Traffic Trace Info
DumpFile: 201204011200.dump
FileSize: 1951.49MB
Id: 201204011200
StartTime: Sun Apr 1 12:00:00 2012
EndTime: Sun Apr 1 12:15:00 2012
TotalTime: 899.99 seconds
TotalCapSize: 1549.33MB CapLen: 96 bytes
# of packets: 26355838 (19361.52MB)
AvgRate: 180.48Mbps stddev:27.76M
IP flow (unique src/dst pair) Information
# of flows: 1686442 (avg. 15.63 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 4.3% 3.3% 2.2% 1.9% 1.5% 1.5% 1.5% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 1336028
Top 10 bandwidth usage (bytes/total in %):
12.6% 10.3% 10.2% 10.2% 6.2% 5.9% 4.9% 4.4% 4.4% 3.3%
# of IPv6 addresses: 4714
Top 10 bandwidth usage (bytes/total in %):
78.9% 8.1% 7.2% 7.1% 7.0% 7.0% 6.8% 6.8% 6.4% 5.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204011200.pktlen.png)
detailed numbers
[ 32- 63]: 4332699
[ 64- 127]: 7057633
[ 128- 255]: 981342
[ 256- 511]: 566446
[ 512- 1023]: 620126
[ 1024- 2047]: 12797592
Protocol Breakdown
![[protocol breakdown chart]](201204011200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26355838 (100.00%) 20302023573 (100.00%) 770.30
ip 26103645 ( 99.04%) 20126280619 ( 99.13%) 771.01
tcp 18956616 ( 71.93%) 16892984307 ( 83.21%) 891.14
http(s) 8419491 ( 31.95%) 11563508474 ( 56.96%) 1373.42
http(c) 4430386 ( 16.81%) 761571666 ( 3.75%) 171.90
squid 28673 ( 0.11%) 21021618 ( 0.10%) 733.15
smtp 38606 ( 0.15%) 7911341 ( 0.04%) 204.93
nntp 29 ( 0.00%) 1800 ( 0.00%) 62.07
ftp 9970 ( 0.04%) 1582039 ( 0.01%) 158.68
pop3 18927 ( 0.07%) 1619389 ( 0.01%) 85.56
imap 1778 ( 0.01%) 502704 ( 0.00%) 282.74
telnet 5333 ( 0.02%) 389537 ( 0.00%) 73.04
ssh 1289301 ( 4.89%) 1186907201 ( 5.85%) 920.58
dns 7326 ( 0.03%) 607930 ( 0.00%) 82.98
bgp 633 ( 0.00%) 117694 ( 0.00%) 185.93
napster 469 ( 0.00%) 29232 ( 0.00%) 62.33
realaud 18 ( 0.00%) 1130 ( 0.00%) 62.78
rtsp 21527 ( 0.08%) 30223203 ( 0.15%) 1403.97
icecast 572 ( 0.00%) 152342 ( 0.00%) 266.33
hotline 2 ( 0.00%) 126 ( 0.00%) 63.00
other 4683575 ( 17.77%) 3316836881 ( 16.34%) 708.18
udp 2821780 ( 10.71%) 978453288 ( 4.82%) 346.75
dns 422363 ( 1.60%) 98805789 ( 0.49%) 233.94
realaud 6 ( 0.00%) 566 ( 0.00%) 94.33
halflif 131 ( 0.00%) 18129 ( 0.00%) 138.39
starcra 45 ( 0.00%) 3859 ( 0.00%) 85.76
everque 306 ( 0.00%) 75012 ( 0.00%) 245.14
unreal 43 ( 0.00%) 5308 ( 0.00%) 123.44
quake 7 ( 0.00%) 604 ( 0.00%) 86.29
cuseeme 4 ( 0.00%) 406 ( 0.00%) 101.50
other 2398722 ( 9.10%) 879479508 ( 4.33%) 366.65
icmp 1697589 ( 6.44%) 137008128 ( 0.67%) 80.71
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2900 ( 0.01%) 1023784 ( 0.01%) 353.03
ip6 2534625 ( 9.62%) 2077411175 ( 10.23%) 819.61
pim 255 ( 0.00%) 15300 ( 0.00%) 60.00
other 89695 ( 0.34%) 39365367 ( 0.19%) 438.88
frag 717 ( 0.00%) 654236 ( 0.00%) 912.46
ip6 252193 ( 0.96%) 175742954 ( 0.87%) 696.86
tcp6 182789 ( 0.69%) 162034269 ( 0.80%) 886.46
http(s) 10339 ( 0.04%) 12968433 ( 0.06%) 1254.32
http(c) 21074 ( 0.08%) 1887734 ( 0.01%) 89.58
smtp 498 ( 0.00%) 211261 ( 0.00%) 424.22
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 254 ( 0.00%) 53228 ( 0.00%) 209.56
bgp 94 ( 0.00%) 13357 ( 0.00%) 142.10
other 150513 ( 0.57%) 146898651 ( 0.72%) 975.99
udp6 40606 ( 0.15%) 9452979 ( 0.05%) 232.80
dns 38592 ( 0.15%) 9186983 ( 0.05%) 238.05
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
cuseeme 1 ( 0.00%) 118 ( 0.00%) 118.00
other 2011 ( 0.01%) 265664 ( 0.00%) 132.11
icmp6 28421 ( 0.11%) 3987727 ( 0.02%) 140.31
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 262 ( 0.00%) 252351 ( 0.00%) 963.17
tcpdump file: 201204011200.dump.gz (613.51 MB)