Traffic Trace Info
DumpFile: 201204011245.dump
FileSize: 2082.23MB
Id: 201204011245
StartTime: Sun Apr 1 12:45:00 2012
EndTime: Sun Apr 1 13:00:01 2012
TotalTime: 900.50 seconds
TotalCapSize: 1653.40MB CapLen: 96 bytes
# of packets: 28102972 (21746.56MB)
AvgRate: 202.60Mbps stddev:41.59M
IP flow (unique src/dst pair) Information
# of flows: 1857154 (avg. 15.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 4.9% 3.6% 3.2% 2.7% 2.6% 2.1% 1.8% 1.7% 1.5%
IP address Information
# of IPv4 addresses: 1457336
Top 10 bandwidth usage (bytes/total in %):
16.3% 10.4% 9.3% 7.6% 7.2% 6.5% 5.5% 5.2% 4.1% 3.9%
# of IPv6 addresses: 4615
Top 10 bandwidth usage (bytes/total in %):
78.7% 77.5% 18.2% 1.6% 1.6% 1.6% 1.6% 1.5% 1.5% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204011245.pktlen.png)
detailed numbers
[ 32- 63]: 4669534
[ 64- 127]: 6771781
[ 128- 255]: 997116
[ 256- 511]: 606542
[ 512- 1023]: 725333
[ 1024- 2047]: 14332666
Protocol Breakdown
![[protocol breakdown chart]](201204011245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28102972 (100.00%) 22802921227 (100.00%) 811.41
ip 27474165 ( 97.76%) 22052386711 ( 96.71%) 802.66
tcp 20795678 ( 74.00%) 19362331763 ( 84.91%) 931.07
http(s) 9839896 ( 35.01%) 13643841880 ( 59.83%) 1386.58
http(c) 4291752 ( 15.27%) 774958253 ( 3.40%) 180.57
squid 35535 ( 0.13%) 25510481 ( 0.11%) 717.90
smtp 29695 ( 0.11%) 4837097 ( 0.02%) 162.89
nntp 26 ( 0.00%) 1618 ( 0.00%) 62.23
ftp 21707 ( 0.08%) 5013894 ( 0.02%) 230.98
pop3 5443 ( 0.02%) 3433381 ( 0.02%) 630.79
imap 1989 ( 0.01%) 482726 ( 0.00%) 242.70
telnet 41800 ( 0.15%) 3065020 ( 0.01%) 73.33
ssh 1326544 ( 4.72%) 1217609947 ( 5.34%) 917.88
dns 3404 ( 0.01%) 343077 ( 0.00%) 100.79
bgp 594 ( 0.00%) 88803 ( 0.00%) 149.50
napster 5980 ( 0.02%) 373528 ( 0.00%) 62.46
realaud 73 ( 0.00%) 5069 ( 0.00%) 69.44
rtsp 19434 ( 0.07%) 28678300 ( 0.13%) 1475.68
icecast 402 ( 0.00%) 76348 ( 0.00%) 189.92
hotline 14 ( 0.00%) 868 ( 0.00%) 62.00
other 5171390 ( 18.40%) 3654011473 ( 16.02%) 706.58
udp 2703312 ( 9.62%) 883630026 ( 3.88%) 326.87
dns 356917 ( 1.27%) 93366697 ( 0.41%) 261.59
rip 2 ( 0.00%) 137 ( 0.00%) 68.50
realaud 17 ( 0.00%) 2713 ( 0.00%) 159.59
halflif 70 ( 0.00%) 10946 ( 0.00%) 156.37
starcra 46 ( 0.00%) 3961 ( 0.00%) 86.11
everque 532 ( 0.00%) 339269 ( 0.00%) 637.72
unreal 76 ( 0.00%) 13267 ( 0.00%) 174.57
quake 7 ( 0.00%) 648 ( 0.00%) 92.57
cuseeme 1 ( 0.00%) 153 ( 0.00%) 153.00
other 2345500 ( 8.35%) 789866619 ( 3.46%) 336.76
icmp 1662860 ( 5.92%) 134286703 ( 0.59%) 80.76
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 3345 ( 0.01%) 1379426 ( 0.01%) 412.38
ip6 2224340 ( 7.91%) 1633582307 ( 7.16%) 734.41
pim 363 ( 0.00%) 21780 ( 0.00%) 60.00
other 84083 ( 0.30%) 37135546 ( 0.16%) 441.65
frag 646 ( 0.00%) 566567 ( 0.00%) 877.04
ip6 628807 ( 2.24%) 750534516 ( 3.29%) 1193.58
tcp6 557090 ( 1.98%) 737383564 ( 3.23%) 1323.63
http(s) 9700 ( 0.03%) 11782015 ( 0.05%) 1214.64
http(c) 13746 ( 0.05%) 1196375 ( 0.01%) 87.03
smtp 86 ( 0.00%) 45835 ( 0.00%) 532.97
dns 86 ( 0.00%) 8813 ( 0.00%) 102.48
bgp 91 ( 0.00%) 14979 ( 0.00%) 164.60
other 533381 ( 1.90%) 724335547 ( 3.18%) 1358.01
udp6 43056 ( 0.15%) 8752459 ( 0.04%) 203.28
dns 35068 ( 0.12%) 7939323 ( 0.03%) 226.40
everque 1 ( 0.00%) 110 ( 0.00%) 110.00
quake 2 ( 0.00%) 217 ( 0.00%) 108.50
other 7985 ( 0.03%) 812809 ( 0.00%) 101.79
icmp6 27898 ( 0.10%) 3886057 ( 0.02%) 139.30
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 648 ( 0.00%) 496808 ( 0.00%) 766.68
tcpdump file: 201204011245.dump.gz (641.56 MB)