Traffic Trace Info
DumpFile: 201204011415.dump
FileSize: 2540.32MB
Id: 201204011415
StartTime: Sun Apr 1 14:15:01 2012
EndTime: Sun Apr 1 14:30:00 2012
TotalTime: 899.83 seconds
TotalCapSize: 1979.72MB CapLen: 96 bytes
# of packets: 36739256 (27060.56MB)
AvgRate: 252.30Mbps stddev:33.72M
IP flow (unique src/dst pair) Information
# of flows: 1642428 (avg. 22.37 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 4.9% 3.6% 3.4% 2.6% 2.5% 2.5% 2.4% 2.0% 1.3%
IP address Information
# of IPv4 addresses: 1310806
Top 10 bandwidth usage (bytes/total in %):
18.6% 12.4% 9.7% 8.0% 6.1% 6.0% 4.9% 4.6% 4.1% 3.6%
# of IPv6 addresses: 4943
Top 10 bandwidth usage (bytes/total in %):
49.2% 49.2% 15.6% 10.6% 10.5% 7.3% 5.6% 4.1% 2.0% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204011415.pktlen.png)
detailed numbers
[ 32- 63]: 9198375
[ 64- 127]: 7333364
[ 128- 255]: 926321
[ 256- 511]: 627641
[ 512- 1023]: 683263
[ 1024- 2047]: 17970292
Protocol Breakdown
![[protocol breakdown chart]](201204011415.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36739256 (100.00%) 28375053333 (100.00%) 772.34
ip 36584327 ( 99.58%) 28287081815 ( 99.69%) 773.20
tcp 22033962 ( 59.97%) 19670791641 ( 69.32%) 892.75
http(s) 10071000 ( 27.41%) 13445116276 ( 47.38%) 1335.03
http(c) 5491279 ( 14.95%) 1544644279 ( 5.44%) 281.29
squid 161224 ( 0.44%) 150554169 ( 0.53%) 933.82
smtp 35523 ( 0.10%) 11696919 ( 0.04%) 329.28
nntp 18 ( 0.00%) 1122 ( 0.00%) 62.33
ftp 6851 ( 0.02%) 693305 ( 0.00%) 101.20
pop3 3581 ( 0.01%) 514746 ( 0.00%) 143.74
imap 1255 ( 0.00%) 204481 ( 0.00%) 162.93
telnet 4843 ( 0.01%) 355876 ( 0.00%) 73.48
ssh 1080675 ( 2.94%) 993998333 ( 3.50%) 919.79
dns 3318 ( 0.01%) 326577 ( 0.00%) 98.43
bgp 627 ( 0.00%) 115117 ( 0.00%) 183.60
napster 97 ( 0.00%) 6259 ( 0.00%) 64.53
realaud 15 ( 0.00%) 1345 ( 0.00%) 89.67
rtsp 19309 ( 0.05%) 28610589 ( 0.10%) 1481.72
icecast 7387 ( 0.02%) 5839584 ( 0.02%) 790.52
hotline 25 ( 0.00%) 1556 ( 0.00%) 62.24
other 5146935 ( 14.01%) 3488111108 ( 12.29%) 677.71
udp 10231751 ( 27.85%) 6145651321 ( 21.66%) 600.65
dns 334599 ( 0.91%) 82596209 ( 0.29%) 246.85
realaud 9 ( 0.00%) 936 ( 0.00%) 104.00
halflif 100 ( 0.00%) 13372 ( 0.00%) 133.72
starcra 25 ( 0.00%) 1872 ( 0.00%) 74.88
everque 371 ( 0.00%) 138643 ( 0.00%) 373.70
unreal 113 ( 0.00%) 13988 ( 0.00%) 123.79
quake 8 ( 0.00%) 696 ( 0.00%) 87.00
cuseeme 2 ( 0.00%) 474 ( 0.00%) 237.00
other 9061163 ( 24.66%) 6012185768 ( 21.19%) 663.51
icmp 1807119 ( 4.92%) 143979559 ( 0.51%) 79.67
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 3124 ( 0.01%) 1117016 ( 0.00%) 357.56
ip6 2421886 ( 6.59%) 2287670585 ( 8.06%) 944.58
pim 236 ( 0.00%) 14160 ( 0.00%) 60.00
other 86065 ( 0.23%) 37838373 ( 0.13%) 439.65
frag 6700511 ( 18.24%) 5111000647 ( 18.01%) 762.78
ip6 154929 ( 0.42%) 87971518 ( 0.31%) 567.82
tcp6 82843 ( 0.23%) 74201784 ( 0.26%) 895.69
http(s) 15525 ( 0.04%) 20118902 ( 0.07%) 1295.90
http(c) 27676 ( 0.08%) 2438370 ( 0.01%) 88.10
smtp 23 ( 0.00%) 10593 ( 0.00%) 460.57
dns 137 ( 0.00%) 18833 ( 0.00%) 137.47
bgp 88 ( 0.00%) 12614 ( 0.00%) 143.34
other 39394 ( 0.11%) 51602472 ( 0.18%) 1309.91
udp6 42813 ( 0.12%) 9536023 ( 0.03%) 222.74
dns 39169 ( 0.11%) 8935600 ( 0.03%) 228.13
everque 2 ( 0.00%) 208 ( 0.00%) 104.00
quake 1 ( 0.00%) 117 ( 0.00%) 117.00
other 3641 ( 0.01%) 600098 ( 0.00%) 164.82
icmp6 28917 ( 0.08%) 3989871 ( 0.01%) 137.98
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 241 ( 0.00%) 228212 ( 0.00%) 946.94
tcpdump file: 201204011415.dump.gz (778.48 MB)