Traffic Trace Info
DumpFile: 201204011015.dump
FileSize: 1619.86MB
Id: 201204011015
StartTime: Sun Apr 1 10:15:00 2012
EndTime: Sun Apr 1 10:30:00 2012
TotalTime: 899.99 seconds
TotalCapSize: 1279.67MB CapLen: 96 bytes
# of packets: 22294260 (17043.55MB)
AvgRate: 158.87Mbps stddev:36.04M
IP flow (unique src/dst pair) Information
# of flows: 1734670 (avg. 12.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.0% 4.6% 3.3% 3.2% 3.1% 3.1% 2.6% 2.0% 1.7% 1.7%
IP address Information
# of IPv4 addresses: 1377408
Top 10 bandwidth usage (bytes/total in %):
14.3% 12.1% 11.3% 7.3% 6.6% 6.1% 5.8% 5.1% 4.8% 4.4%
# of IPv6 addresses: 4603
Top 10 bandwidth usage (bytes/total in %):
53.6% 21.3% 14.8% 14.8% 5.0% 4.1% 3.5% 3.4% 3.3% 3.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204011015.pktlen.png)
detailed numbers
[ 32- 63]: 4078516
[ 64- 127]: 5088652
[ 128- 255]: 794027
[ 256- 511]: 505696
[ 512- 1023]: 606970
[ 1024- 2047]: 11220399
Protocol Breakdown
![[protocol breakdown chart]](201204011015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22294260 (100.00%) 17871459541 (100.00%) 801.62
ip 21935867 ( 98.39%) 17578540633 ( 98.36%) 801.36
tcp 16471897 ( 73.88%) 15645894190 ( 87.55%) 949.85
http(s) 6197829 ( 27.80%) 8512707595 ( 47.63%) 1373.50
http(c) 2753616 ( 12.35%) 867601499 ( 4.85%) 315.08
squid 27497 ( 0.12%) 19535998 ( 0.11%) 710.48
smtp 30291 ( 0.14%) 6304353 ( 0.04%) 208.13
ftp 7215 ( 0.03%) 704137 ( 0.00%) 97.59
pop3 1684 ( 0.01%) 384984 ( 0.00%) 228.61
imap 1497 ( 0.01%) 315484 ( 0.00%) 210.74
telnet 23558 ( 0.11%) 1735181 ( 0.01%) 73.66
ssh 1415832 ( 6.35%) 1289928296 ( 7.22%) 911.07
dns 3436 ( 0.02%) 345976 ( 0.00%) 100.69
bgp 643 ( 0.00%) 114959 ( 0.00%) 178.79
napster 118 ( 0.00%) 7573 ( 0.00%) 64.18
realaud 4 ( 0.00%) 266 ( 0.00%) 66.50
rtsp 2200 ( 0.01%) 1587090 ( 0.01%) 721.40
icecast 951 ( 0.00%) 98715 ( 0.00%) 103.80
hotline 6 ( 0.00%) 414 ( 0.00%) 69.00
other 6005520 ( 26.94%) 4944521670 ( 27.67%) 823.33
udp 2250894 ( 10.10%) 611423028 ( 3.42%) 271.64
dns 337506 ( 1.51%) 86113910 ( 0.48%) 255.15
realaud 5 ( 0.00%) 779 ( 0.00%) 155.80
halflif 14 ( 0.00%) 1107 ( 0.00%) 79.07
starcra 36 ( 0.00%) 2610 ( 0.00%) 72.50
everque 194 ( 0.00%) 41473 ( 0.00%) 213.78
unreal 15 ( 0.00%) 1932 ( 0.00%) 128.80
quake 11 ( 0.00%) 1085 ( 0.00%) 98.64
other 1912892 ( 8.58%) 525196705 ( 2.94%) 274.56
icmp 1711579 ( 7.68%) 183256001 ( 1.03%) 107.07
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2801 ( 0.01%) 963206 ( 0.01%) 343.88
ip6 1410716 ( 6.33%) 1100540277 ( 6.16%) 780.13
pim 281 ( 0.00%) 16860 ( 0.00%) 60.00
other 87514 ( 0.39%) 36427801 ( 0.20%) 416.25
frag 897 ( 0.00%) 822479 ( 0.00%) 916.92
ip6 358393 ( 1.61%) 292918908 ( 1.64%) 817.31
tcp6 289388 ( 1.30%) 279656716 ( 1.56%) 966.37
http(s) 4974 ( 0.02%) 5471568 ( 0.03%) 1100.03
http(c) 10697 ( 0.05%) 973457 ( 0.01%) 91.00
smtp 458 ( 0.00%) 193702 ( 0.00%) 422.93
dns 282 ( 0.00%) 163648 ( 0.00%) 580.31
bgp 84 ( 0.00%) 11477 ( 0.00%) 136.63
other 272893 ( 1.22%) 272842864 ( 1.53%) 999.82
udp6 40003 ( 0.18%) 8662878 ( 0.05%) 216.56
dns 36348 ( 0.16%) 8160724 ( 0.05%) 224.52
everque 3 ( 0.00%) 313 ( 0.00%) 104.33
quake 2 ( 0.00%) 212 ( 0.00%) 106.00
other 3650 ( 0.02%) 501629 ( 0.00%) 137.43
icmp6 28303 ( 0.13%) 3947084 ( 0.02%) 139.46
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 585 ( 0.00%) 636738 ( 0.00%) 1088.44
tcpdump file: 201204011015.dump.gz (505.89 MB)