Traffic Trace Info
DumpFile: 201204010630.dump
FileSize: 1852.16MB
Id: 201204010630
StartTime: Sun Apr 1 06:30:00 2012
EndTime: Sun Apr 1 06:45:00 2012
TotalTime: 900.19 seconds
TotalCapSize: 1465.64MB CapLen: 96 bytes
# of packets: 25330077 (18572.89MB)
AvgRate: 173.09Mbps stddev:24.24M
IP flow (unique src/dst pair) Information
# of flows: 1728336 (avg. 14.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.1% 5.8% 5.6% 5.5% 3.5% 3.1% 2.2% 2.0% 1.8% 1.7%
IP address Information
# of IPv4 addresses: 1384568
Top 10 bandwidth usage (bytes/total in %):
20.0% 18.5% 12.3% 11.7% 6.2% 6.0% 6.0% 5.7% 5.6% 3.5%
# of IPv6 addresses: 4343
Top 10 bandwidth usage (bytes/total in %):
50.4% 48.4% 20.1% 12.4% 11.4% 6.2% 6.0% 3.6% 3.3% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010630.pktlen.png)
detailed numbers
[ 32- 63]: 4433032
[ 64- 127]: 6354764
[ 128- 255]: 864662
[ 256- 511]: 526042
[ 512- 1023]: 1129815
[ 1024- 2047]: 12021762
Protocol Breakdown
![[protocol breakdown chart]](201204010630.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25330077 (100.00%) 19475087380 (100.00%) 768.85
ip 25191822 ( 99.45%) 19393539548 ( 99.58%) 769.83
tcp 19961857 ( 78.81%) 17319268160 ( 88.93%) 867.62
http(s) 8373134 ( 33.06%) 11061007149 ( 56.80%) 1321.01
http(c) 3813043 ( 15.05%) 902952246 ( 4.64%) 236.81
squid 38761 ( 0.15%) 25867640 ( 0.13%) 667.36
smtp 26457 ( 0.10%) 4805022 ( 0.02%) 181.62
ftp 818937 ( 3.23%) 366192103 ( 1.88%) 447.16
pop3 6064 ( 0.02%) 4276976 ( 0.02%) 705.31
imap 653 ( 0.00%) 267195 ( 0.00%) 409.18
telnet 4779 ( 0.02%) 348193 ( 0.00%) 72.86
ssh 1348141 ( 5.32%) 1175576344 ( 6.04%) 872.00
dns 20243 ( 0.08%) 1640072 ( 0.01%) 81.02
bgp 641 ( 0.00%) 129051 ( 0.00%) 201.33
napster 26 ( 0.00%) 1702 ( 0.00%) 65.46
realaud 18 ( 0.00%) 1122 ( 0.00%) 62.33
icecast 701 ( 0.00%) 147686 ( 0.00%) 210.68
hotline 12 ( 0.00%) 760 ( 0.00%) 63.33
other 5510247 ( 21.75%) 3776054899 ( 19.39%) 685.28
udp 2224402 ( 8.78%) 669452512 ( 3.44%) 300.96
dns 265243 ( 1.05%) 55896796 ( 0.29%) 210.74
realaud 85 ( 0.00%) 14291 ( 0.00%) 168.13
halflif 31 ( 0.00%) 4626 ( 0.00%) 149.23
starcra 19 ( 0.00%) 1605 ( 0.00%) 84.47
everque 263 ( 0.00%) 68767 ( 0.00%) 261.47
unreal 80 ( 0.00%) 38736 ( 0.00%) 484.20
quake 9 ( 0.00%) 962 ( 0.00%) 106.89
other 1958555 ( 7.73%) 613379778 ( 3.15%) 313.18
icmp 1760776 ( 6.95%) 199566228 ( 1.02%) 113.34
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3151 ( 0.01%) 1117450 ( 0.01%) 354.63
ip6 1218420 ( 4.81%) 1200632094 ( 6.16%) 985.40
pim 331 ( 0.00%) 19860 ( 0.00%) 60.00
other 22700 ( 0.09%) 3463974 ( 0.02%) 152.60
frag 648 ( 0.00%) 574714 ( 0.00%) 886.90
ip6 138255 ( 0.55%) 81547832 ( 0.42%) 589.84
tcp6 73133 ( 0.29%) 66377034 ( 0.34%) 907.62
http(s) 3251 ( 0.01%) 3476739 ( 0.02%) 1069.44
http(c) 12031 ( 0.05%) 1281988 ( 0.01%) 106.56
smtp 76 ( 0.00%) 34430 ( 0.00%) 453.03
ftp 16 ( 0.00%) 1483 ( 0.00%) 92.69
dns 187 ( 0.00%) 41409 ( 0.00%) 221.44
bgp 88 ( 0.00%) 14211 ( 0.00%) 161.49
other 57484 ( 0.23%) 61526774 ( 0.32%) 1070.33
udp6 37502 ( 0.15%) 10849043 ( 0.06%) 289.29
dns 31096 ( 0.12%) 6902153 ( 0.04%) 221.96
everque 1 ( 0.00%) 159 ( 0.00%) 159.00
quake 1 ( 0.00%) 103 ( 0.00%) 103.00
other 6404 ( 0.03%) 3946628 ( 0.02%) 616.28
icmp6 26549 ( 0.10%) 3567413 ( 0.02%) 134.37
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 958 ( 0.00%) 738950 ( 0.00%) 771.35
tcpdump file: 201204010630.dump.gz (595.36 MB)