
![[protocol breakdown chart]](201204010530.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25281530 (100.00%) 20360781218 (100.00%) 805.36
ip 24795029 ( 98.08%) 20192725913 ( 99.17%) 814.39
tcp 19239122 ( 76.10%) 17992691547 ( 88.37%) 935.21
http(s) 8952633 ( 35.41%) 12037970028 ( 59.12%) 1344.63
http(c) 4026281 ( 15.93%) 911389657 ( 4.48%) 226.36
squid 64393 ( 0.25%) 48724564 ( 0.24%) 756.67
smtp 29866 ( 0.12%) 5340496 ( 0.03%) 178.82
nntp 8 ( 0.00%) 496 ( 0.00%) 62.00
ftp 7744 ( 0.03%) 815375 ( 0.00%) 105.29
pop3 1790 ( 0.01%) 296180 ( 0.00%) 165.46
imap 1818 ( 0.01%) 1243089 ( 0.01%) 683.77
telnet 5050 ( 0.02%) 368508 ( 0.00%) 72.97
ssh 1288196 ( 5.10%) 1191705481 ( 5.85%) 925.10
dns 3441 ( 0.01%) 356008 ( 0.00%) 103.46
bgp 702 ( 0.00%) 184370 ( 0.00%) 262.64
napster 32 ( 0.00%) 2436 ( 0.00%) 76.12
realaud 20 ( 0.00%) 1258 ( 0.00%) 62.90
icecast 985 ( 0.00%) 172128 ( 0.00%) 174.75
hotline 3 ( 0.00%) 188 ( 0.00%) 62.67
other 4856160 ( 19.21%) 3794121285 ( 18.63%) 781.30
udp 2147016 ( 8.49%) 744821529 ( 3.66%) 346.91
dns 273325 ( 1.08%) 57422031 ( 0.28%) 210.09
realaud 10 ( 0.00%) 973 ( 0.00%) 97.30
halflif 48 ( 0.00%) 6766 ( 0.00%) 140.96
starcra 15 ( 0.00%) 3212 ( 0.00%) 214.13
everque 250 ( 0.00%) 61833 ( 0.00%) 247.33
unreal 3 ( 0.00%) 534 ( 0.00%) 178.00
quake 15 ( 0.00%) 3109 ( 0.00%) 207.27
cuseeme 1 ( 0.00%) 93 ( 0.00%) 93.00
other 1873240 ( 7.41%) 687286133 ( 3.38%) 366.90
icmp 1756631 ( 6.95%) 197683761 ( 0.97%) 112.54
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2901 ( 0.01%) 999742 ( 0.00%) 344.62
ip6 1627651 ( 6.44%) 1253432953 ( 6.16%) 770.09
pim 247 ( 0.00%) 14820 ( 0.00%) 60.00
other 21276 ( 0.08%) 3062291 ( 0.02%) 143.93
frag 720 ( 0.00%) 673715 ( 0.00%) 935.72
ip6 486501 ( 1.92%) 168055305 ( 0.83%) 345.44
tcp6 365106 ( 1.44%) 116533703 ( 0.57%) 319.18
http(s) 48532 ( 0.19%) 71283761 ( 0.35%) 1468.80
http(c) 41769 ( 0.17%) 3762489 ( 0.02%) 90.08
smtp 414 ( 0.00%) 146211 ( 0.00%) 353.17
ftp 3 ( 0.00%) 268 ( 0.00%) 89.33
dns 246 ( 0.00%) 52517 ( 0.00%) 213.48
bgp 87 ( 0.00%) 17043 ( 0.00%) 195.90
other 274055 ( 1.08%) 41271414 ( 0.20%) 150.60
udp6 37402 ( 0.15%) 8291462 ( 0.04%) 221.68
dns 32709 ( 0.13%) 7309845 ( 0.04%) 223.48
realaud 1 ( 0.00%) 113 ( 0.00%) 113.00
starcra 1 ( 0.00%) 107 ( 0.00%) 107.00
other 4691 ( 0.02%) 981397 ( 0.00%) 209.21
icmp6 27624 ( 0.11%) 3631660 ( 0.02%) 131.47
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 56253 ( 0.22%) 39582752 ( 0.19%) 703.66
tcpdump file: 201204010530.dump.gz (591.09 MB)