Traffic Trace Info
DumpFile: 201204010645.dump
FileSize: 1771.93MB
Id: 201204010645
StartTime: Sun Apr 1 06:45:00 2012
EndTime: Sun Apr 1 07:00:00 2012
TotalTime: 900.10 seconds
TotalCapSize: 1409.66MB CapLen: 96 bytes
# of packets: 23741734 (17114.44MB)
AvgRate: 159.49Mbps stddev:20.77M
IP flow (unique src/dst pair) Information
# of flows: 1892059 (avg. 12.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 5.7% 4.8% 3.4% 3.3% 3.2% 2.1% 1.8% 1.8% 1.5%
IP address Information
# of IPv4 addresses: 1385754
Top 10 bandwidth usage (bytes/total in %):
21.6% 17.9% 12.4% 9.5% 7.2% 6.6% 5.2% 3.7% 3.6% 3.5%
# of IPv6 addresses: 4143
Top 10 bandwidth usage (bytes/total in %):
94.6% 93.9% 1.9% 1.9% 1.3% 0.6% 0.5% 0.4% 0.4% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010645.pktlen.png)
detailed numbers
[ 32- 63]: 3906090
[ 64- 127]: 6709317
[ 128- 255]: 869368
[ 256- 511]: 550184
[ 512- 1023]: 529130
[ 1024- 2047]: 11177645
Protocol Breakdown
![[protocol breakdown chart]](201204010645.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23741734 (100.00%) 17945787327 (100.00%) 755.88
ip 22936679 ( 96.61%) 16859906479 ( 93.95%) 735.06
tcp 17018839 ( 71.68%) 14716354222 ( 82.00%) 864.71
http(s) 7442523 ( 31.35%) 9619587486 ( 53.60%) 1292.52
http(c) 3608268 ( 15.20%) 878999907 ( 4.90%) 243.61
squid 59896 ( 0.25%) 27310175 ( 0.15%) 455.96
smtp 26423 ( 0.11%) 5885459 ( 0.03%) 222.74
nntp 2 ( 0.00%) 122 ( 0.00%) 61.00
ftp 5374 ( 0.02%) 549687 ( 0.00%) 102.29
pop3 1404 ( 0.01%) 304946 ( 0.00%) 217.20
imap 799 ( 0.00%) 298815 ( 0.00%) 373.99
telnet 4756 ( 0.02%) 338686 ( 0.00%) 71.21
ssh 1403858 ( 5.91%) 1222020996 ( 6.81%) 870.47
dns 3566 ( 0.02%) 354320 ( 0.00%) 99.36
bgp 660 ( 0.00%) 139714 ( 0.00%) 211.69
napster 57 ( 0.00%) 3714 ( 0.00%) 65.16
realaud 8 ( 0.00%) 506 ( 0.00%) 63.25
icecast 582 ( 0.00%) 74021 ( 0.00%) 127.18
hotline 2 ( 0.00%) 126 ( 0.00%) 63.00
other 4460661 ( 18.79%) 2960485542 ( 16.50%) 663.69
udp 2312960 ( 9.74%) 739296776 ( 4.12%) 319.63
dns 245846 ( 1.04%) 53622629 ( 0.30%) 218.11
rip 1 ( 0.00%) 70 ( 0.00%) 70.00
realaud 35 ( 0.00%) 7831 ( 0.00%) 223.74
halflif 97 ( 0.00%) 15022 ( 0.00%) 154.87
starcra 15 ( 0.00%) 1777 ( 0.00%) 118.47
everque 214 ( 0.00%) 55501 ( 0.00%) 259.35
unreal 86 ( 0.00%) 36504 ( 0.00%) 424.47
quake 1 ( 0.00%) 69 ( 0.00%) 69.00
cuseeme 2 ( 0.00%) 454 ( 0.00%) 227.00
other 2066583 ( 8.70%) 685537156 ( 3.82%) 331.72
icmp 1968704 ( 8.29%) 212077042 ( 1.18%) 107.72
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2977 ( 0.01%) 1043686 ( 0.01%) 350.58
ip6 1611310 ( 6.79%) 1188170886 ( 6.62%) 737.39
pim 242 ( 0.00%) 14520 ( 0.00%) 60.00
other 21462 ( 0.09%) 2930077 ( 0.02%) 136.52
frag 549 ( 0.00%) 501511 ( 0.00%) 913.50
ip6 805055 ( 3.39%) 1085880848 ( 6.05%) 1348.83
tcp6 735988 ( 3.10%) 1066632682 ( 5.94%) 1449.25
http(s) 6407 ( 0.03%) 6999586 ( 0.04%) 1092.49
http(c) 13952 ( 0.06%) 1641881 ( 0.01%) 117.68
smtp 63 ( 0.00%) 25654 ( 0.00%) 407.21
dns 111 ( 0.00%) 15299 ( 0.00%) 137.83
bgp 85 ( 0.00%) 13287 ( 0.00%) 156.32
other 715370 ( 3.01%) 1057936975 ( 5.90%) 1478.87
udp6 42175 ( 0.18%) 15293103 ( 0.09%) 362.61
dns 28952 ( 0.12%) 6408900 ( 0.04%) 221.36
starcra 1 ( 0.00%) 95 ( 0.00%) 95.00
unreal 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 13220 ( 0.06%) 8883892 ( 0.05%) 672.00
icmp6 26222 ( 0.11%) 3507766 ( 0.02%) 133.77
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 556 ( 0.00%) 431805 ( 0.00%) 776.63
tcpdump file: 201204010645.dump.gz (558.47 MB)