Traffic Trace Info
DumpFile: 201204011130.dump
FileSize: 1801.21MB
Id: 201204011130
StartTime: Sun Apr 1 11:30:01 2012
EndTime: Sun Apr 1 11:45:00 2012
TotalTime: 899.19 seconds
TotalCapSize: 1425.86MB CapLen: 96 bytes
# of packets: 24598488 (18667.65MB)
AvgRate: 174.16Mbps stddev:25.99M
IP flow (unique src/dst pair) Information
# of flows: 1800032 (avg. 13.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 4.4% 4.0% 3.5% 2.8% 1.8% 1.5% 1.4% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 1406863
Top 10 bandwidth usage (bytes/total in %):
19.3% 11.1% 10.1% 8.6% 6.5% 5.8% 4.6% 4.1% 3.7% 3.6%
# of IPv6 addresses: 4615
Top 10 bandwidth usage (bytes/total in %):
84.7% 8.4% 7.3% 7.3% 7.2% 7.0% 6.9% 6.8% 6.0% 6.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204011130.pktlen.png)
detailed numbers
[ 32- 63]: 4205458
[ 64- 127]: 6062008
[ 128- 255]: 900835
[ 256- 511]: 522621
[ 512- 1023]: 659974
[ 1024- 2047]: 12247592
Protocol Breakdown
![[protocol breakdown chart]](201204011130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24598488 (100.00%) 19574447593 (100.00%) 795.76
ip 24358662 ( 99.03%) 19407841920 ( 99.15%) 796.75
tcp 18215673 ( 74.05%) 17095235325 ( 87.33%) 938.49
http(s) 8900297 ( 36.18%) 12294191385 ( 62.81%) 1381.32
http(c) 3570985 ( 14.52%) 851840379 ( 4.35%) 238.54
squid 24800 ( 0.10%) 17256592 ( 0.09%) 695.83
smtp 30615 ( 0.12%) 5856950 ( 0.03%) 191.31
nntp 7 ( 0.00%) 434 ( 0.00%) 62.00
ftp 6167 ( 0.03%) 607311 ( 0.00%) 98.48
pop3 2026 ( 0.01%) 631159 ( 0.00%) 311.53
imap 3927 ( 0.02%) 1986585 ( 0.01%) 505.88
telnet 6963 ( 0.03%) 507625 ( 0.00%) 72.90
ssh 1372588 ( 5.58%) 1258634851 ( 6.43%) 916.98
dns 3386 ( 0.01%) 340697 ( 0.00%) 100.62
bgp 621 ( 0.00%) 96389 ( 0.00%) 155.22
napster 96 ( 0.00%) 6307 ( 0.00%) 65.70
realaud 13 ( 0.00%) 792 ( 0.00%) 60.92
rtsp 21532 ( 0.09%) 30233055 ( 0.15%) 1404.10
icecast 763 ( 0.00%) 140878 ( 0.00%) 184.64
hotline 29 ( 0.00%) 1796 ( 0.00%) 61.93
other 4270858 ( 17.36%) 2632902140 ( 13.45%) 616.48
udp 2788248 ( 11.34%) 972417817 ( 4.97%) 348.76
dns 357548 ( 1.45%) 89059345 ( 0.45%) 249.08
rip 1 ( 0.00%) 238 ( 0.00%) 238.00
realaud 7 ( 0.00%) 640 ( 0.00%) 91.43
halflif 122 ( 0.00%) 17737 ( 0.00%) 145.39
starcra 31 ( 0.00%) 2700 ( 0.00%) 87.10
everque 271 ( 0.00%) 61586 ( 0.00%) 227.25
unreal 32 ( 0.00%) 3712 ( 0.00%) 116.00
quake 1 ( 0.00%) 72 ( 0.00%) 72.00
cuseeme 4 ( 0.00%) 628 ( 0.00%) 157.00
other 2430075 ( 9.88%) 883218172 ( 4.51%) 363.45
icmp 1803973 ( 7.33%) 144534983 ( 0.74%) 80.12
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2847 ( 0.01%) 1015098 ( 0.01%) 356.55
ip6 1458448 ( 5.93%) 1154891033 ( 5.90%) 791.86
pim 387 ( 0.00%) 23220 ( 0.00%) 60.00
other 88902 ( 0.36%) 39705284 ( 0.20%) 446.62
frag 685 ( 0.00%) 659209 ( 0.00%) 962.35
ip6 239826 ( 0.97%) 166605673 ( 0.85%) 694.69
tcp6 171739 ( 0.70%) 153340192 ( 0.78%) 892.87
http(s) 3777 ( 0.02%) 4135709 ( 0.02%) 1094.97
http(c) 11617 ( 0.05%) 1010205 ( 0.01%) 86.96
smtp 133 ( 0.00%) 73392 ( 0.00%) 551.82
ftp 49 ( 0.00%) 4392 ( 0.00%) 89.63
dns 259 ( 0.00%) 54180 ( 0.00%) 209.19
bgp 85 ( 0.00%) 11944 ( 0.00%) 140.52
other 155819 ( 0.63%) 148050370 ( 0.76%) 950.14
udp6 39555 ( 0.16%) 8990312 ( 0.05%) 227.29
dns 37542 ( 0.15%) 8684106 ( 0.04%) 231.32
starcra 1 ( 0.00%) 101 ( 0.00%) 101.00
unreal 1 ( 0.00%) 118 ( 0.00%) 118.00
quake 1 ( 0.00%) 113 ( 0.00%) 113.00
other 2010 ( 0.01%) 305874 ( 0.00%) 152.18
icmp6 28081 ( 0.11%) 3926870 ( 0.02%) 139.84
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 337 ( 0.00%) 332807 ( 0.00%) 987.56
tcpdump file: 201204011130.dump.gz (575.53 MB)