Traffic Trace Info
DumpFile: 201204010815.dump
FileSize: 1718.54MB
Id: 201204010815
StartTime: Sun Apr 1 08:15:00 2012
EndTime: Sun Apr 1 08:30:00 2012
TotalTime: 900.13 seconds
TotalCapSize: 1363.16MB CapLen: 96 bytes
# of packets: 23289918 (17503.47MB)
AvgRate: 163.15Mbps stddev:33.27M
IP flow (unique src/dst pair) Information
# of flows: 1724826 (avg. 13.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 5.9% 3.8% 3.0% 2.8% 2.6% 2.5% 2.5% 2.2% 1.9%
IP address Information
# of IPv4 addresses: 1342940
Top 10 bandwidth usage (bytes/total in %):
25.4% 13.1% 8.4% 7.0% 6.1% 5.8% 5.4% 5.2% 5.0% 3.9%
# of IPv6 addresses: 4380
Top 10 bandwidth usage (bytes/total in %):
47.1% 16.4% 16.4% 13.2% 11.2% 6.8% 5.8% 5.8% 2.7% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010815.pktlen.png)
detailed numbers
[ 32- 63]: 4277955
[ 64- 127]: 5628096
[ 128- 255]: 828632
[ 256- 511]: 468405
[ 512- 1023]: 604400
[ 1024- 2047]: 11482430
Protocol Breakdown
![[protocol breakdown chart]](201204010815.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23289918 (100.00%) 18353721480 (100.00%) 788.05
ip 22949584 ( 98.54%) 18089069030 ( 98.56%) 788.21
tcp 17533419 ( 75.28%) 16083549017 ( 87.63%) 917.31
http(s) 6913394 ( 29.68%) 9510393195 ( 51.82%) 1375.65
http(c) 2816198 ( 12.09%) 839277344 ( 4.57%) 298.02
squid 33263 ( 0.14%) 21451397 ( 0.12%) 644.90
smtp 24542 ( 0.11%) 4104798 ( 0.02%) 167.26
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 9989 ( 0.04%) 1060944 ( 0.01%) 106.21
pop3 1997 ( 0.01%) 546241 ( 0.00%) 273.53
imap 894 ( 0.00%) 312638 ( 0.00%) 349.71
telnet 9574 ( 0.04%) 705074 ( 0.00%) 73.64
ssh 1401989 ( 6.02%) 1277468011 ( 6.96%) 911.18
dns 4328 ( 0.02%) 398168 ( 0.00%) 92.00
bgp 620 ( 0.00%) 113612 ( 0.00%) 183.25
napster 46 ( 0.00%) 3389 ( 0.00%) 73.67
realaud 15 ( 0.00%) 934 ( 0.00%) 62.27
rtsp 5 ( 0.00%) 300 ( 0.00%) 60.00
icecast 1122 ( 0.00%) 107859 ( 0.00%) 96.13
hotline 19 ( 0.00%) 1190 ( 0.00%) 62.63
other 6315418 ( 27.12%) 4427603549 ( 24.12%) 701.08
udp 2174756 ( 9.34%) 737326258 ( 4.02%) 339.04
dns 270047 ( 1.16%) 60247188 ( 0.33%) 223.10
realaud 2 ( 0.00%) 197 ( 0.00%) 98.50
halflif 17 ( 0.00%) 1319 ( 0.00%) 77.59
starcra 25 ( 0.00%) 2610 ( 0.00%) 104.40
everque 184 ( 0.00%) 41913 ( 0.00%) 227.79
unreal 70 ( 0.00%) 24564 ( 0.00%) 350.91
quake 8 ( 0.00%) 940 ( 0.00%) 117.50
other 1904261 ( 8.18%) 676956706 ( 3.69%) 355.50
icmp 1756576 ( 7.54%) 197681692 ( 1.08%) 112.54
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2679 ( 0.01%) 905850 ( 0.00%) 338.13
ip6 1458465 ( 6.26%) 1066428079 ( 5.81%) 731.20
pim 298 ( 0.00%) 17880 ( 0.00%) 60.00
other 23206 ( 0.10%) 3140984 ( 0.02%) 135.35
frag 734 ( 0.00%) 663842 ( 0.00%) 904.42
ip6 340332 ( 1.46%) 264652330 ( 1.44%) 777.63
tcp6 248275 ( 1.07%) 236757613 ( 1.29%) 953.61
http(s) 11679 ( 0.05%) 16174477 ( 0.09%) 1384.92
http(c) 21914 ( 0.09%) 1972673 ( 0.01%) 90.02
smtp 64 ( 0.00%) 26519 ( 0.00%) 414.36
dns 581 ( 0.00%) 429228 ( 0.00%) 738.77
bgp 88 ( 0.00%) 14108 ( 0.00%) 160.32
other 213949 ( 0.92%) 218140608 ( 1.19%) 1019.59
udp6 58578 ( 0.25%) 20029610 ( 0.11%) 341.93
dns 32272 ( 0.14%) 6965044 ( 0.04%) 215.82
halflif 2 ( 0.00%) 223 ( 0.00%) 111.50
quake 2 ( 0.00%) 212 ( 0.00%) 106.00
cuseeme 1 ( 0.00%) 110 ( 0.00%) 110.00
other 26301 ( 0.11%) 13064021 ( 0.07%) 496.71
icmp6 28302 ( 0.12%) 3866213 ( 0.02%) 136.61
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5063 ( 0.02%) 3983402 ( 0.02%) 786.77
tcpdump file: 201204010815.dump.gz (535.81 MB)