Traffic Trace Info
DumpFile: 201204031400.dump
FileSize: 2104.33MB
Id: 201204031400
StartTime: Tue Apr 3 14:00:00 2012
EndTime: Tue Apr 3 14:15:00 2012
TotalTime: 900.07 seconds
TotalCapSize: 1660.38MB CapLen: 96 bytes
# of packets: 29094387 (19293.44MB)
AvgRate: 179.84Mbps stddev:25.65M
IP flow (unique src/dst pair) Information
# of flows: 2522013 (avg. 11.54 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 1.6% 1.4% 1.2% 1.2% 1.2% 1.1% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1742306
Top 10 bandwidth usage (bytes/total in %):
9.9% 7.8% 7.5% 5.9% 5.9% 4.2% 3.5% 3.5% 3.4% 2.6%
# of IPv6 addresses: 5457
Top 10 bandwidth usage (bytes/total in %):
36.6% 16.0% 12.5% 9.8% 9.6% 9.2% 8.7% 8.0% 7.0% 6.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204031400.pktlen.png)
detailed numbers
[ 32- 63]: 6020258
[ 64- 127]: 7962295
[ 128- 255]: 1050860
[ 256- 511]: 786656
[ 512- 1023]: 743995
[ 1024- 2047]: 12530323
Protocol Breakdown
![[protocol breakdown chart]](201204031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29094387 (100.00%) 20230643233 (100.00%) 695.35
ip 28725696 ( 98.73%) 19968364941 ( 98.70%) 695.14
tcp 21193224 ( 72.84%) 16611617405 ( 82.11%) 783.82
http(s) 8699458 ( 29.90%) 11226937950 ( 55.49%) 1290.53
http(c) 5699817 ( 19.59%) 844699554 ( 4.18%) 148.20
squid 93171 ( 0.32%) 85094249 ( 0.42%) 913.31
smtp 41948 ( 0.14%) 12676858 ( 0.06%) 302.20
nntp 8 ( 0.00%) 500 ( 0.00%) 62.50
ftp 6981 ( 0.02%) 633980 ( 0.00%) 90.82
pop3 6218 ( 0.02%) 2720248 ( 0.01%) 437.48
imap 2397 ( 0.01%) 489952 ( 0.00%) 204.40
telnet 3039 ( 0.01%) 224054 ( 0.00%) 73.73
ssh 1322267 ( 4.54%) 1180012206 ( 5.83%) 892.42
dns 4916 ( 0.02%) 2302908 ( 0.01%) 468.45
bgp 608 ( 0.00%) 104953 ( 0.00%) 172.62
napster 81 ( 0.00%) 7477 ( 0.00%) 92.31
realaud 7 ( 0.00%) 440 ( 0.00%) 62.86
rtsp 4399 ( 0.02%) 4973506 ( 0.02%) 1130.60
icecast 16732 ( 0.06%) 12516306 ( 0.06%) 748.05
hotline 24 ( 0.00%) 1821 ( 0.00%) 75.88
other 5291152 ( 18.19%) 3238220383 ( 16.01%) 612.01
udp 3462315 ( 11.90%) 1508490784 ( 7.46%) 435.69
dns 478948 ( 1.65%) 109912831 ( 0.54%) 229.49
realaud 5 ( 0.00%) 612 ( 0.00%) 122.40
halflif 26 ( 0.00%) 2050 ( 0.00%) 78.85
starcra 42 ( 0.00%) 4982 ( 0.00%) 118.62
everque 397 ( 0.00%) 93016 ( 0.00%) 234.30
unreal 75 ( 0.00%) 29149 ( 0.00%) 388.65
quake 22 ( 0.00%) 2375 ( 0.00%) 107.95
other 2982537 ( 10.25%) 1398303327 ( 6.91%) 468.83
icmp 2194072 ( 7.54%) 167452160 ( 0.83%) 76.32
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 39838 ( 0.14%) 7518548 ( 0.04%) 188.73
ip6 1795282 ( 6.17%) 1631143253 ( 8.06%) 908.57
pim 229 ( 0.00%) 13740 ( 0.00%) 60.00
other 40552 ( 0.14%) 42109891 ( 0.21%) 1038.42
frag 1172 ( 0.00%) 1090993 ( 0.01%) 930.88
ip6 368691 ( 1.27%) 262278292 ( 1.30%) 711.38
tcp6 173655 ( 0.60%) 141653062 ( 0.70%) 815.72
http(s) 35255 ( 0.12%) 37751264 ( 0.19%) 1070.81
http(c) 27642 ( 0.10%) 2491154 ( 0.01%) 90.12
squid 24 ( 0.00%) 2885 ( 0.00%) 120.21
smtp 53 ( 0.00%) 18941 ( 0.00%) 357.38
dns 514 ( 0.00%) 77486 ( 0.00%) 150.75
bgp 92 ( 0.00%) 15563 ( 0.00%) 169.16
other 110075 ( 0.38%) 101295769 ( 0.50%) 920.24
udp6 160345 ( 0.55%) 113238298 ( 0.56%) 706.22
dns 62880 ( 0.22%) 16551164 ( 0.08%) 263.22
everque 2 ( 0.00%) 213 ( 0.00%) 106.50
cuseeme 2 ( 0.00%) 221 ( 0.00%) 110.50
other 97461 ( 0.33%) 96686700 ( 0.48%) 992.06
icmp6 30426 ( 0.10%) 4276784 ( 0.02%) 140.56
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 4152 ( 0.01%) 3094756 ( 0.02%) 745.37
tcpdump file: 201204031400.dump.gz (715.13 MB)