Traffic Trace Info
DumpFile: 201204011430.dump
FileSize: 2383.21MB
Id: 201204011430
StartTime: Sun Apr 1 14:30:00 2012
EndTime: Sun Apr 1 14:45:00 2012
TotalTime: 899.61 seconds
TotalCapSize: 1887.19MB CapLen: 96 bytes
# of packets: 32506743 (25812.83MB)
AvgRate: 240.71Mbps stddev:33.24M
IP flow (unique src/dst pair) Information
# of flows: 1765351 (avg. 18.41 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 3.6% 3.0% 2.5% 2.5% 2.4% 2.4% 2.3% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 1373351
Top 10 bandwidth usage (bytes/total in %):
20.4% 13.6% 7.8% 7.7% 6.6% 4.3% 3.6% 3.6% 3.6% 3.3%
# of IPv6 addresses: 5088
Top 10 bandwidth usage (bytes/total in %):
68.8% 67.7% 5.9% 5.8% 4.4% 3.4% 2.4% 1.6% 1.3% 1.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204011430.pktlen.png)
detailed numbers
[ 32- 63]: 5478088
[ 64- 127]: 7171085
[ 128- 255]: 1031102
[ 256- 511]: 779141
[ 512- 1023]: 849213
[ 1024- 2047]: 17198114
Protocol Breakdown
![[protocol breakdown chart]](201204011430.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32506743 (100.00%) 27066715484 (100.00%) 832.65
ip 32369885 ( 99.58%) 26978003097 ( 99.67%) 833.43
tcp 25140827 ( 77.34%) 23249047144 ( 85.90%) 924.75
http(s) 12126797 ( 37.31%) 16273932279 ( 60.13%) 1341.98
http(c) 5711660 ( 17.57%) 1529173488 ( 5.65%) 267.73
squid 273342 ( 0.84%) 268379239 ( 0.99%) 981.84
smtp 31350 ( 0.10%) 4843359 ( 0.02%) 154.49
nntp 19 ( 0.00%) 1182 ( 0.00%) 62.21
ftp 8539 ( 0.03%) 844420 ( 0.00%) 98.89
pop3 4001 ( 0.01%) 791217 ( 0.00%) 197.75
imap 1347 ( 0.00%) 163673 ( 0.00%) 121.51
telnet 4656 ( 0.01%) 343172 ( 0.00%) 73.71
ssh 1309978 ( 4.03%) 1196181378 ( 4.42%) 913.13
dns 3266 ( 0.01%) 321505 ( 0.00%) 98.44
bgp 614 ( 0.00%) 98286 ( 0.00%) 160.07
napster 219 ( 0.00%) 13796 ( 0.00%) 63.00
realaud 16 ( 0.00%) 992 ( 0.00%) 62.00
rtsp 17436 ( 0.05%) 25826903 ( 0.10%) 1481.24
icecast 7551 ( 0.02%) 5937121 ( 0.02%) 786.27
hotline 30 ( 0.00%) 1918 ( 0.00%) 63.93
other 5640006 ( 17.35%) 3942193216 ( 14.56%) 698.97
udp 2760528 ( 8.49%) 1040385373 ( 3.84%) 376.88
dns 403630 ( 1.24%) 96391704 ( 0.36%) 238.81
realaud 20 ( 0.00%) 1503 ( 0.00%) 75.15
halflif 79 ( 0.00%) 9933 ( 0.00%) 125.73
starcra 17 ( 0.00%) 1832 ( 0.00%) 107.76
everque 405 ( 0.00%) 174993 ( 0.00%) 432.08
unreal 91 ( 0.00%) 12035 ( 0.00%) 132.25
quake 13 ( 0.00%) 1447 ( 0.00%) 111.31
cuseeme 9 ( 0.00%) 1512 ( 0.00%) 168.00
other 2351904 ( 7.24%) 943475175 ( 3.49%) 401.15
icmp 2051660 ( 6.31%) 536258707 ( 1.98%) 261.38
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2910 ( 0.01%) 1000884 ( 0.00%) 343.95
ip6 2330060 ( 7.17%) 2112104627 ( 7.80%) 906.46
pim 346 ( 0.00%) 20760 ( 0.00%) 60.00
other 83369 ( 0.26%) 39166332 ( 0.14%) 469.79
frag 9572 ( 0.03%) 7386516 ( 0.03%) 771.68
ip6 136858 ( 0.42%) 88712387 ( 0.33%) 648.21
tcp6 61458 ( 0.19%) 72216287 ( 0.27%) 1175.05
http(s) 7168 ( 0.02%) 9028066 ( 0.03%) 1259.50
http(c) 9573 ( 0.03%) 891231 ( 0.00%) 93.10
squid 1176 ( 0.00%) 872890 ( 0.00%) 742.25
smtp 18 ( 0.00%) 9225 ( 0.00%) 512.50
ftp 1 ( 0.00%) 94 ( 0.00%) 94.00
dns 226 ( 0.00%) 47904 ( 0.00%) 211.96
bgp 87 ( 0.00%) 12444 ( 0.00%) 143.03
other 43209 ( 0.13%) 61354433 ( 0.23%) 1419.95
udp6 46178 ( 0.14%) 12119166 ( 0.04%) 262.44
dns 40676 ( 0.13%) 9408375 ( 0.03%) 231.30
realaud 2 ( 0.00%) 211 ( 0.00%) 105.50
unreal 1 ( 0.00%) 111 ( 0.00%) 111.00
cuseeme 1 ( 0.00%) 110 ( 0.00%) 110.00
other 5498 ( 0.02%) 2710359 ( 0.01%) 492.97
icmp6 28722 ( 0.09%) 3989372 ( 0.01%) 138.90
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 388 ( 0.00%) 372306 ( 0.00%) 959.55
tcpdump file: 201204011430.dump.gz (753.80 MB)