Traffic Trace Info
DumpFile: 201204011230.dump
FileSize: 1929.15MB
Id: 201204011230
StartTime: Sun Apr 1 12:30:00 2012
EndTime: Sun Apr 1 12:45:00 2012
TotalTime: 900.12 seconds
TotalCapSize: 1525.81MB CapLen: 96 bytes
# of packets: 26432362 (18837.87MB)
AvgRate: 175.55Mbps stddev:36.78M
IP flow (unique src/dst pair) Information
# of flows: 1777941 (avg. 14.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 5.9% 4.2% 3.5% 2.9% 2.2% 2.2% 1.3% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 1361120
Top 10 bandwidth usage (bytes/total in %):
18.6% 10.5% 10.5% 9.6% 7.7% 7.4% 6.2% 5.3% 4.3% 4.3%
# of IPv6 addresses: 4587
Top 10 bandwidth usage (bytes/total in %):
47.5% 46.0% 45.3% 4.4% 4.4% 4.2% 4.1% 3.8% 3.7% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204011230.pktlen.png)
detailed numbers
[ 32- 63]: 5456130
[ 64- 127]: 6311047
[ 128- 255]: 1077266
[ 256- 511]: 626151
[ 512- 1023]: 683001
[ 1024- 2047]: 12278767
Protocol Breakdown
![[protocol breakdown chart]](201204011230.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26432362 (100.00%) 19752938578 (100.00%) 747.30
ip 26115235 ( 98.80%) 19470228182 ( 98.57%) 745.55
tcp 19485424 ( 73.72%) 16892404730 ( 85.52%) 866.93
http(s) 8961426 ( 33.90%) 12235725077 ( 61.94%) 1365.38
http(c) 4923688 ( 18.63%) 836761163 ( 4.24%) 169.95
squid 31241 ( 0.12%) 15628215 ( 0.08%) 500.25
smtp 32734 ( 0.12%) 7915364 ( 0.04%) 241.81
nntp 12 ( 0.00%) 732 ( 0.00%) 61.00
ftp 8841 ( 0.03%) 1288462 ( 0.01%) 145.74
pop3 17253 ( 0.07%) 13228569 ( 0.07%) 766.74
imap 5080 ( 0.02%) 473220 ( 0.00%) 93.15
telnet 6302 ( 0.02%) 455974 ( 0.00%) 72.35
ssh 1317017 ( 4.98%) 1206552513 ( 6.11%) 916.13
dns 3173 ( 0.01%) 325394 ( 0.00%) 102.55
bgp 630 ( 0.00%) 107848 ( 0.00%) 171.19
napster 4924 ( 0.02%) 307680 ( 0.00%) 62.49
realaud 13 ( 0.00%) 804 ( 0.00%) 61.85
rtsp 15627 ( 0.06%) 23121242 ( 0.12%) 1479.57
icecast 478 ( 0.00%) 122063 ( 0.00%) 255.36
hotline 18 ( 0.00%) 1110 ( 0.00%) 61.67
other 4156967 ( 15.73%) 2550389300 ( 12.91%) 613.52
udp 2890989 ( 10.94%) 937508688 ( 4.75%) 324.29
dns 431960 ( 1.63%) 113304262 ( 0.57%) 262.30
rip 1 ( 0.00%) 68 ( 0.00%) 68.00
realaud 23 ( 0.00%) 1714 ( 0.00%) 74.52
halflif 160 ( 0.00%) 25999 ( 0.00%) 162.49
starcra 32 ( 0.00%) 2477 ( 0.00%) 77.41
everque 356 ( 0.00%) 97754 ( 0.00%) 274.59
unreal 63 ( 0.00%) 22930 ( 0.00%) 363.97
quake 7 ( 0.00%) 610 ( 0.00%) 87.14
cuseeme 2 ( 0.00%) 139 ( 0.00%) 69.50
other 2458264 ( 9.30%) 824024648 ( 4.17%) 335.21
icmp 1687934 ( 6.39%) 136442911 ( 0.69%) 80.83
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2779 ( 0.01%) 974226 ( 0.00%) 350.57
ip6 1959303 ( 7.41%) 1463072694 ( 7.41%) 746.73
pim 284 ( 0.00%) 17040 ( 0.00%) 60.00
other 88338 ( 0.33%) 39788733 ( 0.20%) 450.41
frag 483 ( 0.00%) 414969 ( 0.00%) 859.15
ip6 317127 ( 1.20%) 282710396 ( 1.43%) 891.47
tcp6 250624 ( 0.95%) 269904967 ( 1.37%) 1076.93
http(s) 5543 ( 0.02%) 6048222 ( 0.03%) 1091.15
http(c) 14711 ( 0.06%) 1296644 ( 0.01%) 88.14
smtp 247 ( 0.00%) 89902 ( 0.00%) 363.98
ftp 23 ( 0.00%) 1819 ( 0.00%) 79.09
dns 222 ( 0.00%) 46406 ( 0.00%) 209.04
bgp 94 ( 0.00%) 14329 ( 0.00%) 152.44
napster 3 ( 0.00%) 254 ( 0.00%) 84.67
other 229781 ( 0.87%) 262407391 ( 1.33%) 1141.99
udp6 38297 ( 0.14%) 8559660 ( 0.04%) 223.51
dns 35920 ( 0.14%) 8232265 ( 0.04%) 229.18
realaud 1 ( 0.00%) 102 ( 0.00%) 102.00
quake 1 ( 0.00%) 101 ( 0.00%) 101.00
other 2375 ( 0.01%) 327192 ( 0.00%) 137.77
icmp6 27756 ( 0.11%) 3908798 ( 0.02%) 140.83
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 336 ( 0.00%) 321479 ( 0.00%) 956.78
tcpdump file: 201204011230.dump.gz (610.93 MB)