Traffic Trace Info
DumpFile: 201204011145.dump
FileSize: 1946.50MB
Id: 201204011145
StartTime: Sun Apr 1 11:45:00 2012
EndTime: Sun Apr 1 11:59:20 2012
TotalTime: 860.63 seconds
TotalCapSize: 1541.99MB CapLen: 96 bytes
# of packets: 26509631 (20457.47MB)
AvgRate: 199.41Mbps stddev:29.25M
IP flow (unique src/dst pair) Information
# of flows: 1621763 (avg. 16.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 5.1% 4.3% 3.8% 2.9% 2.6% 2.1% 2.0% 2.0% 1.9%
IP address Information
# of IPv4 addresses: 1274005
Top 10 bandwidth usage (bytes/total in %):
14.9% 9.8% 9.6% 8.4% 7.2% 7.0% 5.8% 5.3% 5.2% 4.4%
# of IPv6 addresses: 4447
Top 10 bandwidth usage (bytes/total in %):
81.2% 8.2% 7.8% 7.3% 7.2% 7.1% 7.0% 6.8% 6.1% 5.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204011145.pktlen.png)
detailed numbers
[ 32- 63]: 4855561
[ 64- 127]: 6087187
[ 128- 255]: 882654
[ 256- 511]: 516691
[ 512- 1023]: 590421
[ 1024- 2047]: 13577117
Protocol Breakdown
![[protocol breakdown chart]](201204011145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26509631 (100.00%) 21451217198 (100.00%) 809.19
ip 26279681 ( 99.13%) 21287250669 ( 99.24%) 810.03
tcp 19962983 ( 75.30%) 18545523094 ( 86.45%) 929.00
http(s) 8921061 ( 33.65%) 12477821661 ( 58.17%) 1398.69
http(c) 3530009 ( 13.32%) 859114226 ( 4.00%) 243.37
squid 31639 ( 0.12%) 25665291 ( 0.12%) 811.19
smtp 40955 ( 0.15%) 10306364 ( 0.05%) 251.65
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 5981 ( 0.02%) 615184 ( 0.00%) 102.86
pop3 3937 ( 0.01%) 941254 ( 0.00%) 239.08
imap 3475 ( 0.01%) 1743200 ( 0.01%) 501.64
telnet 4958 ( 0.02%) 363052 ( 0.00%) 73.23
ssh 1348295 ( 5.09%) 1231624278 ( 5.74%) 913.47
dns 2854 ( 0.01%) 293728 ( 0.00%) 102.92
bgp 580 ( 0.00%) 93425 ( 0.00%) 161.08
napster 129 ( 0.00%) 9980 ( 0.00%) 77.36
realaud 21 ( 0.00%) 1304 ( 0.00%) 62.10
rtsp 14642 ( 0.06%) 19942103 ( 0.09%) 1361.98
icecast 501 ( 0.00%) 88297 ( 0.00%) 176.24
hotline 19 ( 0.00%) 1158 ( 0.00%) 60.95
other 6053915 ( 22.84%) 3916897841 ( 18.26%) 647.00
udp 2754151 ( 10.39%) 1055602248 ( 4.92%) 383.28
dns 312422 ( 1.18%) 79161929 ( 0.37%) 253.38
realaud 9 ( 0.00%) 810 ( 0.00%) 90.00
halflif 56 ( 0.00%) 7530 ( 0.00%) 134.46
starcra 27 ( 0.00%) 2847 ( 0.00%) 105.44
everque 277 ( 0.00%) 79332 ( 0.00%) 286.40
unreal 31 ( 0.00%) 3974 ( 0.00%) 128.19
quake 9 ( 0.00%) 1623 ( 0.00%) 180.33
cuseeme 4 ( 0.00%) 348 ( 0.00%) 87.00
other 2441207 ( 9.21%) 976301103 ( 4.55%) 399.93
icmp 1582179 ( 5.97%) 127850164 ( 0.60%) 80.81
ipip 177 ( 0.00%) 18438 ( 0.00%) 104.17
ipsec 2721 ( 0.01%) 946614 ( 0.00%) 347.89
ip6 1892985 ( 7.14%) 1521538212 ( 7.09%) 803.78
pim 275 ( 0.00%) 16500 ( 0.00%) 60.00
other 84210 ( 0.32%) 35755399 ( 0.17%) 424.60
frag 562 ( 0.00%) 497190 ( 0.00%) 884.68
ip6 229950 ( 0.87%) 163966529 ( 0.76%) 713.05
tcp6 166485 ( 0.63%) 151667750 ( 0.71%) 911.00
http(s) 7741 ( 0.03%) 8932018 ( 0.04%) 1153.86
http(c) 10026 ( 0.04%) 890853 ( 0.00%) 88.85
smtp 48 ( 0.00%) 11841 ( 0.00%) 246.69
dns 139 ( 0.00%) 20863 ( 0.00%) 150.09
bgp 94 ( 0.00%) 16897 ( 0.00%) 179.76
other 148437 ( 0.56%) 141795278 ( 0.66%) 955.26
udp6 36449 ( 0.14%) 8181714 ( 0.04%) 224.47
dns 34133 ( 0.13%) 7855470 ( 0.04%) 230.14
other 2316 ( 0.01%) 326244 ( 0.00%) 140.87
icmp6 26601 ( 0.10%) 3775289 ( 0.02%) 141.92
ip6 79 ( 0.00%) 10772 ( 0.00%) 136.35
pim6 29 ( 0.00%) 3944 ( 0.00%) 136.00
other6 307 ( 0.00%) 327060 ( 0.00%) 1065.34
tcpdump file: 201204011145.dump.gz (603.53 MB)