Traffic Trace Info
DumpFile: 201204010730.dump
FileSize: 1819.80MB
Id: 201204010730
StartTime: Sun Apr 1 07:30:00 2012
EndTime: Sun Apr 1 07:45:00 2012
TotalTime: 900.17 seconds
TotalCapSize: 1444.05MB CapLen: 96 bytes
# of packets: 24624496 (18757.32MB)
AvgRate: 174.72Mbps stddev:28.36M
IP flow (unique src/dst pair) Information
# of flows: 1785075 (avg. 13.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 5.7% 4.8% 4.6% 4.3% 3.4% 3.3% 2.3% 2.2% 1.9%
IP address Information
# of IPv4 addresses: 1411160
Top 10 bandwidth usage (bytes/total in %):
21.4% 17.9% 12.3% 11.1% 7.0% 6.2% 5.9% 4.9% 4.9% 4.5%
# of IPv6 addresses: 4565
Top 10 bandwidth usage (bytes/total in %):
64.2% 63.6% 23.8% 5.8% 2.0% 2.0% 2.0% 2.0% 1.6% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010730.pktlen.png)
detailed numbers
[ 32- 63]: 4003964
[ 64- 127]: 6207604
[ 128- 255]: 943559
[ 256- 511]: 510663
[ 512- 1023]: 616454
[ 1024- 2047]: 12342252
Protocol Breakdown
![[protocol breakdown chart]](201204010730.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24624496 (100.00%) 19668475259 (100.00%) 798.74
ip 24135491 ( 98.01%) 19179138444 ( 97.51%) 794.64
tcp 18728053 ( 76.05%) 17180264638 ( 87.35%) 917.35
http(s) 7026074 ( 28.53%) 9328194557 ( 47.43%) 1327.65
http(c) 3328494 ( 13.52%) 782013793 ( 3.98%) 234.95
squid 85244 ( 0.35%) 23994823 ( 0.12%) 281.48
smtp 59208 ( 0.24%) 28209017 ( 0.14%) 476.44
nntp 7 ( 0.00%) 434 ( 0.00%) 62.00
ftp 7724 ( 0.03%) 784592 ( 0.00%) 101.58
pop3 1435 ( 0.01%) 327818 ( 0.00%) 228.44
imap 575 ( 0.00%) 206582 ( 0.00%) 359.27
telnet 7146 ( 0.03%) 520402 ( 0.00%) 72.82
ssh 1429430 ( 5.80%) 1209832523 ( 6.15%) 846.37
dns 3501 ( 0.01%) 357329 ( 0.00%) 102.06
bgp 634 ( 0.00%) 110352 ( 0.00%) 174.06
napster 47 ( 0.00%) 3138 ( 0.00%) 66.77
realaud 6 ( 0.00%) 374 ( 0.00%) 62.33
rtsp 3 ( 0.00%) 180 ( 0.00%) 60.00
icecast 752 ( 0.00%) 149278 ( 0.00%) 198.51
hotline 4 ( 0.00%) 252 ( 0.00%) 63.00
other 6777769 ( 27.52%) 5805559194 ( 29.52%) 856.56
udp 2350855 ( 9.55%) 849090084 ( 4.32%) 361.18
dns 279565 ( 1.14%) 71446584 ( 0.36%) 255.56
realaud 56 ( 0.00%) 7326 ( 0.00%) 130.82
halflif 22 ( 0.00%) 2427 ( 0.00%) 110.32
starcra 18 ( 0.00%) 1938 ( 0.00%) 107.67
everque 205 ( 0.00%) 49221 ( 0.00%) 240.10
unreal 268 ( 0.00%) 214268 ( 0.00%) 799.51
quake 3 ( 0.00%) 256 ( 0.00%) 85.33
cuseeme 1 ( 0.00%) 62 ( 0.00%) 62.00
other 2070336 ( 8.41%) 776992746 ( 3.95%) 375.30
icmp 1754376 ( 7.12%) 197122506 ( 1.00%) 112.36
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3009 ( 0.01%) 1052038 ( 0.01%) 349.63
ip6 1279486 ( 5.20%) 948653640 ( 4.82%) 741.43
pim 228 ( 0.00%) 13680 ( 0.00%) 60.00
other 19299 ( 0.08%) 2922588 ( 0.01%) 151.44
frag 12175 ( 0.05%) 14482465 ( 0.07%) 1189.52
ip6 489005 ( 1.99%) 489336815 ( 2.49%) 1000.68
tcp6 400425 ( 1.63%) 453282967 ( 2.30%) 1132.00
http(s) 2258 ( 0.01%) 2535337 ( 0.01%) 1122.82
http(c) 35658 ( 0.14%) 3036953 ( 0.02%) 85.17
smtp 163 ( 0.00%) 88219 ( 0.00%) 541.22
ftp 24 ( 0.00%) 1890 ( 0.00%) 78.75
dns 288 ( 0.00%) 69825 ( 0.00%) 242.45
bgp 87 ( 0.00%) 12183 ( 0.00%) 140.03
other 361947 ( 1.47%) 447538560 ( 2.28%) 1236.48
udp6 54207 ( 0.22%) 27123028 ( 0.14%) 500.36
dns 32989 ( 0.13%) 7308521 ( 0.04%) 221.54
halflif 4 ( 0.00%) 368 ( 0.00%) 92.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 21213 ( 0.09%) 19814031 ( 0.10%) 934.05
icmp6 28467 ( 0.12%) 3863181 ( 0.02%) 135.71
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5792 ( 0.02%) 5052147 ( 0.03%) 872.26
tcpdump file: 201204010730.dump.gz (577.39 MB)