Traffic Trace Info
DumpFile: 201204010830.dump
FileSize: 1593.53MB
Id: 201204010830
StartTime: Sun Apr 1 08:30:00 2012
EndTime: Sun Apr 1 08:45:01 2012
TotalTime: 900.01 seconds
TotalCapSize: 1260.78MB CapLen: 96 bytes
# of packets: 21806603 (16088.18MB)
AvgRate: 149.95Mbps stddev:17.32M
IP flow (unique src/dst pair) Information
# of flows: 1632994 (avg. 13.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.1% 7.1% 6.0% 5.7% 3.5% 3.1% 2.5% 2.1% 1.6% 1.6%
IP address Information
# of IPv4 addresses: 1304070
Top 10 bandwidth usage (bytes/total in %):
28.2% 15.7% 8.4% 8.3% 7.4% 6.7% 6.5% 6.1% 5.8% 5.8%
# of IPv6 addresses: 4402
Top 10 bandwidth usage (bytes/total in %):
61.4% 12.8% 10.1% 9.0% 8.6% 5.3% 4.0% 3.2% 3.1% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010830.pktlen.png)
detailed numbers
[ 32- 63]: 4327521
[ 64- 127]: 5008259
[ 128- 255]: 897917
[ 256- 511]: 443359
[ 512- 1023]: 625389
[ 1024- 2047]: 10504158
Protocol Breakdown
![[protocol breakdown chart]](201204010830.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21806603 (100.00%) 16869678619 (100.00%) 773.60
ip 21536155 ( 98.76%) 16683120409 ( 98.89%) 774.66
tcp 16023641 ( 73.48%) 14669260070 ( 86.96%) 915.48
http(s) 6473397 ( 29.69%) 8871028458 ( 52.59%) 1370.38
http(c) 2344501 ( 10.75%) 742544554 ( 4.40%) 316.72
squid 27139 ( 0.12%) 14519955 ( 0.09%) 535.02
smtp 28330 ( 0.13%) 3989148 ( 0.02%) 140.81
nntp 14 ( 0.00%) 868 ( 0.00%) 62.00
ftp 9891 ( 0.05%) 1116017 ( 0.01%) 112.83
pop3 1579 ( 0.01%) 329163 ( 0.00%) 208.46
imap 2650 ( 0.01%) 2123846 ( 0.01%) 801.45
telnet 12060 ( 0.06%) 873436 ( 0.01%) 72.42
ssh 1370397 ( 6.28%) 1231208505 ( 7.30%) 898.43
dns 3665 ( 0.02%) 357732 ( 0.00%) 97.61
bgp 625 ( 0.00%) 112801 ( 0.00%) 180.48
napster 48 ( 0.00%) 3146 ( 0.00%) 65.54
realaud 8 ( 0.00%) 496 ( 0.00%) 62.00
icecast 11829 ( 0.05%) 11783991 ( 0.07%) 996.20
hotline 19 ( 0.00%) 1182 ( 0.00%) 62.21
other 5737489 ( 26.31%) 3789266772 ( 22.46%) 660.44
udp 2299599 ( 10.55%) 701374046 ( 4.16%) 305.00
dns 276434 ( 1.27%) 63109754 ( 0.37%) 228.30
realaud 4 ( 0.00%) 727 ( 0.00%) 181.75
halflif 152 ( 0.00%) 26875 ( 0.00%) 176.81
starcra 19 ( 0.00%) 1749 ( 0.00%) 92.05
everque 206 ( 0.00%) 59030 ( 0.00%) 286.55
unreal 100 ( 0.00%) 37050 ( 0.00%) 370.50
quake 10 ( 0.00%) 1310 ( 0.00%) 131.00
cuseeme 1 ( 0.00%) 90 ( 0.00%) 90.00
other 2022493 ( 9.27%) 638082157 ( 3.78%) 315.49
icmp 1770775 ( 8.12%) 200744219 ( 1.19%) 113.37
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2972 ( 0.01%) 1048392 ( 0.01%) 352.76
ip6 1416080 ( 6.49%) 1107206605 ( 6.56%) 781.88
pim 316 ( 0.00%) 18960 ( 0.00%) 60.00
other 22587 ( 0.10%) 3448847 ( 0.02%) 152.69
frag 867 ( 0.00%) 766981 ( 0.00%) 884.64
ip6 270448 ( 1.24%) 186558210 ( 1.11%) 689.81
tcp6 175471 ( 0.80%) 149634113 ( 0.89%) 852.76
http(s) 4921 ( 0.02%) 6341339 ( 0.04%) 1288.63
http(c) 6318 ( 0.03%) 574658 ( 0.00%) 90.96
smtp 65 ( 0.00%) 57090 ( 0.00%) 878.31
ftp 24 ( 0.00%) 1893 ( 0.00%) 78.88
dns 827 ( 0.00%) 531562 ( 0.00%) 642.76
bgp 90 ( 0.00%) 13028 ( 0.00%) 144.76
other 163226 ( 0.75%) 142114543 ( 0.84%) 870.66
udp6 60737 ( 0.28%) 27774630 ( 0.16%) 457.29
dns 32709 ( 0.15%) 7223724 ( 0.04%) 220.85
quake 2 ( 0.00%) 235 ( 0.00%) 117.50
other 28026 ( 0.13%) 20550671 ( 0.12%) 733.27
icmp6 27190 ( 0.12%) 3786178 ( 0.02%) 139.25
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 6936 ( 0.03%) 5347779 ( 0.03%) 771.02
tcpdump file: 201204010830.dump.gz (503.39 MB)