Traffic Trace Info
DumpFile: 201204010845.dump
FileSize: 1592.56MB
Id: 201204010845
StartTime: Sun Apr 1 08:45:01 2012
EndTime: Sun Apr 1 09:00:01 2012
TotalTime: 900.07 seconds
TotalCapSize: 1258.80MB CapLen: 96 bytes
# of packets: 21873234 (16019.73MB)
AvgRate: 149.25Mbps stddev:16.50M
IP flow (unique src/dst pair) Information
# of flows: 1644458 (avg. 13.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.2% 7.5% 4.2% 3.2% 2.8% 2.7% 1.9% 1.7% 1.5% 1.5%
IP address Information
# of IPv4 addresses: 1310192
Top 10 bandwidth usage (bytes/total in %):
20.5% 16.4% 9.9% 8.5% 8.3% 7.9% 6.6% 5.8% 5.2% 4.4%
# of IPv6 addresses: 4401
Top 10 bandwidth usage (bytes/total in %):
35.7% 25.6% 17.3% 8.6% 8.5% 5.5% 4.4% 4.2% 4.2% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010845.pktlen.png)
detailed numbers
[ 32- 63]: 4351538
[ 64- 127]: 5052140
[ 128- 255]: 897190
[ 256- 511]: 487363
[ 512- 1023]: 627031
[ 1024- 2047]: 10457972
Protocol Breakdown
![[protocol breakdown chart]](201204010845.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21873234 (100.00%) 16797909255 (100.00%) 767.97
ip 21498879 ( 98.29%) 16500242347 ( 98.23%) 767.49
tcp 16105458 ( 73.63%) 14584898066 ( 86.83%) 905.59
http(s) 6215530 ( 28.42%) 8482579764 ( 50.50%) 1364.74
http(c) 2769228 ( 12.66%) 761201186 ( 4.53%) 274.88
squid 26165 ( 0.12%) 16563451 ( 0.10%) 633.04
smtp 28922 ( 0.13%) 4961756 ( 0.03%) 171.56
nntp 13 ( 0.00%) 792 ( 0.00%) 60.92
ftp 8242 ( 0.04%) 848446 ( 0.01%) 102.94
pop3 5758 ( 0.03%) 2603371 ( 0.02%) 452.13
imap 1777 ( 0.01%) 845629 ( 0.01%) 475.87
telnet 6011 ( 0.03%) 438586 ( 0.00%) 72.96
ssh 1433463 ( 6.55%) 1300814555 ( 7.74%) 907.46
dns 3960 ( 0.02%) 433590 ( 0.00%) 109.49
bgp 632 ( 0.00%) 117516 ( 0.00%) 185.94
napster 56 ( 0.00%) 3846 ( 0.00%) 68.68
realaud 17 ( 0.00%) 1114 ( 0.00%) 65.53
rtsp 1626 ( 0.01%) 1166415 ( 0.01%) 717.35
icecast 15352 ( 0.07%) 15291544 ( 0.09%) 996.06
hotline 17 ( 0.00%) 1120 ( 0.00%) 65.88
other 5588689 ( 25.55%) 3997025385 ( 23.79%) 715.20
udp 2269671 ( 10.38%) 735469128 ( 4.38%) 324.04
dns 291031 ( 1.33%) 84807781 ( 0.50%) 291.40
realaud 2 ( 0.00%) 216 ( 0.00%) 108.00
halflif 94 ( 0.00%) 14920 ( 0.00%) 158.72
starcra 42 ( 0.00%) 4026 ( 0.00%) 95.86
everque 177 ( 0.00%) 38815 ( 0.00%) 219.29
unreal 87 ( 0.00%) 28058 ( 0.00%) 322.51
quake 7 ( 0.00%) 1182 ( 0.00%) 168.86
cuseeme 1 ( 0.00%) 72 ( 0.00%) 72.00
other 1977784 ( 9.04%) 650146664 ( 3.87%) 328.72
icmp 1754780 ( 8.02%) 199306633 ( 1.19%) 113.58
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2830 ( 0.01%) 975316 ( 0.01%) 344.63
ip6 1342080 ( 6.14%) 976152403 ( 5.81%) 727.34
pim 319 ( 0.00%) 19140 ( 0.00%) 60.00
other 23556 ( 0.11%) 3402391 ( 0.02%) 144.44
frag 12909 ( 0.06%) 16042400 ( 0.10%) 1242.73
ip6 374355 ( 1.71%) 297666908 ( 1.77%) 795.15
tcp6 273750 ( 1.25%) 253284978 ( 1.51%) 925.24
http(s) 6178 ( 0.03%) 6501058 ( 0.04%) 1052.29
http(c) 7561 ( 0.03%) 715423 ( 0.00%) 94.62
squid 2102 ( 0.01%) 1538898 ( 0.01%) 732.11
smtp 399 ( 0.00%) 126773 ( 0.00%) 317.73
dns 120 ( 0.00%) 54181 ( 0.00%) 451.51
bgp 94 ( 0.00%) 15740 ( 0.00%) 167.45
other 257296 ( 1.18%) 244332905 ( 1.45%) 949.62
udp6 58094 ( 0.27%) 29261876 ( 0.17%) 503.70
dns 32573 ( 0.15%) 7482108 ( 0.04%) 229.70
everque 1 ( 0.00%) 118 ( 0.00%) 118.00
unreal 1 ( 0.00%) 107 ( 0.00%) 107.00
other 25519 ( 0.12%) 21779543 ( 0.13%) 853.46
icmp6 28112 ( 0.13%) 3813512 ( 0.02%) 135.65
ip6 84 ( 0.00%) 11462 ( 0.00%) 136.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 14285 ( 0.07%) 11291000 ( 0.07%) 790.41
tcpdump file: 201204010845.dump.gz (509.52 MB)