Traffic Trace Info
DumpFile: 201204041400.dump
FileSize: 2190.46MB
Id: 201204041400
StartTime: Wed Apr 4 14:00:01 2012
EndTime: Wed Apr 4 14:15:00 2012
TotalTime: 899.38 seconds
TotalCapSize: 1733.02MB CapLen: 96 bytes
# of packets: 29978501 (19859.38MB)
AvgRate: 185.18Mbps stddev:24.04M
IP flow (unique src/dst pair) Information
# of flows: 1798401 (avg. 16.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.1% 2.3% 1.7% 1.5% 1.0% 1.0% 1.0% 0.9% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 1385405
Top 10 bandwidth usage (bytes/total in %):
21.9% 7.2% 6.3% 6.3% 5.2% 4.2% 3.9% 3.5% 2.7% 2.4%
# of IPv6 addresses: 4964
Top 10 bandwidth usage (bytes/total in %):
26.2% 25.9% 25.9% 9.1% 9.0% 8.5% 6.8% 6.3% 6.3% 6.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204041400.pktlen.png)
detailed numbers
[ 32- 63]: 4849702
[ 64- 127]: 9486455
[ 128- 255]: 1250357
[ 256- 511]: 842686
[ 512- 1023]: 865395
[ 1024- 2047]: 12683906
Protocol Breakdown
![[protocol breakdown chart]](201204041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29978501 (100.00%) 20824072769 (100.00%) 694.63
ip 29715632 ( 99.12%) 20692592350 ( 99.37%) 696.35
tcp 23329673 ( 77.82%) 18241854652 ( 87.60%) 781.92
http(s) 10159680 ( 33.89%) 12917431305 ( 62.03%) 1271.44
http(c) 6755139 ( 22.53%) 1269247223 ( 6.10%) 187.89
squid 34650 ( 0.12%) 20234477 ( 0.10%) 583.97
smtp 53475 ( 0.18%) 23162109 ( 0.11%) 433.14
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 8958 ( 0.03%) 826577 ( 0.00%) 92.27
pop3 4708 ( 0.02%) 1825582 ( 0.01%) 387.76
imap 24175 ( 0.08%) 21307414 ( 0.10%) 881.38
telnet 35889 ( 0.12%) 2630199 ( 0.01%) 73.29
ssh 2300546 ( 7.67%) 1451212046 ( 6.97%) 630.81
dns 2104 ( 0.01%) 276253 ( 0.00%) 131.30
bgp 684 ( 0.00%) 161866 ( 0.00%) 236.65
napster 32 ( 0.00%) 2076 ( 0.00%) 64.88
realaud 9 ( 0.00%) 606 ( 0.00%) 67.33
rtsp 8 ( 0.00%) 492 ( 0.00%) 61.50
icecast 23979 ( 0.08%) 15970538 ( 0.08%) 666.02
hotline 10 ( 0.00%) 610 ( 0.00%) 61.00
other 3925617 ( 13.09%) 2517564673 ( 12.09%) 641.32
udp 3429982 ( 11.44%) 1388370784 ( 6.67%) 404.77
dns 518099 ( 1.73%) 116377908 ( 0.56%) 224.62
rip 2 ( 0.00%) 141 ( 0.00%) 70.50
realaud 8 ( 0.00%) 995 ( 0.00%) 124.38
halflif 177 ( 0.00%) 45328 ( 0.00%) 256.09
starcra 22 ( 0.00%) 3662 ( 0.00%) 166.45
everque 269 ( 0.00%) 47226 ( 0.00%) 175.56
unreal 20 ( 0.00%) 2625 ( 0.00%) 131.25
quake 35 ( 0.00%) 4828 ( 0.00%) 137.94
cuseeme 6 ( 0.00%) 800 ( 0.00%) 133.33
other 2911137 ( 9.71%) 1271778182 ( 6.11%) 436.87
icmp 1618830 ( 5.40%) 129563901 ( 0.62%) 80.04
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 22917 ( 0.08%) 4635022 ( 0.02%) 202.25
ip6 1298866 ( 4.33%) 925500878 ( 4.44%) 712.55
pim 232 ( 0.00%) 13920 ( 0.00%) 60.00
other 14948 ( 0.05%) 2634033 ( 0.01%) 176.21
frag 11117 ( 0.04%) 8646899 ( 0.04%) 777.81
ip6 262869 ( 0.88%) 131480419 ( 0.63%) 500.17
tcp6 168076 ( 0.56%) 107712647 ( 0.52%) 640.86
http(s) 57221 ( 0.19%) 70449994 ( 0.34%) 1231.19
http(c) 80418 ( 0.27%) 6860222 ( 0.03%) 85.31
smtp 176 ( 0.00%) 65463 ( 0.00%) 371.95
ftp 46 ( 0.00%) 6488 ( 0.00%) 141.04
dns 501 ( 0.00%) 73797 ( 0.00%) 147.30
bgp 90 ( 0.00%) 18657 ( 0.00%) 207.30
other 29624 ( 0.10%) 30238026 ( 0.15%) 1020.73
udp6 69181 ( 0.23%) 19073753 ( 0.09%) 275.71
dns 66435 ( 0.22%) 18350921 ( 0.09%) 276.22
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
unreal 1 ( 0.00%) 101 ( 0.00%) 101.00
other 2744 ( 0.01%) 722624 ( 0.00%) 263.35
icmp6 24177 ( 0.08%) 3549443 ( 0.02%) 146.81
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1321 ( 0.00%) 1129084 ( 0.01%) 854.72
tcpdump file: 201204041400.dump.gz (756.91 MB)