Traffic Trace Info
DumpFile: 201204011000.dump
FileSize: 1526.82MB
Id: 201204011000
StartTime: Sun Apr 1 10:00:00 2012
EndTime: Sun Apr 1 10:15:00 2012
TotalTime: 900.22 seconds
TotalCapSize: 1209.69MB CapLen: 96 bytes
# of packets: 20783132 (15691.67MB)
AvgRate: 146.21Mbps stddev:36.78M
IP flow (unique src/dst pair) Information
# of flows: 1738892 (avg. 11.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.8% 4.9% 3.5% 3.4% 2.3% 2.3% 2.2% 2.1% 2.1% 1.8%
IP address Information
# of IPv4 addresses: 1366506
Top 10 bandwidth usage (bytes/total in %):
18.7% 13.3% 9.9% 9.3% 9.0% 8.2% 5.1% 4.6% 3.5% 3.5%
# of IPv6 addresses: 4696
Top 10 bandwidth usage (bytes/total in %):
63.6% 25.1% 5.9% 4.0% 4.0% 3.9% 3.8% 3.7% 3.7% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204011000.pktlen.png)
detailed numbers
[ 32- 63]: 3652634
[ 64- 127]: 4860895
[ 128- 255]: 824368
[ 256- 511]: 466377
[ 512- 1023]: 667908
[ 1024- 2047]: 10310950
Protocol Breakdown
![[protocol breakdown chart]](201204011000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20783132 (100.00%) 16453913049 (100.00%) 791.70
ip 20451471 ( 98.40%) 16208485541 ( 98.51%) 792.53
tcp 14589459 ( 70.20%) 13716432071 ( 83.36%) 940.16
http(s) 5449544 ( 26.22%) 7349313865 ( 44.67%) 1348.61
http(c) 2271219 ( 10.93%) 768743536 ( 4.67%) 338.47
squid 35140 ( 0.17%) 28395055 ( 0.17%) 808.06
smtp 29010 ( 0.14%) 5348871 ( 0.03%) 184.38
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 6705 ( 0.03%) 662875 ( 0.00%) 98.86
pop3 2554 ( 0.01%) 1227827 ( 0.01%) 480.75
imap 2536 ( 0.01%) 1220484 ( 0.01%) 481.26
telnet 46642 ( 0.22%) 3515639 ( 0.02%) 75.37
ssh 1448735 ( 6.97%) 1331050385 ( 8.09%) 918.77
dns 3698 ( 0.02%) 380304 ( 0.00%) 102.84
bgp 647 ( 0.00%) 126345 ( 0.00%) 195.28
napster 206 ( 0.00%) 12894 ( 0.00%) 62.59
realaud 16 ( 0.00%) 996 ( 0.00%) 62.25
rtsp 2193 ( 0.01%) 1583192 ( 0.01%) 721.93
icecast 4635 ( 0.02%) 2577846 ( 0.02%) 556.17
other 5285973 ( 25.43%) 4222271591 ( 25.66%) 798.77
udp 2180647 ( 10.49%) 614538158 ( 3.73%) 281.81
dns 349573 ( 1.68%) 87024361 ( 0.53%) 248.94
realaud 8 ( 0.00%) 1174 ( 0.00%) 146.75
halflif 38 ( 0.00%) 16707 ( 0.00%) 439.66
starcra 49 ( 0.00%) 3661 ( 0.00%) 74.71
everque 230 ( 0.00%) 66209 ( 0.00%) 287.87
unreal 48 ( 0.00%) 18175 ( 0.00%) 378.65
quake 7 ( 0.00%) 748 ( 0.00%) 106.86
cuseeme 3 ( 0.00%) 553 ( 0.00%) 184.33
other 1830573 ( 8.81%) 527364727 ( 3.21%) 288.09
icmp 1754749 ( 8.44%) 193179812 ( 1.17%) 110.09
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2704 ( 0.01%) 917024 ( 0.01%) 339.14
ip6 1831646 ( 8.81%) 1645084406 ( 10.00%) 898.15
pim 305 ( 0.00%) 18300 ( 0.00%) 60.00
other 91776 ( 0.44%) 38296500 ( 0.23%) 417.28
frag 772 ( 0.00%) 789045 ( 0.00%) 1022.08
ip6 331661 ( 1.60%) 245427508 ( 1.49%) 740.00
tcp6 259564 ( 1.25%) 229516832 ( 1.39%) 884.24
http(s) 3609 ( 0.02%) 3403248 ( 0.02%) 942.99
http(c) 16885 ( 0.08%) 1429841 ( 0.01%) 84.68
smtp 18 ( 0.00%) 4041 ( 0.00%) 224.50
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 270 ( 0.00%) 80962 ( 0.00%) 299.86
bgp 89 ( 0.00%) 12959 ( 0.00%) 145.61
other 238676 ( 1.15%) 224584176 ( 1.36%) 940.96
udp6 43115 ( 0.21%) 11611890 ( 0.07%) 269.32
dns 35990 ( 0.17%) 8253230 ( 0.05%) 229.32
realaud 1 ( 0.00%) 118 ( 0.00%) 118.00
halflif 1 ( 0.00%) 103 ( 0.00%) 103.00
cuseeme 1 ( 0.00%) 113 ( 0.00%) 113.00
other 7122 ( 0.03%) 3358326 ( 0.02%) 471.54
icmp6 28533 ( 0.14%) 3951782 ( 0.02%) 138.50
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 335 ( 0.00%) 331494 ( 0.00%) 989.53
tcpdump file: 201204011000.dump.gz (479.05 MB)