Traffic Trace Info
DumpFile: 201204010700.dump
FileSize: 1872.66MB
Id: 201204010700
StartTime: Sun Apr 1 07:00:00 2012
EndTime: Sun Apr 1 07:15:00 2012
TotalTime: 900.01 seconds
TotalCapSize: 1489.27MB CapLen: 96 bytes
# of packets: 25125246 (19174.35MB)
AvgRate: 178.71Mbps stddev:29.38M
IP flow (unique src/dst pair) Information
# of flows: 1700221 (avg. 14.78 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 5.2% 4.6% 4.4% 3.6% 3.5% 3.2% 3.0% 2.1% 1.5%
IP address Information
# of IPv4 addresses: 1363542
Top 10 bandwidth usage (bytes/total in %):
20.0% 19.7% 12.5% 10.9% 7.0% 6.2% 5.5% 5.2% 4.8% 4.7%
# of IPv6 addresses: 4719
Top 10 bandwidth usage (bytes/total in %):
88.9% 87.7% 5.1% 2.3% 1.8% 1.6% 1.1% 0.9% 0.9% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010700.pktlen.png)
detailed numbers
[ 32- 63]: 3790274
[ 64- 127]: 6586747
[ 128- 255]: 967227
[ 256- 511]: 528815
[ 512- 1023]: 615170
[ 1024- 2047]: 12637013
Protocol Breakdown
![[protocol breakdown chart]](201204010700.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25125246 (100.00%) 20105766461 (100.00%) 800.22
ip 24483518 ( 97.45%) 19292072850 ( 95.95%) 787.96
tcp 18478162 ( 73.54%) 16809640258 ( 83.61%) 909.70
http(s) 7621434 ( 30.33%) 10006542423 ( 49.77%) 1312.95
http(c) 3558569 ( 14.16%) 891343865 ( 4.43%) 250.48
squid 92414 ( 0.37%) 32111022 ( 0.16%) 347.47
smtp 28505 ( 0.11%) 7412033 ( 0.04%) 260.03
nntp 14 ( 0.00%) 870 ( 0.00%) 62.14
ftp 6836 ( 0.03%) 711982 ( 0.00%) 104.15
pop3 1366 ( 0.01%) 298699 ( 0.00%) 218.67
imap 1164 ( 0.00%) 430088 ( 0.00%) 369.49
telnet 5961 ( 0.02%) 497941 ( 0.00%) 83.53
ssh 1312947 ( 5.23%) 1200459113 ( 5.97%) 914.32
dns 3626 ( 0.01%) 348586 ( 0.00%) 96.14
bgp 631 ( 0.00%) 117477 ( 0.00%) 186.18
napster 57 ( 0.00%) 3714 ( 0.00%) 65.16
realaud 29 ( 0.00%) 2197 ( 0.00%) 75.76
rtsp 8 ( 0.00%) 480 ( 0.00%) 60.00
icecast 645 ( 0.00%) 143973 ( 0.00%) 223.21
hotline 13 ( 0.00%) 852 ( 0.00%) 65.54
other 5843943 ( 23.26%) 4669214943 ( 23.22%) 798.98
udp 2440088 ( 9.71%) 871056860 ( 4.33%) 356.98
dns 277129 ( 1.10%) 58025186 ( 0.29%) 209.38
realaud 5 ( 0.00%) 515 ( 0.00%) 103.00
halflif 39 ( 0.00%) 3514 ( 0.00%) 90.10
starcra 16 ( 0.00%) 3884 ( 0.00%) 242.75
everque 238 ( 0.00%) 69476 ( 0.00%) 291.92
unreal 65 ( 0.00%) 23556 ( 0.00%) 362.40
quake 46 ( 0.00%) 16790 ( 0.00%) 365.00
other 2162461 ( 8.61%) 812885448 ( 4.04%) 375.91
icmp 1759873 ( 7.00%) 200044509 ( 0.99%) 113.67
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2836 ( 0.01%) 980040 ( 0.00%) 345.57
ip6 1776521 ( 7.07%) 1404449636 ( 6.99%) 790.56
pim 280 ( 0.00%) 16800 ( 0.00%) 60.00
other 25573 ( 0.10%) 5865477 ( 0.03%) 229.36
frag 400 ( 0.00%) 359587 ( 0.00%) 898.97
ip6 641728 ( 2.55%) 813693611 ( 4.05%) 1267.97
tcp6 564233 ( 2.25%) 789097023 ( 3.92%) 1398.53
http(s) 2220 ( 0.01%) 1894228 ( 0.01%) 853.26
http(c) 8848 ( 0.04%) 939260 ( 0.00%) 106.16
smtp 356 ( 0.00%) 108041 ( 0.00%) 303.49
dns 269 ( 0.00%) 54952 ( 0.00%) 204.28
bgp 83 ( 0.00%) 21263 ( 0.00%) 256.18
other 552457 ( 2.20%) 786079279 ( 3.91%) 1422.88
udp6 47001 ( 0.19%) 20016687 ( 0.10%) 425.88
dns 32417 ( 0.13%) 7321966 ( 0.04%) 225.87
realaud 1 ( 0.00%) 114 ( 0.00%) 114.00
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
starcra 2 ( 0.00%) 225 ( 0.00%) 112.50
everque 1 ( 0.00%) 121 ( 0.00%) 121.00
unreal 1 ( 0.00%) 99 ( 0.00%) 99.00
other 14578 ( 0.06%) 12694056 ( 0.06%) 870.77
icmp6 29606 ( 0.12%) 3958567 ( 0.02%) 133.71
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 775 ( 0.00%) 605942 ( 0.00%) 781.86
tcpdump file: 201204010700.dump.gz (583.57 MB)