Traffic Trace Info
DumpFile: 201204010915.dump
FileSize: 1885.05MB
Id: 201204010915
StartTime: Sun Apr 1 09:15:00 2012
EndTime: Sun Apr 1 09:30:01 2012
TotalTime: 900.25 seconds
TotalCapSize: 1495.00MB CapLen: 96 bytes
# of packets: 25561554 (19937.82MB)
AvgRate: 185.76Mbps stddev:48.38M
IP flow (unique src/dst pair) Information
# of flows: 1979361 (avg. 12.91 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.7% 5.8% 5.0% 4.4% 3.5% 2.8% 2.6% 2.3% 2.2% 2.2%
IP address Information
# of IPv4 addresses: 1471134
Top 10 bandwidth usage (bytes/total in %):
24.5% 13.6% 10.6% 7.7% 6.9% 6.1% 5.2% 4.6% 4.0% 3.7%
# of IPv6 addresses: 4448
Top 10 bandwidth usage (bytes/total in %):
45.8% 15.9% 12.8% 12.8% 8.8% 8.0% 4.1% 3.8% 2.9% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010915.pktlen.png)
detailed numbers
[ 32- 63]: 4316138
[ 64- 127]: 6214876
[ 128- 255]: 782387
[ 256- 511]: 496713
[ 512- 1023]: 661888
[ 1024- 2047]: 13089552
Protocol Breakdown
![[protocol breakdown chart]](201204010915.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25561554 (100.00%) 20906317419 (100.00%) 817.88
ip 25142523 ( 98.36%) 20568635205 ( 98.38%) 818.08
tcp 20153883 ( 78.84%) 19202681129 ( 91.85%) 952.80
http(s) 8173929 ( 31.98%) 11316006883 ( 54.13%) 1384.40
http(c) 3299927 ( 12.91%) 847546636 ( 4.05%) 256.84
squid 28606 ( 0.11%) 18875513 ( 0.09%) 659.84
smtp 33957 ( 0.13%) 4780176 ( 0.02%) 140.77
nntp 4 ( 0.00%) 248 ( 0.00%) 62.00
ftp 8897 ( 0.03%) 861440 ( 0.00%) 96.82
pop3 8049 ( 0.03%) 821715 ( 0.00%) 102.09
imap 4696 ( 0.02%) 2207649 ( 0.01%) 470.11
telnet 7001 ( 0.03%) 506916 ( 0.00%) 72.41
ssh 1375433 ( 5.38%) 1251401769 ( 5.99%) 909.82
dns 3249 ( 0.01%) 337898 ( 0.00%) 104.00
bgp 633 ( 0.00%) 109672 ( 0.00%) 173.26
napster 1761 ( 0.01%) 109728 ( 0.00%) 62.31
realaud 21 ( 0.00%) 1775 ( 0.00%) 84.52
rtsp 2178 ( 0.01%) 1570612 ( 0.01%) 721.13
icecast 15503 ( 0.06%) 15303441 ( 0.07%) 987.13
hotline 3 ( 0.00%) 184 ( 0.00%) 61.33
other 7190036 ( 28.13%) 5742238874 ( 27.47%) 798.64
udp 1858609 ( 7.27%) 491257953 ( 2.35%) 264.31
dns 357864 ( 1.40%) 99718736 ( 0.48%) 278.65
rip 1 ( 0.00%) 72 ( 0.00%) 72.00
realaud 1 ( 0.00%) 94 ( 0.00%) 94.00
halflif 355 ( 0.00%) 28627 ( 0.00%) 80.64
starcra 32 ( 0.00%) 2542 ( 0.00%) 79.44
everque 194 ( 0.00%) 57235 ( 0.00%) 295.03
unreal 145 ( 0.00%) 54931 ( 0.00%) 378.83
quake 8 ( 0.00%) 957 ( 0.00%) 119.62
other 1499358 ( 5.87%) 391144519 ( 1.87%) 260.87
icmp 1954439 ( 7.65%) 213458363 ( 1.02%) 109.22
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2922 ( 0.01%) 1004716 ( 0.00%) 343.85
ip6 1095076 ( 4.28%) 629064080 ( 3.01%) 574.45
pim 297 ( 0.00%) 17820 ( 0.00%) 60.00
other 77112 ( 0.30%) 31131874 ( 0.15%) 403.72
frag 4154 ( 0.02%) 4102429 ( 0.02%) 987.59
ip6 419031 ( 1.64%) 337682214 ( 1.62%) 805.86
tcp6 329344 ( 1.29%) 302460068 ( 1.45%) 918.37
http(s) 12182 ( 0.05%) 16221365 ( 0.08%) 1331.58
http(c) 23856 ( 0.09%) 2124078 ( 0.01%) 89.04
squid 494 ( 0.00%) 421404 ( 0.00%) 853.04
smtp 56 ( 0.00%) 12556 ( 0.00%) 224.21
dns 124 ( 0.00%) 19356 ( 0.00%) 156.10
bgp 88 ( 0.00%) 14553 ( 0.00%) 165.38
realaud 3 ( 0.00%) 254 ( 0.00%) 84.67
other 292541 ( 1.14%) 283646502 ( 1.36%) 969.60
udp6 59640 ( 0.23%) 30279575 ( 0.14%) 507.71
dns 33761 ( 0.13%) 7398834 ( 0.04%) 219.15
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 25877 ( 0.10%) 22880528 ( 0.11%) 884.20
icmp6 28942 ( 0.11%) 3959187 ( 0.02%) 136.80
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 992 ( 0.00%) 967992 ( 0.00%) 975.80
tcpdump file: 201204010915.dump.gz (577.64 MB)