Traffic Trace Info
DumpFile: 201204010600.dump
FileSize: 1755.06MB
Id: 201204010600
StartTime: Sun Apr 1 06:00:00 2012
EndTime: Sun Apr 1 06:15:00 2012
TotalTime: 899.92 seconds
TotalCapSize: 1392.35MB CapLen: 96 bytes
# of packets: 23769837 (16676.06MB)
AvgRate: 155.47Mbps stddev:31.57M
IP flow (unique src/dst pair) Information
# of flows: 1818050 (avg. 13.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 6.6% 4.3% 4.1% 3.4% 2.4% 1.8% 1.6% 1.4% 1.2%
IP address Information
# of IPv4 addresses: 1393181
Top 10 bandwidth usage (bytes/total in %):
20.9% 14.9% 14.1% 7.2% 7.1% 7.0% 5.7% 5.5% 4.5% 4.2%
# of IPv6 addresses: 4729
Top 10 bandwidth usage (bytes/total in %):
76.6% 73.4% 18.7% 16.9% 2.1% 1.2% 0.8% 0.8% 0.8% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010600.pktlen.png)
detailed numbers
[ 32- 63]: 4107192
[ 64- 127]: 6770672
[ 128- 255]: 939596
[ 256- 511]: 541126
[ 512- 1023]: 568139
[ 1024- 2047]: 10843112
Protocol Breakdown
![[protocol breakdown chart]](201204010600.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23769837 (100.00%) 17486118194 (100.00%) 735.64
ip 23335822 ( 98.17%) 17064359939 ( 97.59%) 731.25
tcp 17791344 ( 74.85%) 15049394553 ( 86.06%) 845.88
http(s) 7697569 ( 32.38%) 10092364404 ( 57.72%) 1311.11
http(c) 3769783 ( 15.86%) 893101677 ( 5.11%) 236.91
squid 53296 ( 0.22%) 38336882 ( 0.22%) 719.32
smtp 31973 ( 0.13%) 5101958 ( 0.03%) 159.57
nntp 8 ( 0.00%) 488 ( 0.00%) 61.00
ftp 6075 ( 0.03%) 635530 ( 0.00%) 104.61
pop3 6425 ( 0.03%) 4447628 ( 0.03%) 692.24
imap 644 ( 0.00%) 209541 ( 0.00%) 325.37
telnet 3990 ( 0.02%) 288722 ( 0.00%) 72.36
ssh 1820050 ( 7.66%) 1268893785 ( 7.26%) 697.18
dns 3434 ( 0.01%) 354230 ( 0.00%) 103.15
bgp 665 ( 0.00%) 159268 ( 0.00%) 239.50
napster 28 ( 0.00%) 1826 ( 0.00%) 65.21
realaud 20 ( 0.00%) 1244 ( 0.00%) 62.20
rtsp 44 ( 0.00%) 8712 ( 0.00%) 198.00
icecast 760 ( 0.00%) 156446 ( 0.00%) 205.85
hotline 18 ( 0.00%) 1126 ( 0.00%) 62.56
other 4396562 ( 18.50%) 2745331086 ( 15.70%) 624.43
udp 2180281 ( 9.17%) 781610057 ( 4.47%) 358.49
dns 279110 ( 1.17%) 57778526 ( 0.33%) 207.01
realaud 10 ( 0.00%) 1141 ( 0.00%) 114.10
halflif 82 ( 0.00%) 13398 ( 0.00%) 163.39
starcra 21 ( 0.00%) 2263 ( 0.00%) 107.76
everque 264 ( 0.00%) 71431 ( 0.00%) 270.57
unreal 27 ( 0.00%) 3570 ( 0.00%) 132.22
quake 6 ( 0.00%) 567 ( 0.00%) 94.50
cuseeme 1 ( 0.00%) 94 ( 0.00%) 94.00
other 1900640 ( 8.00%) 723714056 ( 4.14%) 380.77
icmp 1777208 ( 7.48%) 201654308 ( 1.15%) 113.47
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2769 ( 0.01%) 937734 ( 0.01%) 338.65
ip6 1561566 ( 6.57%) 1027458867 ( 5.88%) 657.97
pim 258 ( 0.00%) 15480 ( 0.00%) 60.00
other 22212 ( 0.09%) 3269780 ( 0.02%) 147.21
frag 558 ( 0.00%) 491177 ( 0.00%) 880.25
ip6 434015 ( 1.83%) 421758255 ( 2.41%) 971.76
tcp6 262832 ( 1.11%) 336281108 ( 1.92%) 1279.45
http(s) 6939 ( 0.03%) 9148404 ( 0.05%) 1318.40
http(c) 31419 ( 0.13%) 2805407 ( 0.02%) 89.29
smtp 66 ( 0.00%) 14692 ( 0.00%) 222.61
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 258 ( 0.00%) 53499 ( 0.00%) 207.36
bgp 93 ( 0.00%) 15689 ( 0.00%) 168.70
other 224040 ( 0.94%) 324241812 ( 1.85%) 1447.25
udp6 41857 ( 0.18%) 10682096 ( 0.06%) 255.20
dns 33573 ( 0.14%) 7634132 ( 0.04%) 227.39
realaud 1 ( 0.00%) 109 ( 0.00%) 109.00
everque 3 ( 0.00%) 331 ( 0.00%) 110.33
quake 1 ( 0.00%) 94 ( 0.00%) 94.00
other 8279 ( 0.03%) 3047430 ( 0.02%) 368.09
icmp6 28135 ( 0.12%) 3752108 ( 0.02%) 133.36
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 101077 ( 0.43%) 71027451 ( 0.41%) 702.71
tcpdump file: 201204010600.dump.gz (567.10 MB)