Traffic Trace Info
DumpFile: 201204011215.dump
FileSize: 1865.12MB
Id: 201204011215
StartTime: Sun Apr 1 12:15:00 2012
EndTime: Sun Apr 1 12:30:00 2012
TotalTime: 900.26 seconds
TotalCapSize: 1475.77MB CapLen: 96 bytes
# of packets: 25515891 (17593.22MB)
AvgRate: 163.80Mbps stddev:38.88M
IP flow (unique src/dst pair) Information
# of flows: 1685833 (avg. 15.14 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 5.5% 4.6% 2.3% 1.9% 1.7% 1.1% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 1332756
Top 10 bandwidth usage (bytes/total in %):
14.7% 11.2% 9.8% 9.7% 8.7% 6.4% 5.7% 5.0% 4.7% 3.7%
# of IPv6 addresses: 4618
Top 10 bandwidth usage (bytes/total in %):
66.0% 21.3% 21.3% 6.1% 5.8% 5.8% 5.8% 5.7% 5.7% 5.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204011215.pktlen.png)
detailed numbers
[ 32- 63]: 5454963
[ 64- 127]: 6434915
[ 128- 255]: 1012129
[ 256- 511]: 517225
[ 512- 1023]: 529458
[ 1024- 2047]: 11567201
Protocol Breakdown
![[protocol breakdown chart]](201204011215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25515891 (100.00%) 18447829381 (100.00%) 722.99
ip 25261977 ( 99.00%) 18245107156 ( 98.90%) 722.24
tcp 18417056 ( 72.18%) 15287529627 ( 82.87%) 830.07
http(s) 6702741 ( 26.27%) 9022148954 ( 48.91%) 1346.04
http(c) 4376914 ( 17.15%) 722888517 ( 3.92%) 165.16
squid 33545 ( 0.13%) 23221502 ( 0.13%) 692.25
smtp 44331 ( 0.17%) 18093992 ( 0.10%) 408.16
nntp 14 ( 0.00%) 866 ( 0.00%) 61.86
ftp 6059 ( 0.02%) 613138 ( 0.00%) 101.19
pop3 15001 ( 0.06%) 1693545 ( 0.01%) 112.90
imap 1355 ( 0.01%) 325396 ( 0.00%) 240.14
telnet 7836 ( 0.03%) 569106 ( 0.00%) 72.63
ssh 1269819 ( 4.98%) 1180412322 ( 6.40%) 929.59
dns 2894 ( 0.01%) 310999 ( 0.00%) 107.46
bgp 609 ( 0.00%) 99438 ( 0.00%) 163.28
napster 4211 ( 0.02%) 265159 ( 0.00%) 62.97
realaud 11 ( 0.00%) 690 ( 0.00%) 62.73
rtsp 20307 ( 0.08%) 29362866 ( 0.16%) 1445.95
icecast 641 ( 0.00%) 179384 ( 0.00%) 279.85
hotline 9 ( 0.00%) 564 ( 0.00%) 62.67
other 5930758 ( 23.24%) 4287343129 ( 23.24%) 722.90
udp 2899975 ( 11.37%) 1001469279 ( 5.43%) 345.34
dns 380289 ( 1.49%) 92170362 ( 0.50%) 242.37
rip 2 ( 0.00%) 142 ( 0.00%) 71.00
realaud 9 ( 0.00%) 1165 ( 0.00%) 129.44
halflif 64 ( 0.00%) 9054 ( 0.00%) 141.47
starcra 32 ( 0.00%) 3344 ( 0.00%) 104.50
everque 308 ( 0.00%) 72573 ( 0.00%) 235.63
unreal 31 ( 0.00%) 8557 ( 0.00%) 276.03
quake 5 ( 0.00%) 381 ( 0.00%) 76.20
cuseeme 1 ( 0.00%) 88 ( 0.00%) 88.00
other 2519099 ( 9.87%) 909156166 ( 4.93%) 360.91
icmp 1650864 ( 6.47%) 132932157 ( 0.72%) 80.52
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2867 ( 0.01%) 986914 ( 0.01%) 344.23
ip6 2204171 ( 8.64%) 1785631221 ( 9.68%) 810.11
pim 256 ( 0.00%) 15360 ( 0.00%) 60.00
other 86603 ( 0.34%) 36523328 ( 0.20%) 421.73
frag 555 ( 0.00%) 502392 ( 0.00%) 905.21
ip6 253912 ( 1.00%) 202722105 ( 1.10%) 798.40
tcp6 186599 ( 0.73%) 189702869 ( 1.03%) 1016.63
http(s) 3616 ( 0.01%) 3538328 ( 0.02%) 978.52
http(c) 8109 ( 0.03%) 734373 ( 0.00%) 90.56
smtp 202 ( 0.00%) 71655 ( 0.00%) 354.73
ftp 22 ( 0.00%) 2042 ( 0.00%) 92.82
dns 87 ( 0.00%) 10899 ( 0.00%) 125.28
bgp 86 ( 0.00%) 12428 ( 0.00%) 144.51
realaud 3 ( 0.00%) 254 ( 0.00%) 84.67
other 174474 ( 0.68%) 185332890 ( 1.00%) 1062.24
udp6 38421 ( 0.15%) 8654021 ( 0.05%) 225.24
dns 36698 ( 0.14%) 8360988 ( 0.05%) 227.83
halflif 2 ( 0.00%) 215 ( 0.00%) 107.50
unreal 1 ( 0.00%) 116 ( 0.00%) 116.00
quake 1 ( 0.00%) 113 ( 0.00%) 113.00
other 1719 ( 0.01%) 292589 ( 0.00%) 170.21
icmp6 28345 ( 0.11%) 3955188 ( 0.02%) 139.54
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 432 ( 0.00%) 394367 ( 0.00%) 912.89
tcpdump file: 201204011215.dump.gz (588.39 MB)