Traffic Trace Info
DumpFile: 201204010745.dump
FileSize: 1743.89MB
Id: 201204010745
StartTime: Sun Apr 1 07:45:00 2012
EndTime: Sun Apr 1 08:00:01 2012
TotalTime: 900.20 seconds
TotalCapSize: 1384.65MB CapLen: 96 bytes
# of packets: 23542890 (17281.65MB)
AvgRate: 161.04Mbps stddev:22.50M
IP flow (unique src/dst pair) Information
# of flows: 1720668 (avg. 13.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 4.9% 3.7% 3.1% 2.6% 2.6% 1.7% 1.5% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 1364292
Top 10 bandwidth usage (bytes/total in %):
19.4% 18.2% 11.8% 7.8% 6.8% 6.7% 6.4% 5.1% 3.8% 3.7%
# of IPv6 addresses: 4466
Top 10 bandwidth usage (bytes/total in %):
38.7% 32.4% 29.3% 17.6% 8.4% 5.0% 3.3% 3.2% 2.6% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010745.pktlen.png)
detailed numbers
[ 32- 63]: 4158835
[ 64- 127]: 6081362
[ 128- 255]: 863078
[ 256- 511]: 485577
[ 512- 1023]: 606085
[ 1024- 2047]: 11347953
Protocol Breakdown
![[protocol breakdown chart]](201204010745.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23542890 (100.00%) 18121121462 (100.00%) 769.71
ip 23218890 ( 98.62%) 17852926872 ( 98.52%) 768.90
tcp 17490654 ( 74.29%) 15366743832 ( 84.80%) 878.57
http(s) 6863878 ( 29.15%) 9160308628 ( 50.55%) 1334.57
http(c) 3390482 ( 14.40%) 901109452 ( 4.97%) 265.78
squid 110326 ( 0.47%) 30958097 ( 0.17%) 280.61
smtp 27545 ( 0.12%) 5136581 ( 0.03%) 186.48
nntp 26 ( 0.00%) 1602 ( 0.00%) 61.62
ftp 9799 ( 0.04%) 1561756 ( 0.01%) 159.38
pop3 6802 ( 0.03%) 705086 ( 0.00%) 103.66
imap 562 ( 0.00%) 240520 ( 0.00%) 427.97
telnet 6099 ( 0.03%) 446846 ( 0.00%) 73.27
ssh 1375816 ( 5.84%) 1213553382 ( 6.70%) 882.06
dns 3678 ( 0.02%) 398807 ( 0.00%) 108.43
bgp 609 ( 0.00%) 99242 ( 0.00%) 162.96
napster 47 ( 0.00%) 3014 ( 0.00%) 64.13
realaud 16 ( 0.00%) 1008 ( 0.00%) 63.00
icecast 3388 ( 0.01%) 1179380 ( 0.01%) 348.11
hotline 24 ( 0.00%) 1892 ( 0.00%) 78.83
other 5691557 ( 24.18%) 4051038539 ( 22.36%) 711.76
udp 2318150 ( 9.85%) 873194287 ( 4.82%) 376.68
dns 265379 ( 1.13%) 78628020 ( 0.43%) 296.29
realaud 9 ( 0.00%) 939 ( 0.00%) 104.33
halflif 83 ( 0.00%) 13886 ( 0.00%) 167.30
starcra 62 ( 0.00%) 8456 ( 0.00%) 136.39
everque 212 ( 0.00%) 60934 ( 0.00%) 287.42
unreal 50 ( 0.00%) 6876 ( 0.00%) 137.52
quake 20 ( 0.00%) 1590 ( 0.00%) 79.50
cuseeme 2 ( 0.00%) 173 ( 0.00%) 86.50
other 2051856 ( 8.72%) 793953082 ( 4.38%) 386.94
icmp 1755901 ( 7.46%) 198216820 ( 1.09%) 112.89
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2787 ( 0.01%) 926898 ( 0.01%) 332.58
ip6 1627212 ( 6.91%) 1410570163 ( 7.78%) 866.86
pim 307 ( 0.00%) 18420 ( 0.00%) 60.00
other 23694 ( 0.10%) 3237182 ( 0.02%) 136.62
frag 20600 ( 0.09%) 24522172 ( 0.14%) 1190.40
ip6 324000 ( 1.38%) 268194590 ( 1.48%) 827.76
tcp6 239684 ( 1.02%) 236516785 ( 1.31%) 986.79
http(s) 3280 ( 0.01%) 3914409 ( 0.02%) 1193.42
http(c) 8232 ( 0.03%) 762595 ( 0.00%) 92.64
smtp 428 ( 0.00%) 146902 ( 0.00%) 343.23
dns 164 ( 0.00%) 39110 ( 0.00%) 238.48
bgp 88 ( 0.00%) 14855 ( 0.00%) 168.81
other 227492 ( 0.97%) 231638914 ( 1.28%) 1018.23
udp6 48959 ( 0.21%) 21125400 ( 0.12%) 431.49
dns 31081 ( 0.13%) 6796834 ( 0.04%) 218.68
realaud 1 ( 0.00%) 108 ( 0.00%) 108.00
halflif 2 ( 0.00%) 184 ( 0.00%) 92.00
unreal 2 ( 0.00%) 219 ( 0.00%) 109.50
other 17873 ( 0.08%) 14328055 ( 0.08%) 801.66
icmp6 27738 ( 0.12%) 3733325 ( 0.02%) 134.59
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 7504 ( 0.03%) 6803452 ( 0.04%) 906.64
tcpdump file: 201204010745.dump.gz (557.52 MB)