Traffic Trace Info
DumpFile: 201204011045.dump
FileSize: 1696.88MB
Id: 201204011045
StartTime: Sun Apr 1 10:45:00 2012
EndTime: Sun Apr 1 10:59:57 2012
TotalTime: 896.78 seconds
TotalCapSize: 1340.87MB CapLen: 96 bytes
# of packets: 23330317 (16869.57MB)
AvgRate: 157.79Mbps stddev:28.63M
IP flow (unique src/dst pair) Information
# of flows: 1875905 (avg. 12.44 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 4.7% 4.1% 4.1% 3.2% 3.1% 2.9% 2.8% 2.7% 1.6%
IP address Information
# of IPv4 addresses: 1446606
Top 10 bandwidth usage (bytes/total in %):
17.8% 11.8% 9.5% 7.3% 6.9% 6.6% 4.9% 4.3% 4.2% 4.1%
# of IPv6 addresses: 4697
Top 10 bandwidth usage (bytes/total in %):
63.6% 23.6% 5.6% 5.6% 5.3% 5.3% 5.2% 5.2% 5.1% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204011045.pktlen.png)
detailed numbers
[ 32- 63]: 5078381
[ 64- 127]: 5228286
[ 128- 255]: 868419
[ 256- 511]: 504261
[ 512- 1023]: 634308
[ 1024- 2047]: 11016662
Protocol Breakdown
![[protocol breakdown chart]](201204011045.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23330317 (100.00%) 17689022851 (100.00%) 758.20
ip 23028176 ( 98.70%) 17468381757 ( 98.75%) 758.57
tcp 17512180 ( 75.06%) 15408599382 ( 87.11%) 879.88
http(s) 6569465 ( 28.16%) 8987382201 ( 50.81%) 1368.05
http(c) 2931307 ( 12.56%) 831349144 ( 4.70%) 283.61
squid 32868 ( 0.14%) 23540574 ( 0.13%) 716.22
smtp 31830 ( 0.14%) 6234778 ( 0.04%) 195.88
nntp 20 ( 0.00%) 1242 ( 0.00%) 62.10
ftp 6638 ( 0.03%) 632737 ( 0.00%) 95.32
pop3 1619 ( 0.01%) 342492 ( 0.00%) 211.55
imap 1273 ( 0.01%) 114976 ( 0.00%) 90.32
telnet 72548 ( 0.31%) 5296745 ( 0.03%) 73.01
ssh 1384844 ( 5.94%) 1209167981 ( 6.84%) 873.14
dns 3264 ( 0.01%) 325731 ( 0.00%) 99.80
bgp 614 ( 0.00%) 101407 ( 0.00%) 165.16
napster 94 ( 0.00%) 6022 ( 0.00%) 64.06
realaud 23 ( 0.00%) 1422 ( 0.00%) 61.83
rtsp 2190 ( 0.01%) 1577863 ( 0.01%) 720.49
icecast 743 ( 0.00%) 87555 ( 0.00%) 117.84
hotline 26 ( 0.00%) 1574 ( 0.00%) 60.54
other 6472813 ( 27.74%) 4342434878 ( 24.55%) 670.87
udp 2308527 ( 9.89%) 708537037 ( 4.01%) 306.92
dns 307720 ( 1.32%) 79574153 ( 0.45%) 258.59
realaud 2 ( 0.00%) 157 ( 0.00%) 78.50
halflif 37 ( 0.00%) 3710 ( 0.00%) 100.27
starcra 26 ( 0.00%) 2470 ( 0.00%) 95.00
everque 200 ( 0.00%) 47814 ( 0.00%) 239.07
unreal 79 ( 0.00%) 47640 ( 0.00%) 603.04
quake 3 ( 0.00%) 295 ( 0.00%) 98.33
cuseeme 1 ( 0.00%) 93 ( 0.00%) 93.00
other 2000132 ( 8.57%) 628797108 ( 3.55%) 314.38
icmp 1626458 ( 6.97%) 133019801 ( 0.75%) 81.78
ipip 183 ( 0.00%) 19062 ( 0.00%) 104.16
ipsec 2913 ( 0.01%) 1035526 ( 0.01%) 355.48
ip6 1488001 ( 6.38%) 1179839145 ( 6.67%) 792.90
pim 330 ( 0.00%) 19800 ( 0.00%) 60.00
other 89584 ( 0.38%) 37312004 ( 0.21%) 416.50
frag 1271 ( 0.01%) 1119046 ( 0.01%) 880.45
ip6 302141 ( 1.30%) 220641094 ( 1.25%) 730.26
tcp6 232717 ( 1.00%) 207273711 ( 1.17%) 890.67
http(s) 6366 ( 0.03%) 6394732 ( 0.04%) 1004.51
http(c) 11847 ( 0.05%) 1382025 ( 0.01%) 116.66
squid 6 ( 0.00%) 1185 ( 0.00%) 197.50
smtp 437 ( 0.00%) 169068 ( 0.00%) 386.88
dns 360 ( 0.00%) 237273 ( 0.00%) 659.09
bgp 88 ( 0.00%) 15193 ( 0.00%) 172.65
other 213613 ( 0.92%) 199074235 ( 1.13%) 931.94
udp6 38787 ( 0.17%) 8514844 ( 0.05%) 219.53
dns 35681 ( 0.15%) 8115760 ( 0.05%) 227.45
realaud 1 ( 0.00%) 105 ( 0.00%) 105.00
everque 2 ( 0.00%) 220 ( 0.00%) 110.00
other 3103 ( 0.01%) 398759 ( 0.00%) 128.51
icmp6 29782 ( 0.13%) 4029824 ( 0.02%) 135.31
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 741 ( 0.00%) 807223 ( 0.00%) 1089.37
tcpdump file: 201204011045.dump.gz (535.71 MB)