Traffic Trace Info
DumpFile: 201204021400.dump
FileSize: 2570.01MB
Id: 201204021400
StartTime: Mon Apr 2 14:00:00 2012
EndTime: Mon Apr 2 14:15:00 2012
TotalTime: 900.04 seconds
TotalCapSize: 2024.00MB CapLen: 96 bytes
# of packets: 35783258 (26629.18MB)
AvgRate: 248.24Mbps stddev:32.09M
IP flow (unique src/dst pair) Information
# of flows: 1917238 (avg. 18.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.8% 7.2% 4.5% 2.8% 2.2% 2.2% 2.2% 2.0% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1430491
Top 10 bandwidth usage (bytes/total in %):
13.2% 8.1% 8.0% 7.4% 7.3% 6.7% 6.7% 5.0% 4.6% 3.9%
# of IPv6 addresses: 5214
Top 10 bandwidth usage (bytes/total in %):
48.7% 48.7% 18.9% 9.7% 9.5% 9.0% 4.2% 3.9% 2.2% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204021400.pktlen.png)
detailed numbers
[ 32- 63]: 7031604
[ 64- 127]: 8200078
[ 128- 255]: 1211073
[ 256- 511]: 740319
[ 512- 1023]: 1166986
[ 1024- 2047]: 17433198
Protocol Breakdown
![[protocol breakdown chart]](201204021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35783258 (100.00%) 27922715581 (100.00%) 780.33
ip 35478318 ( 99.15%) 27708891176 ( 99.23%) 781.01
tcp 28590306 ( 79.90%) 25259554619 ( 90.46%) 883.50
http(s) 14368097 ( 40.15%) 19380322150 ( 69.41%) 1348.84
http(c) 6886426 ( 19.24%) 1217316240 ( 4.36%) 176.77
squid 39886 ( 0.11%) 22168841 ( 0.08%) 555.81
smtp 68419 ( 0.19%) 33455508 ( 0.12%) 488.98
nntp 18 ( 0.00%) 1106 ( 0.00%) 61.44
ftp 50345 ( 0.14%) 3991994 ( 0.01%) 79.29
pop3 21447 ( 0.06%) 2794762 ( 0.01%) 130.31
imap 2597 ( 0.01%) 369574 ( 0.00%) 142.31
telnet 3899 ( 0.01%) 287448 ( 0.00%) 73.72
ssh 1619394 ( 4.53%) 1322987100 ( 4.74%) 816.96
dns 3794 ( 0.01%) 382992 ( 0.00%) 100.95
bgp 625 ( 0.00%) 108560 ( 0.00%) 173.70
napster 2656 ( 0.01%) 165180 ( 0.00%) 62.19
realaud 34 ( 0.00%) 4099 ( 0.00%) 120.56
rtsp 272371 ( 0.76%) 146654530 ( 0.53%) 538.44
icecast 24377 ( 0.07%) 16004207 ( 0.06%) 656.53
hotline 18 ( 0.00%) 1237 ( 0.00%) 68.72
other 5225901 ( 14.60%) 3112538971 ( 11.15%) 595.60
udp 3521945 ( 9.84%) 1080450589 ( 3.87%) 306.78
dns 483300 ( 1.35%) 112808531 ( 0.40%) 233.41
realaud 6 ( 0.00%) 490 ( 0.00%) 81.67
halflif 17 ( 0.00%) 1283 ( 0.00%) 75.47
starcra 119 ( 0.00%) 14827 ( 0.00%) 124.60
everque 2265 ( 0.01%) 1403852 ( 0.01%) 619.80
unreal 7 ( 0.00%) 1119 ( 0.00%) 159.86
quake 17 ( 0.00%) 1574 ( 0.00%) 92.59
cuseeme 2 ( 0.00%) 169 ( 0.00%) 84.50
other 3026632 ( 8.46%) 965575364 ( 3.46%) 319.03
icmp 1690420 ( 4.72%) 138504100 ( 0.50%) 81.93
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 17574 ( 0.05%) 4217876 ( 0.02%) 240.01
ip6 1640682 ( 4.59%) 1222054960 ( 4.38%) 744.85
pim 290 ( 0.00%) 17400 ( 0.00%) 60.00
other 16916 ( 0.05%) 4072362 ( 0.01%) 240.74
frag 69066 ( 0.19%) 52730138 ( 0.19%) 763.47
ip6 304940 ( 0.85%) 213824405 ( 0.77%) 701.20
tcp6 190677 ( 0.53%) 185523684 ( 0.66%) 972.97
http(s) 49455 ( 0.14%) 57506245 ( 0.21%) 1162.80
http(c) 43776 ( 0.12%) 4062813 ( 0.01%) 92.81
smtp 42 ( 0.00%) 12079 ( 0.00%) 287.60
dns 564 ( 0.00%) 75903 ( 0.00%) 134.58
bgp 89 ( 0.00%) 15155 ( 0.00%) 170.28
other 96751 ( 0.27%) 123851489 ( 0.44%) 1280.11
udp6 73869 ( 0.21%) 21801649 ( 0.08%) 295.14
dns 67856 ( 0.19%) 19251189 ( 0.07%) 283.71
realaud 2 ( 0.00%) 217 ( 0.00%) 108.50
halflif 2 ( 0.00%) 207 ( 0.00%) 103.50
starcra 1 ( 0.00%) 101 ( 0.00%) 101.00
quake 2 ( 0.00%) 217 ( 0.00%) 108.50
cuseeme 1 ( 0.00%) 111 ( 0.00%) 111.00
other 6005 ( 0.02%) 2549607 ( 0.01%) 424.58
icmp6 39059 ( 0.11%) 5423202 ( 0.02%) 138.85
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1220 ( 0.00%) 1060260 ( 0.00%) 869.07
tcpdump file: 201204021400.dump.gz (836.29 MB)