Traffic Trace Info
DumpFile: 201204010945.dump
FileSize: 1915.42MB
Id: 201204010945
StartTime: Sun Apr 1 09:45:00 2012
EndTime: Sun Apr 1 10:00:00 2012
TotalTime: 900.19 seconds
TotalCapSize: 1530.10MB CapLen: 96 bytes
# of packets: 25251962 (20494.13MB)
AvgRate: 191.03Mbps stddev:39.75M
IP flow (unique src/dst pair) Information
# of flows: 1794808 (avg. 14.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
18.8% 6.0% 3.8% 3.1% 2.6% 2.1% 1.8% 1.7% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 1384508
Top 10 bandwidth usage (bytes/total in %):
12.5% 10.2% 9.9% 9.4% 8.8% 7.7% 7.4% 5.0% 4.8% 3.9%
# of IPv6 addresses: 4594
Top 10 bandwidth usage (bytes/total in %):
93.8% 93.7% 3.6% 1.8% 0.4% 0.3% 0.3% 0.2% 0.2% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010945.pktlen.png)
detailed numbers
[ 32- 63]: 4514728
[ 64- 127]: 5021087
[ 128- 255]: 832698
[ 256- 511]: 481094
[ 512- 1023]: 617488
[ 1024- 2047]: 13784867
Protocol Breakdown
![[protocol breakdown chart]](201204010945.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25251962 (100.00%) 21489648852 (100.00%) 851.01
ip 22080634 ( 87.44%) 17174285853 ( 79.92%) 777.80
tcp 16165905 ( 64.02%) 14547465998 ( 67.70%) 899.89
http(s) 5231949 ( 20.72%) 7081156538 ( 32.95%) 1353.45
http(c) 2756855 ( 10.92%) 800849816 ( 3.73%) 290.49
squid 36181 ( 0.14%) 15079800 ( 0.07%) 416.79
smtp 52609 ( 0.21%) 20486172 ( 0.10%) 389.40
nntp 18 ( 0.00%) 1114 ( 0.00%) 61.89
ftp 10632 ( 0.04%) 1057893 ( 0.00%) 99.50
pop3 1861 ( 0.01%) 394791 ( 0.00%) 212.14
imap 1231 ( 0.00%) 260330 ( 0.00%) 211.48
telnet 21954 ( 0.09%) 1620445 ( 0.01%) 73.81
ssh 1474161 ( 5.84%) 1329351556 ( 6.19%) 901.77
dns 3175 ( 0.01%) 325919 ( 0.00%) 102.65
bgp 619 ( 0.00%) 105721 ( 0.00%) 170.79
napster 468 ( 0.00%) 29344 ( 0.00%) 62.70
realaud 20 ( 0.00%) 1230 ( 0.00%) 61.50
rtsp 2199 ( 0.01%) 1585024 ( 0.01%) 720.79
icecast 5245 ( 0.02%) 3106067 ( 0.01%) 592.20
hotline 6 ( 0.00%) 366 ( 0.00%) 61.00
other 6566722 ( 26.00%) 5292053872 ( 24.63%) 805.89
udp 2140134 ( 8.48%) 674304028 ( 3.14%) 315.08
dns 310012 ( 1.23%) 82546995 ( 0.38%) 266.27
realaud 5 ( 0.00%) 1042 ( 0.00%) 208.40
halflif 71 ( 0.00%) 34615 ( 0.00%) 487.54
starcra 45 ( 0.00%) 3938 ( 0.00%) 87.51
everque 258 ( 0.00%) 59228 ( 0.00%) 229.57
unreal 135 ( 0.00%) 78175 ( 0.00%) 579.07
quake 15 ( 0.00%) 1343 ( 0.00%) 89.53
cuseeme 6 ( 0.00%) 509 ( 0.00%) 84.83
other 1829515 ( 7.25%) 591552791 ( 2.75%) 323.34
icmp 1730165 ( 6.85%) 199794216 ( 0.93%) 115.48
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2932 ( 0.01%) 1033016 ( 0.00%) 352.32
ip6 1957112 ( 7.75%) 1717182293 ( 7.99%) 877.41
pim 292 ( 0.00%) 17520 ( 0.00%) 60.00
other 83909 ( 0.33%) 34469512 ( 0.16%) 410.80
frag 397 ( 0.00%) 380542 ( 0.00%) 958.54
ip6 3171328 ( 12.56%) 4315362999 ( 20.08%) 1360.74
tcp6 3099661 ( 12.27%) 4299938149 ( 20.01%) 1387.23
http(s) 15575 ( 0.06%) 20809472 ( 0.10%) 1336.08
http(c) 13359 ( 0.05%) 1246049 ( 0.01%) 93.27
smtp 32 ( 0.00%) 24173 ( 0.00%) 755.41
dns 172 ( 0.00%) 30382 ( 0.00%) 176.64
bgp 86 ( 0.00%) 12368 ( 0.00%) 143.81
other 3070437 ( 12.16%) 4277815705 ( 19.91%) 1393.23
udp6 42728 ( 0.17%) 11152499 ( 0.05%) 261.01
dns 33842 ( 0.13%) 7441327 ( 0.03%) 219.88
halflif 1 ( 0.00%) 97 ( 0.00%) 97.00
everque 1 ( 0.00%) 114 ( 0.00%) 114.00
unreal 1 ( 0.00%) 107 ( 0.00%) 107.00
other 8883 ( 0.04%) 3710854 ( 0.02%) 417.75
icmp6 28508 ( 0.11%) 3931587 ( 0.02%) 137.91
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 318 ( 0.00%) 325390 ( 0.00%) 1023.24
tcpdump file: 201204010945.dump.gz (550.64 MB)