Traffic Trace Info
DumpFile: 201204011030.dump
FileSize: 1521.72MB
Id: 201204011030
StartTime: Sun Apr 1 10:30:00 2012
EndTime: Sun Apr 1 10:45:00 2012
TotalTime: 900.17 seconds
TotalCapSize: 1201.74MB CapLen: 96 bytes
# of packets: 20969854 (15124.12MB)
AvgRate: 140.94Mbps stddev:23.53M
IP flow (unique src/dst pair) Information
# of flows: 1704927 (avg. 12.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.4% 5.3% 4.6% 3.9% 3.6% 2.3% 1.9% 1.8% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 1350974
Top 10 bandwidth usage (bytes/total in %):
14.5% 13.2% 12.4% 7.7% 6.2% 5.5% 5.5% 5.3% 4.7% 4.0%
# of IPv6 addresses: 4590
Top 10 bandwidth usage (bytes/total in %):
62.8% 27.3% 5.8% 4.2% 4.2% 4.1% 4.0% 4.0% 3.7% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204011030.pktlen.png)
detailed numbers
[ 32- 63]: 3985169
[ 64- 127]: 5199356
[ 128- 255]: 833057
[ 256- 511]: 522918
[ 512- 1023]: 586170
[ 1024- 2047]: 9843184
Protocol Breakdown
![[protocol breakdown chart]](201204011030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20969854 (100.00%) 15858786147 (100.00%) 756.27
ip 20633293 ( 98.40%) 15611869220 ( 98.44%) 756.63
tcp 15114313 ( 72.08%) 13768276546 ( 86.82%) 910.94
http(s) 5768940 ( 27.51%) 7877655484 ( 49.67%) 1365.53
http(c) 2862321 ( 13.65%) 861710186 ( 5.43%) 301.05
squid 61883 ( 0.30%) 21295164 ( 0.13%) 344.12
smtp 30659 ( 0.15%) 5631228 ( 0.04%) 183.67
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 6314 ( 0.03%) 625312 ( 0.00%) 99.04
pop3 2082 ( 0.01%) 580832 ( 0.00%) 278.98
imap 1780 ( 0.01%) 245507 ( 0.00%) 137.93
telnet 12176 ( 0.06%) 897257 ( 0.01%) 73.69
ssh 1301218 ( 6.21%) 1205482057 ( 7.60%) 926.43
dns 3519 ( 0.02%) 357129 ( 0.00%) 101.49
bgp 640 ( 0.00%) 121900 ( 0.00%) 190.47
napster 50 ( 0.00%) 3230 ( 0.00%) 64.60
realaud 19 ( 0.00%) 1188 ( 0.00%) 62.53
rtsp 2212 ( 0.01%) 1595768 ( 0.01%) 721.41
icecast 982 ( 0.00%) 167823 ( 0.00%) 170.90
hotline 25 ( 0.00%) 2640 ( 0.00%) 105.60
other 5059481 ( 24.13%) 3791903093 ( 23.91%) 749.46
udp 2354006 ( 11.23%) 658431543 ( 4.15%) 279.71
dns 338331 ( 1.61%) 85818414 ( 0.54%) 253.65
realaud 7 ( 0.00%) 644 ( 0.00%) 92.00
halflif 13 ( 0.00%) 1056 ( 0.00%) 81.23
starcra 39 ( 0.00%) 3089 ( 0.00%) 79.21
everque 217 ( 0.00%) 67333 ( 0.00%) 310.29
unreal 2 ( 0.00%) 278 ( 0.00%) 139.00
quake 9 ( 0.00%) 980 ( 0.00%) 108.89
other 2015067 ( 9.61%) 572410273 ( 3.61%) 284.07
icmp 1672977 ( 7.98%) 152533514 ( 0.96%) 91.17
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2918 ( 0.01%) 1033444 ( 0.01%) 354.16
ip6 1401018 ( 6.68%) 992287258 ( 6.26%) 708.26
pim 263 ( 0.00%) 15780 ( 0.00%) 60.00
other 87613 ( 0.42%) 39271865 ( 0.25%) 448.24
frag 1452 ( 0.01%) 1493393 ( 0.01%) 1028.51
ip6 336561 ( 1.60%) 246916927 ( 1.56%) 733.65
tcp6 264831 ( 1.26%) 231985786 ( 1.46%) 875.98
http(s) 5555 ( 0.03%) 6920859 ( 0.04%) 1245.88
http(c) 12610 ( 0.06%) 1140628 ( 0.01%) 90.45
smtp 741 ( 0.00%) 234603 ( 0.00%) 316.60
dns 1086 ( 0.01%) 752588 ( 0.00%) 692.99
bgp 86 ( 0.00%) 12520 ( 0.00%) 145.58
icecast 3 ( 0.00%) 222 ( 0.00%) 74.00
other 244750 ( 1.17%) 222924366 ( 1.41%) 910.82
udp6 40592 ( 0.19%) 8860184 ( 0.06%) 218.27
dns 36945 ( 0.18%) 8441792 ( 0.05%) 228.50
everque 2 ( 0.00%) 220 ( 0.00%) 110.00
quake 1 ( 0.00%) 117 ( 0.00%) 117.00
other 3644 ( 0.02%) 418055 ( 0.00%) 114.72
icmp6 29218 ( 0.14%) 4026913 ( 0.03%) 137.82
ip6 87 ( 0.00%) 11816 ( 0.00%) 135.82
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1802 ( 0.01%) 2028012 ( 0.01%) 1125.42
tcpdump file: 201204011030.dump.gz (483.80 MB)