Traffic Trace Info
DumpFile: 201204061400.dump
FileSize: 1844.86MB
Id: 201204061400
StartTime: Fri Apr 6 14:00:00 2012
EndTime: Fri Apr 6 14:15:00 2012
TotalTime: 899.36 seconds
TotalCapSize: 1458.02MB CapLen: 96 bytes
# of packets: 25351621 (18119.60MB)
AvgRate: 168.99Mbps stddev:24.29M
IP flow (unique src/dst pair) Information
# of flows: 1986335 (avg. 12.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 2.1% 1.6% 1.6% 1.5% 1.4% 1.3% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1486752
Top 10 bandwidth usage (bytes/total in %):
15.8% 8.3% 5.9% 5.6% 3.7% 3.5% 3.0% 2.8% 2.5% 2.4%
# of IPv6 addresses: 5004
Top 10 bandwidth usage (bytes/total in %):
78.4% 63.0% 18.7% 7.1% 7.1% 3.8% 3.8% 1.8% 1.8% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204061400.pktlen.png)
detailed numbers
[ 32- 63]: 4876538
[ 64- 127]: 6016204
[ 128- 255]: 1202857
[ 256- 511]: 757275
[ 512- 1023]: 781041
[ 1024- 2047]: 11717706
Protocol Breakdown
![[protocol breakdown chart]](201204061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25351621 (100.00%) 18999781125 (100.00%) 749.45
ip 24699680 ( 97.43%) 18312749547 ( 96.38%) 741.42
tcp 17790681 ( 70.18%) 14983950147 ( 78.86%) 842.24
http(s) 9041082 ( 35.66%) 12028913545 ( 63.31%) 1330.47
http(c) 5270884 ( 20.79%) 1202425190 ( 6.33%) 228.13
squid 100490 ( 0.40%) 84822542 ( 0.45%) 844.09
smtp 43494 ( 0.17%) 10323952 ( 0.05%) 237.36
ftp 14283 ( 0.06%) 1169266 ( 0.01%) 81.86
pop3 10017 ( 0.04%) 7990972 ( 0.04%) 797.74
imap 2723 ( 0.01%) 661724 ( 0.00%) 243.01
telnet 182 ( 0.00%) 11664 ( 0.00%) 64.09
ssh 59814 ( 0.24%) 9989443 ( 0.05%) 167.01
dns 2460 ( 0.01%) 299933 ( 0.00%) 121.92
bgp 624 ( 0.00%) 111366 ( 0.00%) 178.47
napster 187 ( 0.00%) 18705 ( 0.00%) 100.03
realaud 57 ( 0.00%) 6392 ( 0.00%) 112.14
rtsp 8 ( 0.00%) 564 ( 0.00%) 70.50
icecast 7853 ( 0.03%) 6226227 ( 0.03%) 792.85
hotline 20 ( 0.00%) 2291 ( 0.00%) 114.55
other 3236503 ( 12.77%) 1630976371 ( 8.58%) 503.93
udp 3214231 ( 12.68%) 1615180502 ( 8.50%) 502.51
dns 492655 ( 1.94%) 124917134 ( 0.66%) 253.56
realaud 10 ( 0.00%) 1135 ( 0.00%) 113.50
halflif 52 ( 0.00%) 8955 ( 0.00%) 172.21
starcra 54 ( 0.00%) 4213 ( 0.00%) 78.02
everque 7507 ( 0.03%) 6291244 ( 0.03%) 838.05
unreal 29 ( 0.00%) 4582 ( 0.00%) 158.00
quake 26 ( 0.00%) 2815 ( 0.00%) 108.27
cuseeme 4 ( 0.00%) 386 ( 0.00%) 96.50
other 2713507 ( 10.70%) 1483889719 ( 7.81%) 546.85
icmp 1718086 ( 6.78%) 143552356 ( 0.76%) 83.55
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4529 ( 0.02%) 1260758 ( 0.01%) 278.37
ip6 1957807 ( 7.72%) 1566490688 ( 8.24%) 800.13
pim 161 ( 0.00%) 9660 ( 0.00%) 60.00
other 14000 ( 0.06%) 2286166 ( 0.01%) 163.30
frag 1740 ( 0.01%) 1485213 ( 0.01%) 853.57
ip6 651941 ( 2.57%) 687031578 ( 3.62%) 1053.82
tcp6 463272 ( 1.83%) 606240663 ( 3.19%) 1308.61
http(s) 19006 ( 0.07%) 22122344 ( 0.12%) 1163.97
http(c) 30069 ( 0.12%) 2512191 ( 0.01%) 83.55
smtp 65 ( 0.00%) 41069 ( 0.00%) 631.83
dns 326 ( 0.00%) 60600 ( 0.00%) 185.89
bgp 84 ( 0.00%) 13475 ( 0.00%) 160.42
other 413722 ( 1.63%) 581490984 ( 3.06%) 1405.51
udp6 95671 ( 0.38%) 34044096 ( 0.18%) 355.85
dns 67298 ( 0.27%) 19682954 ( 0.10%) 292.47
realaud 1 ( 0.00%) 119 ( 0.00%) 119.00
halflif 2 ( 0.00%) 211 ( 0.00%) 105.50
starcra 1 ( 0.00%) 117 ( 0.00%) 117.00
everque 2 ( 0.00%) 211 ( 0.00%) 105.50
cuseeme 1 ( 0.00%) 109 ( 0.00%) 109.00
other 28366 ( 0.11%) 14360375 ( 0.08%) 506.25
icmp6 33269 ( 0.13%) 4701166 ( 0.02%) 141.31
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 59615 ( 0.24%) 42030161 ( 0.22%) 705.03
tcpdump file: 201204061400.dump.gz (590.98 MB)