Traffic Trace Info
DumpFile: 201204071400.dump
FileSize: 2248.24MB
Id: 201204071400
StartTime: Sat Apr 7 14:00:00 2012
EndTime: Sat Apr 7 14:15:00 2012
TotalTime: 900.06 seconds
TotalCapSize: 1770.82MB CapLen: 96 bytes
# of packets: 31287198 (24036.73MB)
AvgRate: 224.01Mbps stddev:47.86M
IP flow (unique src/dst pair) Information
# of flows: 2135379 (avg. 14.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 2.6% 2.2% 1.7% 1.6% 1.6% 1.4% 1.4% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 1545596
Top 10 bandwidth usage (bytes/total in %):
27.1% 14.9% 6.4% 4.6% 3.5% 3.5% 3.2% 3.0% 3.0% 2.8%
# of IPv6 addresses: 4645
Top 10 bandwidth usage (bytes/total in %):
42.4% 24.5% 20.8% 18.5% 12.9% 7.3% 6.1% 6.1% 5.9% 5.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204071400.pktlen.png)
detailed numbers
[ 32- 63]: 6401907
[ 64- 127]: 6551806
[ 128- 255]: 891521
[ 256- 511]: 668626
[ 512- 1023]: 903195
[ 1024- 2047]: 15870143
Protocol Breakdown
![[protocol breakdown chart]](201204071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31287198 (100.00%) 25204336536 (100.00%) 805.58
ip 31029484 ( 99.18%) 25080491642 ( 99.51%) 808.28
tcp 23636237 ( 75.55%) 21137625890 ( 83.87%) 894.29
http(s) 13433449 ( 42.94%) 17748644908 ( 70.42%) 1321.23
http(c) 5650941 ( 18.06%) 672332204 ( 2.67%) 118.98
squid 64256 ( 0.21%) 56592906 ( 0.22%) 880.74
smtp 37323 ( 0.12%) 9072523 ( 0.04%) 243.08
ftp 11939 ( 0.04%) 1141529 ( 0.00%) 95.61
pop3 3996 ( 0.01%) 1634949 ( 0.01%) 409.15
imap 2938 ( 0.01%) 1105035 ( 0.00%) 376.12
telnet 647 ( 0.00%) 43250 ( 0.00%) 66.85
ssh 162060 ( 0.52%) 30390594 ( 0.12%) 187.53
dns 1894 ( 0.01%) 240971 ( 0.00%) 127.23
bgp 632 ( 0.00%) 120827 ( 0.00%) 191.18
napster 52 ( 0.00%) 4664 ( 0.00%) 89.69
realaud 47 ( 0.00%) 3727 ( 0.00%) 79.30
rtsp 45 ( 0.00%) 10170 ( 0.00%) 226.00
icecast 1179 ( 0.00%) 632916 ( 0.00%) 536.82
hotline 32 ( 0.00%) 2574 ( 0.00%) 80.44
other 4264807 ( 13.63%) 2615652143 ( 10.38%) 613.31
udp 4114016 ( 13.15%) 2108188709 ( 8.36%) 512.44
dns 344864 ( 1.10%) 81403053 ( 0.32%) 236.04
realaud 13 ( 0.00%) 2005 ( 0.00%) 154.23
halflif 20 ( 0.00%) 2771 ( 0.00%) 138.55
starcra 47 ( 0.00%) 5445 ( 0.00%) 115.85
everque 337 ( 0.00%) 56936 ( 0.00%) 168.95
unreal 124 ( 0.00%) 38870 ( 0.00%) 313.47
quake 29 ( 0.00%) 2447 ( 0.00%) 84.38
cuseeme 8 ( 0.00%) 822 ( 0.00%) 102.75
other 3492134 ( 11.16%) 2010059166 ( 7.98%) 575.60
icmp 1605202 ( 5.13%) 126444598 ( 0.50%) 78.77
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6861 ( 0.02%) 1079990 ( 0.00%) 157.41
ip6 1648117 ( 5.27%) 1702516445 ( 6.75%) 1033.01
pim 148 ( 0.00%) 8880 ( 0.00%) 60.00
other 18718 ( 0.06%) 4607860 ( 0.02%) 246.17
frag 658706 ( 2.11%) 502595252 ( 1.99%) 763.00
ip6 257714 ( 0.82%) 123844894 ( 0.49%) 480.55
tcp6 175452 ( 0.56%) 101018469 ( 0.40%) 575.76
http(s) 8102 ( 0.03%) 9411033 ( 0.04%) 1161.57
http(c) 21416 ( 0.07%) 1755223 ( 0.01%) 81.96
smtp 86 ( 0.00%) 55520 ( 0.00%) 645.58
dns 291 ( 0.00%) 53859 ( 0.00%) 185.08
bgp 86 ( 0.00%) 11980 ( 0.00%) 139.30
other 145471 ( 0.46%) 89730854 ( 0.36%) 616.83
udp6 51429 ( 0.16%) 16007532 ( 0.06%) 311.25
dns 44692 ( 0.14%) 11270555 ( 0.04%) 252.18
halflif 4 ( 0.00%) 405 ( 0.00%) 101.25
starcra 1 ( 0.00%) 109 ( 0.00%) 109.00
unreal 2 ( 0.00%) 219 ( 0.00%) 109.50
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 6729 ( 0.02%) 4736138 ( 0.02%) 703.84
icmp6 26194 ( 0.08%) 3538623 ( 0.01%) 135.09
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 4525 ( 0.01%) 3264778 ( 0.01%) 721.50
tcpdump file: 201204071400.dump.gz (719.95 MB)