Traffic Trace Info
DumpFile: 201204011315.dump
FileSize: 2587.61MB
Id: 201204011315
StartTime: Sun Apr 1 13:15:00 2012
EndTime: Sun Apr 1 13:30:00 2012
TotalTime: 900.59 seconds
TotalCapSize: -2045.18MB CapLen: 96 bytes
# of packets: 35178894 (28947.85MB)
AvgRate: 269.66Mbps stddev:41.18M
IP flow (unique src/dst pair) Information
# of flows: 1621950 (avg. 21.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 2.9% 2.1% 2.0% 1.9% 1.7% 1.6% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1300343
Top 10 bandwidth usage (bytes/total in %):
19.1% 18.0% 7.0% 7.0% 5.4% 4.0% 3.7% 3.0% 2.9% 2.6%
# of IPv6 addresses: 4762
Top 10 bandwidth usage (bytes/total in %):
66.0% 63.4% 19.1% 11.1% 11.1% 1.8% 1.7% 1.7% 1.7% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204011315.pktlen.png)
detailed numbers
[ 32- 63]: 5849316
[ 64- 127]: 7867058
[ 128- 255]: 920613
[ 256- 511]: 549364
[ 512- 1023]: 724409
[ 1024- 2047]: 19268134
Protocol Breakdown
![[protocol breakdown chart]](201204011315.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35178894 (100.00%) 30354019983 (100.00%) 862.85
ip 34697035 ( 98.63%) 29815708956 ( 98.23%) 859.32
tcp 27945273 ( 79.44%) 26842838115 ( 88.43%) 960.55
http(s) 14936115 ( 42.46%) 21263989328 ( 70.05%) 1423.66
http(c) 6556086 ( 18.64%) 893729947 ( 2.94%) 136.32
squid 32642 ( 0.09%) 23882255 ( 0.08%) 731.64
smtp 30311 ( 0.09%) 7668116 ( 0.03%) 252.98
nntp 28 ( 0.00%) 1728 ( 0.00%) 61.71
ftp 9673 ( 0.03%) 934106 ( 0.00%) 96.57
pop3 2600 ( 0.01%) 581509 ( 0.00%) 223.66
imap 1943 ( 0.01%) 1222704 ( 0.00%) 629.29
telnet 9609 ( 0.03%) 4843010 ( 0.02%) 504.01
ssh 1294358 ( 3.68%) 1203663638 ( 3.97%) 929.93
dns 3195 ( 0.01%) 307123 ( 0.00%) 96.13
bgp 659 ( 0.00%) 116765 ( 0.00%) 177.19
napster 1869 ( 0.01%) 118117 ( 0.00%) 63.20
realaud 22 ( 0.00%) 1378 ( 0.00%) 62.64
rtsp 15255 ( 0.04%) 22503375 ( 0.07%) 1475.15
icecast 679 ( 0.00%) 91728 ( 0.00%) 135.09
hotline 22 ( 0.00%) 1396 ( 0.00%) 63.45
other 5050207 ( 14.36%) 3419181892 ( 11.26%) 677.04
udp 2859745 ( 8.13%) 1141854620 ( 3.76%) 399.29
dns 349232 ( 0.99%) 86964204 ( 0.29%) 249.02
realaud 11 ( 0.00%) 1670 ( 0.00%) 151.82
halflif 128 ( 0.00%) 18090 ( 0.00%) 141.33
starcra 42 ( 0.00%) 3098 ( 0.00%) 73.76
everque 2513 ( 0.01%) 2518708 ( 0.01%) 1002.27
unreal 45 ( 0.00%) 24217 ( 0.00%) 538.16
quake 4 ( 0.00%) 338 ( 0.00%) 84.50
other 2507624 ( 7.13%) 1052278257 ( 3.47%) 419.63
icmp 1651034 ( 4.69%) 133337671 ( 0.44%) 80.76
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2671 ( 0.01%) 911114 ( 0.00%) 341.11
ip6 2152617 ( 6.12%) 1660562459 ( 5.47%) 771.42
pim 277 ( 0.00%) 16620 ( 0.00%) 60.00
other 85234 ( 0.24%) 36169197 ( 0.12%) 424.35
frag 607 ( 0.00%) 569557 ( 0.00%) 938.31
ip6 481859 ( 1.37%) 538311027 ( 1.77%) 1117.15
tcp6 403637 ( 1.15%) 524258974 ( 1.73%) 1298.84
http(s) 9086 ( 0.03%) 11945190 ( 0.04%) 1314.68
http(c) 19469 ( 0.06%) 1774011 ( 0.01%) 91.12
smtp 57 ( 0.00%) 33510 ( 0.00%) 587.89
dns 105 ( 0.00%) 14363 ( 0.00%) 136.79
bgp 86 ( 0.00%) 12748 ( 0.00%) 148.23
other 374834 ( 1.07%) 510479152 ( 1.68%) 1361.88
udp6 49195 ( 0.14%) 9715777 ( 0.03%) 197.50
dns 37699 ( 0.11%) 8594503 ( 0.03%) 227.98
starcra 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
other 11494 ( 0.03%) 1121056 ( 0.00%) 97.53
icmp6 28498 ( 0.08%) 3940614 ( 0.01%) 138.28
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 417 ( 0.00%) 380406 ( 0.00%) 912.24
tcpdump file: 201204011315.dump.gz (783.04 MB)