Traffic Trace Info
DumpFile: 201204011400.dump
FileSize: 2313.21MB
Id: 201204011400
StartTime: Sun Apr 1 14:00:00 2012
EndTime: Sun Apr 1 14:15:01 2012
TotalTime: 900.11 seconds
TotalCapSize: 1823.18MB CapLen: 96 bytes
# of packets: 32113623 (24379.47MB)
AvgRate: 227.21Mbps stddev:37.78M
IP flow (unique src/dst pair) Information
# of flows: 1704921 (avg. 18.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 2.8% 2.7% 2.6% 2.4% 2.0% 1.9% 1.7% 1.6% 1.3%
IP address Information
# of IPv4 addresses: 1344406
Top 10 bandwidth usage (bytes/total in %):
17.5% 9.2% 7.9% 6.7% 5.5% 3.9% 3.3% 3.0% 3.0% 2.8%
# of IPv6 addresses: 4954
Top 10 bandwidth usage (bytes/total in %):
43.9% 26.7% 11.5% 8.8% 4.3% 2.2% 2.1% 2.0% 2.0% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204011400.pktlen.png)
detailed numbers
[ 32- 63]: 6581778
[ 64- 127]: 7184471
[ 128- 255]: 907523
[ 256- 511]: 578966
[ 512- 1023]: 732276
[ 1024- 2047]: 16128609
Protocol Breakdown
![[protocol breakdown chart]](201204011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32113623 (100.00%) 25563727744 (100.00%) 796.04
ip 31988405 ( 99.61%) 25530122267 ( 99.87%) 798.11
tcp 23331488 ( 72.65%) 20821088744 ( 81.45%) 892.40
http(s) 10915075 ( 33.99%) 14753620431 ( 57.71%) 1351.67
http(c) 6078089 ( 18.93%) 1556482238 ( 6.09%) 256.08
squid 158695 ( 0.49%) 140929384 ( 0.55%) 888.05
smtp 29725 ( 0.09%) 6420021 ( 0.03%) 215.98
ftp 7288 ( 0.02%) 714231 ( 0.00%) 98.00
pop3 3696 ( 0.01%) 514760 ( 0.00%) 139.27
imap 2455 ( 0.01%) 1694118 ( 0.01%) 690.07
telnet 3674 ( 0.01%) 270994 ( 0.00%) 73.76
ssh 1083290 ( 3.37%) 987582347 ( 3.86%) 911.65
dns 3452 ( 0.01%) 334463 ( 0.00%) 96.89
bgp 615 ( 0.00%) 110797 ( 0.00%) 180.16
napster 144 ( 0.00%) 10341 ( 0.00%) 71.81
realaud 26 ( 0.00%) 1642 ( 0.00%) 63.15
rtsp 19189 ( 0.06%) 28401142 ( 0.11%) 1480.07
icecast 7520 ( 0.02%) 5949676 ( 0.02%) 791.18
hotline 27 ( 0.00%) 1692 ( 0.00%) 62.67
other 5018528 ( 15.63%) 3338050467 ( 13.06%) 665.15
udp 4663620 ( 14.52%) 2487848334 ( 9.73%) 533.46
dns 361384 ( 1.13%) 87589091 ( 0.34%) 242.37
realaud 17 ( 0.00%) 1800 ( 0.00%) 105.88
halflif 50 ( 0.00%) 6664 ( 0.00%) 133.28
starcra 26 ( 0.00%) 2342 ( 0.00%) 90.08
everque 262 ( 0.00%) 55532 ( 0.00%) 211.95
unreal 139 ( 0.00%) 42441 ( 0.00%) 305.33
quake 20 ( 0.00%) 1774 ( 0.00%) 88.70
cuseeme 5 ( 0.00%) 320 ( 0.00%) 64.00
other 4119616 ( 12.83%) 2388775682 ( 9.34%) 579.85
icmp 1645331 ( 5.12%) 132987372 ( 0.52%) 80.83
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2956 ( 0.01%) 1032328 ( 0.00%) 349.23
ip6 2258717 ( 7.03%) 2047402042 ( 8.01%) 906.44
pim 251 ( 0.00%) 15060 ( 0.00%) 60.00
other 85857 ( 0.27%) 39729117 ( 0.16%) 462.74
frag 1643985 ( 5.12%) 1253205243 ( 4.90%) 762.30
ip6 125218 ( 0.39%) 33605477 ( 0.13%) 268.38
tcp6 46064 ( 0.14%) 18924764 ( 0.07%) 410.84
http(s) 5455 ( 0.02%) 6508333 ( 0.03%) 1193.09
http(c) 29043 ( 0.09%) 2406671 ( 0.01%) 82.87
smtp 247 ( 0.00%) 49144 ( 0.00%) 198.96
dns 244 ( 0.00%) 50918 ( 0.00%) 208.68
bgp 93 ( 0.00%) 15584 ( 0.00%) 167.57
other 10982 ( 0.03%) 9894114 ( 0.04%) 900.94
udp6 50108 ( 0.16%) 10408907 ( 0.04%) 207.73
dns 39833 ( 0.12%) 9395048 ( 0.04%) 235.86
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
starcra 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 10272 ( 0.03%) 1013539 ( 0.00%) 98.67
icmp6 28628 ( 0.09%) 3965883 ( 0.02%) 138.53
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 306 ( 0.00%) 290667 ( 0.00%) 949.89
tcpdump file: 201204011400.dump.gz (714.67 MB)