Traffic Trace Info
DumpFile: 201204010615.dump
FileSize: 1709.64MB
Id: 201204010615
StartTime: Sun Apr 1 06:15:00 2012
EndTime: Sun Apr 1 06:30:00 2012
TotalTime: 900.10 seconds
TotalCapSize: 1354.62MB CapLen: 96 bytes
# of packets: 23265979 (16755.15MB)
AvgRate: 156.17Mbps stddev:28.84M
IP flow (unique src/dst pair) Information
# of flows: 1763045 (avg. 13.20 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.0% 6.4% 3.8% 3.5% 3.3% 3.0% 1.3% 1.3% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 1407777
Top 10 bandwidth usage (bytes/total in %):
20.8% 14.4% 13.9% 10.5% 7.3% 6.6% 5.5% 4.9% 3.9% 3.6%
# of IPv6 addresses: 4528
Top 10 bandwidth usage (bytes/total in %):
42.0% 42.0% 15.5% 12.7% 10.4% 10.0% 6.5% 6.5% 6.3% 6.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010615.pktlen.png)
detailed numbers
[ 32- 63]: 3886819
[ 64- 127]: 6447087
[ 128- 255]: 882611
[ 256- 511]: 565073
[ 512- 1023]: 547935
[ 1024- 2047]: 10936454
Protocol Breakdown
![[protocol breakdown chart]](201204010615.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23265979 (100.00%) 17569047028 (100.00%) 755.14
ip 23101512 ( 99.29%) 17465147686 ( 99.41%) 756.02
tcp 18090981 ( 77.76%) 15543131607 ( 88.47%) 859.16
http(s) 7237365 ( 31.11%) 9368286217 ( 53.32%) 1294.43
http(c) 3484382 ( 14.98%) 868833648 ( 4.95%) 249.35
squid 39790 ( 0.17%) 26785644 ( 0.15%) 673.18
smtp 32404 ( 0.14%) 5325160 ( 0.03%) 164.34
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 41753 ( 0.18%) 16877984 ( 0.10%) 404.23
pop3 1716 ( 0.01%) 311375 ( 0.00%) 181.45
imap 1892 ( 0.01%) 1417715 ( 0.01%) 749.32
telnet 9853 ( 0.04%) 4856720 ( 0.03%) 492.92
ssh 1687231 ( 7.25%) 1311900939 ( 7.47%) 777.55
dns 3500 ( 0.02%) 352950 ( 0.00%) 100.84
bgp 646 ( 0.00%) 134701 ( 0.00%) 208.52
napster 38 ( 0.00%) 2560 ( 0.00%) 67.37
realaud 8 ( 0.00%) 498 ( 0.00%) 62.25
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 605 ( 0.00%) 134653 ( 0.00%) 222.57
hotline 20 ( 0.00%) 2605 ( 0.00%) 130.25
other 5549771 ( 23.85%) 3937907812 ( 22.41%) 709.56
udp 2179116 ( 9.37%) 734406791 ( 4.18%) 337.02
dns 270364 ( 1.16%) 56279100 ( 0.32%) 208.16
rip 6 ( 0.00%) 382 ( 0.00%) 63.67
realaud 50 ( 0.00%) 6833 ( 0.00%) 136.66
halflif 64 ( 0.00%) 29776 ( 0.00%) 465.25
starcra 12 ( 0.00%) 955 ( 0.00%) 79.58
everque 266 ( 0.00%) 66219 ( 0.00%) 248.94
unreal 46 ( 0.00%) 13955 ( 0.00%) 303.37
quake 7 ( 0.00%) 590 ( 0.00%) 84.29
cuseeme 2 ( 0.00%) 197 ( 0.00%) 98.50
other 1908178 ( 8.20%) 677973748 ( 3.86%) 355.30
icmp 1766524 ( 7.59%) 200141270 ( 1.14%) 113.30
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2887 ( 0.01%) 986218 ( 0.01%) 341.61
ip6 1041005 ( 4.47%) 983796004 ( 5.60%) 945.04
pim 332 ( 0.00%) 19920 ( 0.00%) 60.00
other 20482 ( 0.09%) 2646606 ( 0.02%) 129.22
frag 533 ( 0.00%) 468884 ( 0.00%) 879.71
ip6 164467 ( 0.71%) 103899342 ( 0.59%) 631.73
tcp6 75650 ( 0.33%) 76677120 ( 0.44%) 1013.58
http(s) 8972 ( 0.04%) 11298589 ( 0.06%) 1259.32
http(c) 11505 ( 0.05%) 1409585 ( 0.01%) 122.52
smtp 834 ( 0.00%) 276910 ( 0.00%) 332.03
ftp 20 ( 0.00%) 2254 ( 0.00%) 112.70
dns 133 ( 0.00%) 18246 ( 0.00%) 137.19
bgp 91 ( 0.00%) 16792 ( 0.00%) 184.53
other 54095 ( 0.23%) 63654744 ( 0.36%) 1176.72
udp6 42264 ( 0.18%) 10674635 ( 0.06%) 252.57
dns 32565 ( 0.14%) 7092688 ( 0.04%) 217.80
halflif 2 ( 0.00%) 216 ( 0.00%) 108.00
quake 2 ( 0.00%) 225 ( 0.00%) 112.50
other 9695 ( 0.04%) 3581506 ( 0.02%) 369.42
icmp6 28314 ( 0.12%) 3726142 ( 0.02%) 131.60
ip6 87 ( 0.00%) 11816 ( 0.00%) 135.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 18122 ( 0.08%) 12805549 ( 0.07%) 706.63
tcpdump file: 201204010615.dump.gz (557.90 MB)