Traffic Trace Info
DumpFile: 201204010715.dump
FileSize: 1791.40MB
Id: 201204010715
StartTime: Sun Apr 1 07:15:00 2012
EndTime: Sun Apr 1 07:30:00 2012
TotalTime: 900.15 seconds
TotalCapSize: 1425.20MB CapLen: 96 bytes
# of packets: 23999093 (18417.76MB)
AvgRate: 171.64Mbps stddev:32.22M
IP flow (unique src/dst pair) Information
# of flows: 1838729 (avg. 13.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 4.7% 4.6% 3.9% 3.4% 2.8% 2.8% 2.8% 2.6% 2.3%
IP address Information
# of IPv4 addresses: 1384623
Top 10 bandwidth usage (bytes/total in %):
22.7% 19.4% 11.6% 6.8% 6.5% 5.5% 5.1% 5.1% 4.9% 3.9%
# of IPv6 addresses: 4527
Top 10 bandwidth usage (bytes/total in %):
83.0% 82.2% 5.2% 5.1% 5.1% 3.4% 2.0% 1.7% 1.7% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010715.pktlen.png)
detailed numbers
[ 32- 63]: 3563814
[ 64- 127]: 6276614
[ 128- 255]: 931841
[ 256- 511]: 535416
[ 512- 1023]: 610677
[ 1024- 2047]: 12080731
Protocol Breakdown
![[protocol breakdown chart]](201204010715.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23999093 (100.00%) 19312422680 (100.00%) 804.71
ip 23267426 ( 96.95%) 18386285747 ( 95.20%) 790.22
tcp 17628199 ( 73.45%) 16173779299 ( 83.75%) 917.49
http(s) 7720466 ( 32.17%) 10115116487 ( 52.38%) 1310.17
http(c) 3165298 ( 13.19%) 817870970 ( 4.23%) 258.39
squid 80916 ( 0.34%) 27995836 ( 0.14%) 345.99
smtp 27455 ( 0.11%) 4955133 ( 0.03%) 180.48
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 6029 ( 0.03%) 634230 ( 0.00%) 105.20
pop3 1384 ( 0.01%) 311292 ( 0.00%) 224.92
imap 1078 ( 0.00%) 537427 ( 0.00%) 498.54
telnet 6223 ( 0.03%) 450620 ( 0.00%) 72.41
ssh 1332690 ( 5.55%) 1207292755 ( 6.25%) 905.91
dns 3855 ( 0.02%) 397627 ( 0.00%) 103.15
bgp 665 ( 0.00%) 143164 ( 0.00%) 215.28
napster 53 ( 0.00%) 3660 ( 0.00%) 69.06
realaud 13 ( 0.00%) 828 ( 0.00%) 63.69
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 800 ( 0.00%) 87991 ( 0.00%) 109.99
hotline 14 ( 0.00%) 882 ( 0.00%) 63.00
other 5281257 ( 22.01%) 3997980217 ( 20.70%) 757.01
udp 2443204 ( 10.18%) 916452400 ( 4.75%) 375.10
dns 264631 ( 1.10%) 57055127 ( 0.30%) 215.60
realaud 4 ( 0.00%) 382 ( 0.00%) 95.50
halflif 92 ( 0.00%) 13819 ( 0.00%) 150.21
starcra 26 ( 0.00%) 1994 ( 0.00%) 76.69
everque 208 ( 0.00%) 57270 ( 0.00%) 275.34
unreal 617 ( 0.00%) 487454 ( 0.00%) 790.04
quake 3 ( 0.00%) 253 ( 0.00%) 84.33
cuseeme 5 ( 0.00%) 758 ( 0.00%) 151.60
other 2177504 ( 9.07%) 858781445 ( 4.45%) 394.39
icmp 1753406 ( 7.31%) 199762612 ( 1.03%) 113.93
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2905 ( 0.01%) 998134 ( 0.01%) 343.59
ip6 1417482 ( 5.91%) 1092238417 ( 5.66%) 770.55
pim 240 ( 0.00%) 14400 ( 0.00%) 60.00
other 21806 ( 0.09%) 3021325 ( 0.02%) 138.55
frag 704 ( 0.00%) 732136 ( 0.00%) 1039.97
ip6 731667 ( 3.05%) 926136933 ( 4.80%) 1265.79
tcp6 647258 ( 2.70%) 892716710 ( 4.62%) 1379.23
http(s) 11730 ( 0.05%) 16570632 ( 0.09%) 1412.67
http(c) 20422 ( 0.09%) 1785949 ( 0.01%) 87.45
smtp 29 ( 0.00%) 18797 ( 0.00%) 648.17
dns 133 ( 0.00%) 46263 ( 0.00%) 347.84
bgp 90 ( 0.00%) 14687 ( 0.00%) 163.19
other 614854 ( 2.56%) 874280382 ( 4.53%) 1421.93
udp6 53627 ( 0.22%) 28934425 ( 0.15%) 539.55
dns 32274 ( 0.13%) 7066664 ( 0.04%) 218.96
realaud 1 ( 0.00%) 97 ( 0.00%) 97.00
everque 3 ( 0.00%) 325 ( 0.00%) 108.33
other 21349 ( 0.09%) 21867339 ( 0.11%) 1024.28
icmp6 30274 ( 0.13%) 4068591 ( 0.02%) 134.39
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 393 ( 0.00%) 401547 ( 0.00%) 1021.75
tcpdump file: 201204010715.dump.gz (562.05 MB)