Traffic Trace Info
DumpFile: 201204011330.dump
FileSize: 2391.01MB
Id: 201204011330
StartTime: Sun Apr 1 13:30:00 2012
EndTime: Sun Apr 1 13:45:00 2012
TotalTime: 899.61 seconds
TotalCapSize: 1897.91MB CapLen: 96 bytes
# of packets: 32315298 (26226.52MB)
AvgRate: 244.58Mbps stddev:40.40M
IP flow (unique src/dst pair) Information
# of flows: 1678801 (avg. 19.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.9% 6.5% 4.1% 2.9% 2.4% 2.3% 1.7% 1.5% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 1343606
Top 10 bandwidth usage (bytes/total in %):
16.5% 16.5% 14.5% 7.2% 7.2% 6.2% 4.6% 4.3% 4.0% 3.8%
# of IPv6 addresses: 4789
Top 10 bandwidth usage (bytes/total in %):
85.3% 83.9% 3.4% 3.1% 2.1% 2.0% 1.8% 0.8% 0.7% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204011330.pktlen.png)
detailed numbers
[ 32- 63]: 4910884
[ 64- 127]: 7736167
[ 128- 255]: 921338
[ 256- 511]: 526014
[ 512- 1023]: 687782
[ 1024- 2047]: 17533113
Protocol Breakdown
![[protocol breakdown chart]](201204011330.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32315298 (100.00%) 27500499569 (100.00%) 851.01
ip 32120065 ( 99.40%) 27321869077 ( 99.35%) 850.62
tcp 25774218 ( 79.76%) 24397815347 ( 88.72%) 946.60
http(s) 10782935 ( 33.37%) 15001781039 ( 54.55%) 1391.25
http(c) 4475164 ( 13.85%) 799749637 ( 2.91%) 178.71
squid 94263 ( 0.29%) 81337653 ( 0.30%) 862.88
smtp 31351 ( 0.10%) 6355180 ( 0.02%) 202.71
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 10209 ( 0.03%) 1002833 ( 0.00%) 98.23
pop3 4378 ( 0.01%) 814350 ( 0.00%) 186.01
imap 4293 ( 0.01%) 3961116 ( 0.01%) 922.69
telnet 5263 ( 0.02%) 384142 ( 0.00%) 72.99
ssh 1271643 ( 3.94%) 1173563396 ( 4.27%) 922.87
dns 3277 ( 0.01%) 338442 ( 0.00%) 103.28
bgp 635 ( 0.00%) 115259 ( 0.00%) 181.51
napster 496 ( 0.00%) 31428 ( 0.00%) 63.36
realaud 23 ( 0.00%) 1466 ( 0.00%) 63.74
rtsp 19312 ( 0.06%) 28607964 ( 0.10%) 1481.36
icecast 6542 ( 0.02%) 5129675 ( 0.02%) 784.11
hotline 8 ( 0.00%) 486 ( 0.00%) 60.75
other 9064420 ( 28.05%) 7294640907 ( 26.53%) 804.76
udp 2647598 ( 8.19%) 1027346606 ( 3.74%) 388.03
dns 364887 ( 1.13%) 90202759 ( 0.33%) 247.21
realaud 73 ( 0.00%) 6181 ( 0.00%) 84.67
halflif 116 ( 0.00%) 16172 ( 0.00%) 139.41
starcra 45 ( 0.00%) 3409 ( 0.00%) 75.76
everque 269 ( 0.00%) 64410 ( 0.00%) 239.44
unreal 82 ( 0.00%) 38526 ( 0.00%) 469.83
quake 9 ( 0.00%) 979 ( 0.00%) 108.78
cuseeme 1 ( 0.00%) 72 ( 0.00%) 72.00
other 2281990 ( 7.06%) 936977267 ( 3.41%) 410.60
icmp 1677428 ( 5.19%) 135763212 ( 0.49%) 80.94
ipip 186 ( 0.00%) 19380 ( 0.00%) 104.19
ipsec 2882 ( 0.01%) 1019932 ( 0.00%) 353.90
ip6 1932425 ( 5.98%) 1720658548 ( 6.26%) 890.41
pim 247 ( 0.00%) 14820 ( 0.00%) 60.00
other 85081 ( 0.26%) 39231232 ( 0.14%) 461.10
frag 728 ( 0.00%) 650026 ( 0.00%) 892.89
ip6 195233 ( 0.60%) 178630492 ( 0.65%) 914.96
tcp6 122834 ( 0.38%) 164282085 ( 0.60%) 1337.43
http(s) 10082 ( 0.03%) 13080059 ( 0.05%) 1297.37
http(c) 11713 ( 0.04%) 1122042 ( 0.00%) 95.79
smtp 48 ( 0.00%) 16453 ( 0.00%) 342.77
dns 263 ( 0.00%) 48436 ( 0.00%) 184.17
bgp 83 ( 0.00%) 13072 ( 0.00%) 157.49
other 100645 ( 0.31%) 150002023 ( 0.55%) 1490.41
udp6 43673 ( 0.14%) 10076599 ( 0.04%) 230.73
dns 37873 ( 0.12%) 8927750 ( 0.03%) 235.73
halflif 1 ( 0.00%) 113 ( 0.00%) 113.00
cuseeme 1 ( 0.00%) 103 ( 0.00%) 103.00
other 5798 ( 0.02%) 1148633 ( 0.00%) 198.11
icmp6 28342 ( 0.09%) 3984037 ( 0.01%) 140.57
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 271 ( 0.00%) 272379 ( 0.00%) 1005.09
tcpdump file: 201204011330.dump.gz (717.73 MB)