Traffic Trace Info
DumpFile: 201204051400.dump
FileSize: 1950.49MB
Id: 201204051400
StartTime: Thu Apr 5 14:00:00 2012
EndTime: Thu Apr 5 14:15:00 2012
TotalTime: 900.13 seconds
TotalCapSize: 1544.47MB CapLen: 96 bytes
# of packets: 26608386 (19030.28MB)
AvgRate: 177.35Mbps stddev:26.61M
IP flow (unique src/dst pair) Information
# of flows: 1908228 (avg. 13.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 4.9% 3.4% 3.3% 3.0% 2.6% 2.2% 1.9% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 1411390
Top 10 bandwidth usage (bytes/total in %):
8.7% 7.2% 6.9% 6.6% 6.6% 6.4% 5.1% 5.1% 4.7% 4.5%
# of IPv6 addresses: 5245
Top 10 bandwidth usage (bytes/total in %):
79.7% 75.3% 6.4% 6.4% 2.7% 2.7% 2.7% 2.6% 1.6% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204051400.pktlen.png)
detailed numbers
[ 32- 63]: 4859827
[ 64- 127]: 6895518
[ 128- 255]: 868516
[ 256- 511]: 773926
[ 512- 1023]: 712559
[ 1024- 2047]: 12498040
Protocol Breakdown
![[protocol breakdown chart]](201204051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26608386 (100.00%) 19954696714 (100.00%) 749.94
ip 25821570 ( 97.04%) 19150185644 ( 95.97%) 741.64
tcp 19806598 ( 74.44%) 16606517819 ( 83.22%) 838.43
http(s) 9131046 ( 34.32%) 12107155997 ( 60.67%) 1325.93
http(c) 5446579 ( 20.47%) 844608974 ( 4.23%) 155.07
squid 29536 ( 0.11%) 16106470 ( 0.08%) 545.32
smtp 56434 ( 0.21%) 19604257 ( 0.10%) 347.38
nntp 2 ( 0.00%) 134 ( 0.00%) 67.00
ftp 13331 ( 0.05%) 1208772 ( 0.01%) 90.67
pop3 7601 ( 0.03%) 2077299 ( 0.01%) 273.29
imap 67436 ( 0.25%) 22795920 ( 0.11%) 338.04
telnet 4404 ( 0.02%) 322511 ( 0.00%) 73.23
ssh 1370085 ( 5.15%) 1270045209 ( 6.36%) 926.98
dns 2103 ( 0.01%) 281091 ( 0.00%) 133.66
bgp 621 ( 0.00%) 105241 ( 0.00%) 169.47
napster 45 ( 0.00%) 4244 ( 0.00%) 94.31
realaud 20 ( 0.00%) 1628 ( 0.00%) 81.40
rtsp 18033 ( 0.07%) 23313880 ( 0.12%) 1292.85
icecast 15494 ( 0.06%) 12681014 ( 0.06%) 818.45
other 3643828 ( 13.69%) 2286205178 ( 11.46%) 627.42
udp 2606949 ( 9.80%) 921950254 ( 4.62%) 353.65
dns 509619 ( 1.92%) 121484828 ( 0.61%) 238.38
rip 1 ( 0.00%) 70 ( 0.00%) 70.00
realaud 2 ( 0.00%) 172 ( 0.00%) 86.00
halflif 15 ( 0.00%) 2226 ( 0.00%) 148.40
starcra 37 ( 0.00%) 5715 ( 0.00%) 154.46
everque 2702 ( 0.01%) 2508676 ( 0.01%) 928.45
unreal 9 ( 0.00%) 1535 ( 0.00%) 170.56
quake 10 ( 0.00%) 1395 ( 0.00%) 139.50
cuseeme 1 ( 0.00%) 109 ( 0.00%) 109.00
other 2094390 ( 7.87%) 797894778 ( 4.00%) 380.97
icmp 1652654 ( 6.21%) 130474045 ( 0.65%) 78.95
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 17820 ( 0.07%) 6386232 ( 0.03%) 358.37
ip6 1723292 ( 6.48%) 1482509612 ( 7.43%) 860.28
pim 179 ( 0.00%) 10740 ( 0.00%) 60.00
other 13893 ( 0.05%) 2317672 ( 0.01%) 166.82
frag 765 ( 0.00%) 748413 ( 0.00%) 978.32
ip6 786816 ( 2.96%) 804511070 ( 4.03%) 1022.49
tcp6 634872 ( 2.39%) 723787164 ( 3.63%) 1140.05
http(s) 30863 ( 0.12%) 40569957 ( 0.20%) 1314.52
http(c) 33419 ( 0.13%) 2979028 ( 0.01%) 89.14
squid 440 ( 0.00%) 424164 ( 0.00%) 964.01
smtp 69 ( 0.00%) 33564 ( 0.00%) 486.43
ftp 24 ( 0.00%) 2192 ( 0.00%) 91.33
dns 224 ( 0.00%) 43064 ( 0.00%) 192.25
bgp 90 ( 0.00%) 14704 ( 0.00%) 163.38
other 569743 ( 2.14%) 679720491 ( 3.41%) 1193.03
udp6 122404 ( 0.46%) 75695402 ( 0.38%) 618.41
dns 70555 ( 0.27%) 20890042 ( 0.10%) 296.08
starcra 1 ( 0.00%) 107 ( 0.00%) 107.00
other 51848 ( 0.19%) 54805253 ( 0.27%) 1057.04
icmp6 28218 ( 0.11%) 3973263 ( 0.02%) 140.81
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1205 ( 0.00%) 1039377 ( 0.01%) 862.55
tcpdump file: 201204051400.dump.gz (620.12 MB)