Traffic Trace Info
DumpFile: 201204010800.dump
FileSize: 1722.42MB
Id: 201204010800
StartTime: Sun Apr 1 08:00:01 2012
EndTime: Sun Apr 1 08:15:00 2012
TotalTime: 899.71 seconds
TotalCapSize: 1367.01MB CapLen: 96 bytes
# of packets: 23291836 (17527.93MB)
AvgRate: 163.44Mbps stddev:22.23M
IP flow (unique src/dst pair) Information
# of flows: 1675676 (avg. 13.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 4.6% 4.5% 3.9% 3.0% 2.0% 1.9% 1.9% 1.9% 1.9%
IP address Information
# of IPv4 addresses: 1325290
Top 10 bandwidth usage (bytes/total in %):
26.5% 13.6% 11.0% 7.4% 6.3% 5.3% 4.7% 4.6% 4.2% 4.0%
# of IPv6 addresses: 4589
Top 10 bandwidth usage (bytes/total in %):
45.7% 18.8% 13.4% 12.6% 7.1% 6.9% 5.4% 5.4% 4.5% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010800.pktlen.png)
detailed numbers
[ 32- 63]: 4088692
[ 64- 127]: 5674372
[ 128- 255]: 879105
[ 256- 511]: 502748
[ 512- 1023]: 641462
[ 1024- 2047]: 11505457
Protocol Breakdown
![[protocol breakdown chart]](201204010800.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23291836 (100.00%) 18379362703 (100.00%) 789.09
ip 23028383 ( 98.87%) 18211661516 ( 99.09%) 790.84
tcp 17347974 ( 74.48%) 15691117370 ( 85.37%) 904.49
http(s) 7738799 ( 33.23%) 10410092225 ( 56.64%) 1345.18
http(c) 3306583 ( 14.20%) 861121272 ( 4.69%) 260.43
squid 38757 ( 0.17%) 25964914 ( 0.14%) 669.94
smtp 28318 ( 0.12%) 6707374 ( 0.04%) 236.86
ftp 6615 ( 0.03%) 670787 ( 0.00%) 101.40
pop3 1857 ( 0.01%) 391145 ( 0.00%) 210.63
imap 3940 ( 0.02%) 780629 ( 0.00%) 198.13
telnet 5230 ( 0.02%) 384481 ( 0.00%) 73.51
ssh 1262242 ( 5.42%) 1147847965 ( 6.25%) 909.37
dns 3379 ( 0.01%) 376106 ( 0.00%) 111.31
bgp 623 ( 0.00%) 99961 ( 0.00%) 160.45
napster 33 ( 0.00%) 2746 ( 0.00%) 83.21
realaud 328 ( 0.00%) 283047 ( 0.00%) 862.95
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 1490 ( 0.01%) 197934 ( 0.00%) 132.84
hotline 14 ( 0.00%) 866 ( 0.00%) 61.86
other 4949765 ( 21.25%) 3236195858 ( 17.61%) 653.81
udp 2331832 ( 10.01%) 873367980 ( 4.75%) 374.54
dns 297545 ( 1.28%) 76907257 ( 0.42%) 258.47
realaud 5 ( 0.00%) 642 ( 0.00%) 128.40
halflif 25 ( 0.00%) 2511 ( 0.00%) 100.44
starcra 109 ( 0.00%) 14492 ( 0.00%) 132.95
everque 208 ( 0.00%) 57539 ( 0.00%) 276.63
unreal 38 ( 0.00%) 5306 ( 0.00%) 139.63
quake 8 ( 0.00%) 712 ( 0.00%) 89.00
cuseeme 1 ( 0.00%) 90 ( 0.00%) 90.00
other 2033544 ( 8.73%) 796024674 ( 4.33%) 391.45
icmp 1784662 ( 7.66%) 203938568 ( 1.11%) 114.27
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2691 ( 0.01%) 909730 ( 0.00%) 338.06
ip6 1535447 ( 6.59%) 1438572201 ( 7.83%) 936.91
pim 236 ( 0.00%) 14160 ( 0.00%) 60.00
other 25356 ( 0.11%) 3722237 ( 0.02%) 146.80
frag 12911 ( 0.06%) 15638260 ( 0.09%) 1211.24
ip6 263453 ( 1.13%) 167701187 ( 0.91%) 636.55
tcp6 177487 ( 0.76%) 138359776 ( 0.75%) 779.55
http(s) 2186 ( 0.01%) 2092130 ( 0.01%) 957.06
http(c) 30665 ( 0.13%) 2693731 ( 0.01%) 87.84
smtp 68 ( 0.00%) 73331 ( 0.00%) 1078.40
dns 253 ( 0.00%) 73425 ( 0.00%) 290.22
bgp 89 ( 0.00%) 13507 ( 0.00%) 151.76
other 144226 ( 0.62%) 133413652 ( 0.73%) 925.03
udp6 50306 ( 0.22%) 19349781 ( 0.11%) 384.64
dns 33641 ( 0.14%) 7452478 ( 0.04%) 221.53
realaud 2 ( 0.00%) 219 ( 0.00%) 109.50
halflif 3 ( 0.00%) 286 ( 0.00%) 95.33
cuseeme 1 ( 0.00%) 106 ( 0.00%) 106.00
other 16659 ( 0.07%) 11896692 ( 0.06%) 714.13
icmp6 28453 ( 0.12%) 3904813 ( 0.02%) 137.24
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 7094 ( 0.03%) 6071393 ( 0.03%) 855.85
tcpdump file: 201204010800.dump.gz (550.21 MB)