Traffic Trace Info
DumpFile: 201204010900.dump
FileSize: 1781.93MB
Id: 201204010900
StartTime: Sun Apr 1 09:00:01 2012
EndTime: Sun Apr 1 09:15:00 2012
TotalTime: 899.72 seconds
TotalCapSize: 1412.06MB CapLen: 96 bytes
# of packets: 24239717 (18178.38MB)
AvgRate: 169.43Mbps stddev:30.41M
IP flow (unique src/dst pair) Information
# of flows: 1807435 (avg. 13.41 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 6.4% 6.2% 3.3% 3.0% 2.4% 2.3% 2.3% 2.2% 1.8%
IP address Information
# of IPv4 addresses: 1405486
Top 10 bandwidth usage (bytes/total in %):
20.8% 13.2% 11.3% 9.2% 7.0% 6.7% 6.4% 6.3% 6.1% 3.8%
# of IPv6 addresses: 4717
Top 10 bandwidth usage (bytes/total in %):
46.5% 18.9% 11.1% 6.2% 6.2% 6.2% 5.2% 4.2% 3.2% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010900.pktlen.png)
detailed numbers
[ 32- 63]: 4517300
[ 64- 127]: 5785670
[ 128- 255]: 876104
[ 256- 511]: 497756
[ 512- 1023]: 668800
[ 1024- 2047]: 11894087
Protocol Breakdown
![[protocol breakdown chart]](201204010900.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24239717 (100.00%) 19061417594 (100.00%) 786.37
ip 23818004 ( 98.26%) 18726430166 ( 98.24%) 786.23
tcp 18008734 ( 74.29%) 16630403030 ( 87.25%) 923.46
http(s) 6702324 ( 27.65%) 9194063512 ( 48.23%) 1371.77
http(c) 3109499 ( 12.83%) 805352282 ( 4.23%) 259.00
squid 29838 ( 0.12%) 18349521 ( 0.10%) 614.97
smtp 27105 ( 0.11%) 4559166 ( 0.02%) 168.20
nntp 16 ( 0.00%) 988 ( 0.00%) 61.75
ftp 7075 ( 0.03%) 722587 ( 0.00%) 102.13
pop3 1963 ( 0.01%) 682729 ( 0.00%) 347.80
imap 1725 ( 0.01%) 735968 ( 0.00%) 426.65
telnet 5196 ( 0.02%) 373518 ( 0.00%) 71.89
ssh 1368180 ( 5.64%) 1262355647 ( 6.62%) 922.65
dns 3617 ( 0.01%) 373762 ( 0.00%) 103.33
bgp 635 ( 0.00%) 121429 ( 0.00%) 191.23
napster 67 ( 0.00%) 4240 ( 0.00%) 63.28
realaud 15 ( 0.00%) 924 ( 0.00%) 61.60
rtsp 2196 ( 0.01%) 1592482 ( 0.01%) 725.17
icecast 15396 ( 0.06%) 15360645 ( 0.08%) 997.70
hotline 21 ( 0.00%) 1286 ( 0.00%) 61.24
other 6733866 ( 27.78%) 5325752344 ( 27.94%) 790.89
udp 2334933 ( 9.63%) 717519448 ( 3.76%) 307.30
dns 369483 ( 1.52%) 112827851 ( 0.59%) 305.37
rip 1 ( 0.00%) 69 ( 0.00%) 69.00
realaud 3 ( 0.00%) 300 ( 0.00%) 100.00
halflif 30 ( 0.00%) 2560 ( 0.00%) 85.33
starcra 37 ( 0.00%) 2873 ( 0.00%) 77.65
everque 234 ( 0.00%) 66225 ( 0.00%) 283.01
unreal 99 ( 0.00%) 52964 ( 0.00%) 534.99
quake 6 ( 0.00%) 513 ( 0.00%) 85.50
cuseeme 6 ( 0.00%) 400 ( 0.00%) 66.67
other 1964527 ( 8.10%) 604026903 ( 3.17%) 307.47
icmp 1776397 ( 7.33%) 199579362 ( 1.05%) 112.35
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2703 ( 0.01%) 914266 ( 0.00%) 338.24
ip6 1652006 ( 6.82%) 1165741265 ( 6.12%) 705.65
pim 366 ( 0.00%) 21960 ( 0.00%) 60.00
other 42681 ( 0.18%) 12231675 ( 0.06%) 286.58
frag 17581 ( 0.07%) 22118914 ( 0.12%) 1258.11
ip6 421713 ( 1.74%) 334987428 ( 1.76%) 794.35
tcp6 321677 ( 1.33%) 295481186 ( 1.55%) 918.56
http(s) 21376 ( 0.09%) 30434366 ( 0.16%) 1423.76
http(c) 13109 ( 0.05%) 1144063 ( 0.01%) 87.27
squid 3347 ( 0.01%) 2445450 ( 0.01%) 730.64
smtp 10 ( 0.00%) 1111 ( 0.00%) 111.10
dns 236 ( 0.00%) 60982 ( 0.00%) 258.40
bgp 101 ( 0.00%) 19026 ( 0.00%) 188.38
other 283498 ( 1.17%) 261376188 ( 1.37%) 921.97
udp6 66663 ( 0.28%) 31031434 ( 0.16%) 465.50
dns 36793 ( 0.15%) 8291075 ( 0.04%) 225.34
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
unreal 2 ( 0.00%) 215 ( 0.00%) 107.50
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
cuseeme 1 ( 0.00%) 108 ( 0.00%) 108.00
other 29864 ( 0.12%) 22739718 ( 0.12%) 761.44
icmp6 28985 ( 0.12%) 3894676 ( 0.02%) 134.37
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4272 ( 0.02%) 4564404 ( 0.02%) 1068.45
tcpdump file: 201204010900.dump.gz (554.50 MB)