Traffic Trace Info
DumpFile: 201204010545.dump
FileSize: 1808.61MB
Id: 201204010545
StartTime: Sun Apr 1 05:45:00 2012
EndTime: Sun Apr 1 06:00:00 2012
TotalTime: 900.12 seconds
TotalCapSize: 1439.95MB CapLen: 96 bytes
# of packets: 24159715 (18111.75MB)
AvgRate: 168.80Mbps stddev:25.48M
IP flow (unique src/dst pair) Information
# of flows: 1937441 (avg. 12.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.4% 6.1% 5.5% 4.2% 3.4% 3.3% 3.1% 2.0% 1.5% 1.3%
IP address Information
# of IPv4 addresses: 1477334
Top 10 bandwidth usage (bytes/total in %):
21.6% 17.0% 14.7% 8.1% 6.7% 6.1% 5.5% 4.5% 4.5% 3.6%
# of IPv6 addresses: 4597
Top 10 bandwidth usage (bytes/total in %):
88.2% 87.5% 7.7% 6.9% 1.2% 1.2% 0.7% 0.6% 0.6% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010545.pktlen.png)
detailed numbers
[ 32- 63]: 4070839
[ 64- 127]: 6306269
[ 128- 255]: 855418
[ 256- 511]: 523469
[ 512- 1023]: 531525
[ 1024- 2047]: 11872195
Protocol Breakdown
![[protocol breakdown chart]](201204010545.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24159715 (100.00%) 18991545182 (100.00%) 786.08
ip 23219318 ( 96.11%) 17801255707 ( 93.73%) 766.66
tcp 17820846 ( 73.76%) 15851422102 ( 83.47%) 889.49
http(s) 8060978 ( 33.37%) 10672028316 ( 56.19%) 1323.91
http(c) 3737164 ( 15.47%) 878224288 ( 4.62%) 235.00
squid 61822 ( 0.26%) 48781397 ( 0.26%) 789.06
smtp 33090 ( 0.14%) 5744539 ( 0.03%) 173.60
nntp 24 ( 0.00%) 1472 ( 0.00%) 61.33
ftp 6235 ( 0.03%) 654019 ( 0.00%) 104.89
pop3 3119 ( 0.01%) 393135 ( 0.00%) 126.05
imap 370 ( 0.00%) 53089 ( 0.00%) 143.48
telnet 5402 ( 0.02%) 392786 ( 0.00%) 72.71
ssh 1281417 ( 5.30%) 1187926808 ( 6.26%) 927.04
dns 3668 ( 0.02%) 376930 ( 0.00%) 102.76
bgp 670 ( 0.00%) 151773 ( 0.00%) 226.53
napster 12 ( 0.00%) 790 ( 0.00%) 65.83
realaud 11 ( 0.00%) 670 ( 0.00%) 60.91
rtsp 4 ( 0.00%) 240 ( 0.00%) 60.00
icecast 714 ( 0.00%) 78037 ( 0.00%) 109.30
other 4626146 ( 19.15%) 3056613813 ( 16.09%) 660.73
udp 1997779 ( 8.27%) 688241933 ( 3.62%) 344.50
dns 246966 ( 1.02%) 53849222 ( 0.28%) 218.04
rip 1 ( 0.00%) 70 ( 0.00%) 70.00
realaud 3 ( 0.00%) 261 ( 0.00%) 87.00
halflif 107 ( 0.00%) 22848 ( 0.00%) 213.53
starcra 15 ( 0.00%) 2500 ( 0.00%) 166.67
everque 270 ( 0.00%) 82913 ( 0.00%) 307.09
unreal 38 ( 0.00%) 9870 ( 0.00%) 259.74
quake 6 ( 0.00%) 834 ( 0.00%) 139.00
cuseeme 4 ( 0.00%) 706 ( 0.00%) 176.50
other 1750220 ( 7.24%) 634214945 ( 3.34%) 362.36
icmp 1763693 ( 7.30%) 197706856 ( 1.04%) 112.10
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2877 ( 0.01%) 973022 ( 0.01%) 338.21
ip6 1613903 ( 6.68%) 1060229021 ( 5.58%) 656.93
pim 266 ( 0.00%) 15960 ( 0.00%) 60.00
other 19770 ( 0.08%) 2647653 ( 0.01%) 133.92
frag 761 ( 0.00%) 688024 ( 0.00%) 904.11
ip6 940397 ( 3.89%) 1190289475 ( 6.27%) 1265.73
tcp6 758269 ( 3.14%) 1095546972 ( 5.77%) 1444.80
http(s) 23627 ( 0.10%) 31771178 ( 0.17%) 1344.70
http(c) 18874 ( 0.08%) 1660593 ( 0.01%) 87.98
smtp 82 ( 0.00%) 19978 ( 0.00%) 243.63
ssh 1401 ( 0.01%) 242749 ( 0.00%) 173.27
dns 149 ( 0.00%) 20083 ( 0.00%) 134.79
bgp 91 ( 0.00%) 18023 ( 0.00%) 198.05
other 714045 ( 2.96%) 1061814368 ( 5.59%) 1487.04
udp6 37912 ( 0.16%) 9143709 ( 0.05%) 241.18
dns 31068 ( 0.13%) 7045807 ( 0.04%) 226.79
realaud 1 ( 0.00%) 96 ( 0.00%) 96.00
starcra 1 ( 0.00%) 107 ( 0.00%) 107.00
other 6842 ( 0.03%) 2097699 ( 0.01%) 306.59
icmp6 27393 ( 0.11%) 3591887 ( 0.02%) 131.12
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 116708 ( 0.48%) 81991279 ( 0.43%) 702.53
tcpdump file: 201204010545.dump.gz (568.10 MB)