Traffic Trace Info
DumpFile: 201204011445.dump
FileSize: 2370.00MB
Id: 201204011445
StartTime: Sun Apr 1 14:45:00 2012
EndTime: Sun Apr 1 14:59:36 2012
TotalTime: 875.86 seconds
TotalCapSize: 1873.97MB CapLen: 96 bytes
# of packets: 32507273 (25762.46MB)
AvgRate: 246.77Mbps stddev:24.20M
IP flow (unique src/dst pair) Information
# of flows: 1656565 (avg. 19.62 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 4.1% 3.0% 2.1% 1.9% 1.8% 1.8% 1.4% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 1320218
Top 10 bandwidth usage (bytes/total in %):
15.9% 12.9% 7.4% 6.1% 6.0% 5.1% 4.8% 4.3% 3.0% 2.9%
# of IPv6 addresses: 5041
Top 10 bandwidth usage (bytes/total in %):
46.0% 43.4% 10.2% 4.8% 3.8% 2.9% 2.7% 2.1% 1.8% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204011445.pktlen.png)
detailed numbers
[ 32- 63]: 5764988
[ 64- 127]: 7080608
[ 128- 255]: 961458
[ 256- 511]: 702168
[ 512- 1023]: 795815
[ 1024- 2047]: 17202236
Protocol Breakdown
![[protocol breakdown chart]](201204011445.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32507273 (100.00%) 27013902164 (100.00%) 831.01
ip 32403119 ( 99.68%) 26976344018 ( 99.86%) 832.52
tcp 25140717 ( 77.34%) 23151674808 ( 85.70%) 920.88
http(s) 11806665 ( 36.32%) 15726593175 ( 58.22%) 1332.01
http(c) 5926614 ( 18.23%) 1753706307 ( 6.49%) 295.90
squid 317115 ( 0.98%) 317292532 ( 1.17%) 1000.56
smtp 29682 ( 0.09%) 6556118 ( 0.02%) 220.88
nntp 18 ( 0.00%) 1114 ( 0.00%) 61.89
ftp 7758 ( 0.02%) 797485 ( 0.00%) 102.80
pop3 3483 ( 0.01%) 510519 ( 0.00%) 146.57
imap 1018 ( 0.00%) 157648 ( 0.00%) 154.86
telnet 4223 ( 0.01%) 311813 ( 0.00%) 73.84
ssh 1326817 ( 4.08%) 1206161633 ( 4.46%) 909.06
dns 4830 ( 0.01%) 434411 ( 0.00%) 89.94
bgp 618 ( 0.00%) 105474 ( 0.00%) 170.67
napster 121 ( 0.00%) 8247 ( 0.00%) 68.16
realaud 15 ( 0.00%) 2289 ( 0.00%) 152.60
rtsp 9 ( 0.00%) 759 ( 0.00%) 84.33
icecast 29670 ( 0.09%) 7057503 ( 0.03%) 237.87
hotline 24 ( 0.00%) 3612 ( 0.00%) 150.50
other 5682036 ( 17.48%) 4131974109 ( 15.30%) 727.20
udp 2770131 ( 8.52%) 1072040683 ( 3.97%) 387.00
dns 358949 ( 1.10%) 93775431 ( 0.35%) 261.25
realaud 10 ( 0.00%) 1179 ( 0.00%) 117.90
halflif 92 ( 0.00%) 14446 ( 0.00%) 157.02
starcra 42 ( 0.00%) 3904 ( 0.00%) 92.95
everque 318 ( 0.00%) 68873 ( 0.00%) 216.58
unreal 32 ( 0.00%) 4811 ( 0.00%) 150.34
quake 25 ( 0.00%) 2860 ( 0.00%) 114.40
cuseeme 6 ( 0.00%) 1073 ( 0.00%) 178.83
other 2408825 ( 7.41%) 978035257 ( 3.62%) 406.02
icmp 1979016 ( 6.09%) 490071791 ( 1.81%) 247.63
ipip 179 ( 0.00%) 18646 ( 0.00%) 104.17
ipsec 2933 ( 0.01%) 1022510 ( 0.00%) 348.62
ip6 2301570 ( 7.08%) 2006277646 ( 7.43%) 871.70
pim 304 ( 0.00%) 18240 ( 0.00%) 60.00
other 208269 ( 0.64%) 255219694 ( 0.94%) 1225.43
frag 5341 ( 0.02%) 4159374 ( 0.02%) 778.76
ip6 104154 ( 0.32%) 37558146 ( 0.14%) 360.60
tcp6 33864 ( 0.10%) 23826901 ( 0.09%) 703.61
http(s) 4883 ( 0.02%) 5716733 ( 0.02%) 1170.74
http(c) 11136 ( 0.03%) 1012709 ( 0.00%) 90.94
squid 622 ( 0.00%) 517817 ( 0.00%) 832.50
smtp 122 ( 0.00%) 38184 ( 0.00%) 312.98
dns 177 ( 0.00%) 22573 ( 0.00%) 127.53
bgp 92 ( 0.00%) 13958 ( 0.00%) 151.72
other 16832 ( 0.05%) 16504927 ( 0.06%) 980.57
udp6 42453 ( 0.13%) 9678987 ( 0.04%) 227.99
dns 39270 ( 0.12%) 9166366 ( 0.03%) 233.42
halflif 1 ( 0.00%) 111 ( 0.00%) 111.00
starcra 1 ( 0.00%) 93 ( 0.00%) 93.00
everque 1 ( 0.00%) 105 ( 0.00%) 105.00
other 3180 ( 0.01%) 512312 ( 0.00%) 161.10
icmp6 27532 ( 0.08%) 3857135 ( 0.01%) 140.10
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 193 ( 0.00%) 179867 ( 0.00%) 931.95
tcpdump file: 201204011445.dump.gz (751.22 MB)