Traffic Trace Info
DumpFile: 201204011100.dump
FileSize: 1923.62MB
Id: 201204011100
StartTime: Sun Apr 1 11:00:00 2012
EndTime: Sun Apr 1 11:15:00 2012
TotalTime: 899.85 seconds
TotalCapSize: 1519.01MB CapLen: 96 bytes
# of packets: 26515464 (19525.29MB)
AvgRate: 182.05Mbps stddev:29.79M
IP flow (unique src/dst pair) Information
# of flows: 2083482 (avg. 12.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 5.2% 4.1% 3.4% 2.9% 2.8% 2.0% 2.0% 1.9% 1.9%
IP address Information
# of IPv4 addresses: 1467286
Top 10 bandwidth usage (bytes/total in %):
23.9% 9.7% 9.6% 6.4% 6.0% 6.0% 5.4% 4.2% 3.6% 3.4%
# of IPv6 addresses: 4800
Top 10 bandwidth usage (bytes/total in %):
76.9% 10.6% 7.5% 6.6% 6.6% 6.5% 6.5% 6.4% 6.3% 6.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204011100.pktlen.png)
detailed numbers
[ 32- 63]: 5940126
[ 64- 127]: 5591386
[ 128- 255]: 943568
[ 256- 511]: 519068
[ 512- 1023]: 730683
[ 1024- 2047]: 12790633
Protocol Breakdown
![[protocol breakdown chart]](201204011100.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26515464 (100.00%) 20473749819 (100.00%) 772.14
ip 26254115 ( 99.01%) 20288994976 ( 99.10%) 772.79
tcp 20114852 ( 75.86%) 17900628111 ( 87.43%) 889.92
http(s) 8424881 ( 31.77%) 11637748137 ( 56.84%) 1381.35
http(c) 3470909 ( 13.09%) 904837388 ( 4.42%) 260.69
squid 26885 ( 0.10%) 19455828 ( 0.10%) 723.67
smtp 30575 ( 0.12%) 6856235 ( 0.03%) 224.24
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 7925 ( 0.03%) 728944 ( 0.00%) 91.98
pop3 3128 ( 0.01%) 928471 ( 0.00%) 296.83
imap 1940 ( 0.01%) 688491 ( 0.00%) 354.89
telnet 5608 ( 0.02%) 411181 ( 0.00%) 73.32
ssh 1231800 ( 4.65%) 1095385599 ( 5.35%) 889.26
dns 3503 ( 0.01%) 418898 ( 0.00%) 119.58
bgp 605 ( 0.00%) 102392 ( 0.00%) 169.24
napster 98 ( 0.00%) 6218 ( 0.00%) 63.45
realaud 34 ( 0.00%) 2094 ( 0.00%) 61.59
rtsp 7222 ( 0.03%) 9036525 ( 0.04%) 1251.25
icecast 632 ( 0.00%) 131044 ( 0.00%) 207.35
hotline 40 ( 0.00%) 2496 ( 0.00%) 62.40
other 6899066 ( 26.02%) 4223888110 ( 20.63%) 612.24
udp 2612339 ( 9.85%) 873529893 ( 4.27%) 334.39
dns 350433 ( 1.32%) 85386216 ( 0.42%) 243.66
realaud 5 ( 0.00%) 504 ( 0.00%) 100.80
halflif 17 ( 0.00%) 1677 ( 0.00%) 98.65
starcra 20 ( 0.00%) 1896 ( 0.00%) 94.80
everque 295 ( 0.00%) 120464 ( 0.00%) 408.35
unreal 45 ( 0.00%) 18748 ( 0.00%) 416.62
quake 6 ( 0.00%) 506 ( 0.00%) 84.33
other 2261253 ( 8.53%) 787944992 ( 3.85%) 348.46
icmp 1684394 ( 6.35%) 137455245 ( 0.67%) 81.61
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2893 ( 0.01%) 1019998 ( 0.00%) 352.57
ip6 1750420 ( 6.60%) 1337207237 ( 6.53%) 763.94
pim 249 ( 0.00%) 14940 ( 0.00%) 60.00
other 88784 ( 0.33%) 39120392 ( 0.19%) 440.62
frag 980 ( 0.00%) 849986 ( 0.00%) 867.33
ip6 261349 ( 0.99%) 184754843 ( 0.90%) 706.93
tcp6 189475 ( 0.71%) 171300365 ( 0.84%) 904.08
http(s) 13411 ( 0.05%) 17974256 ( 0.09%) 1340.26
http(c) 16416 ( 0.06%) 1780490 ( 0.01%) 108.46
squid 1498 ( 0.01%) 1385911 ( 0.01%) 925.17
smtp 102 ( 0.00%) 73847 ( 0.00%) 723.99
pop3 312 ( 0.00%) 410670 ( 0.00%) 1316.25
dns 238 ( 0.00%) 56588 ( 0.00%) 237.76
bgp 81 ( 0.00%) 13648 ( 0.00%) 168.49
other 157417 ( 0.59%) 149604955 ( 0.73%) 950.37
udp6 43246 ( 0.16%) 9184017 ( 0.04%) 212.37
dns 39101 ( 0.15%) 8683641 ( 0.04%) 222.08
realaud 1 ( 0.00%) 109 ( 0.00%) 109.00
quake 2 ( 0.00%) 211 ( 0.00%) 105.50
other 4142 ( 0.02%) 500056 ( 0.00%) 120.73
icmp6 28193 ( 0.11%) 3945730 ( 0.02%) 139.95
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 323 ( 0.00%) 309475 ( 0.00%) 958.13
tcpdump file: 201204011100.dump.gz (608.79 MB)