Traffic Trace Info
DumpFile: 201204091400.dump
FileSize: 2444.86MB
Id: 201204091400
StartTime: Mon Apr 9 14:00:00 2012
EndTime: Mon Apr 9 14:15:00 2012
TotalTime: 899.86 seconds
TotalCapSize: 1925.09MB CapLen: 96 bytes
# of packets: 34062865 (23608.78MB)
AvgRate: 220.11Mbps stddev:33.43M
IP flow (unique src/dst pair) Information
# of flows: 2035485 (avg. 16.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 3.7% 3.3% 3.0% 2.4% 2.3% 2.2% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 1498362
Top 10 bandwidth usage (bytes/total in %):
10.8% 10.6% 6.7% 6.1% 5.7% 5.6% 3.9% 3.9% 3.8% 3.7%
# of IPv6 addresses: 5149
Top 10 bandwidth usage (bytes/total in %):
79.4% 75.1% 10.1% 2.7% 2.1% 2.1% 2.0% 1.6% 1.5% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204091400.pktlen.png)
detailed numbers
[ 32- 63]: 7768885
[ 64- 127]: 7656016
[ 128- 255]: 1327214
[ 256- 511]: 986952
[ 512- 1023]: 871996
[ 1024- 2047]: 15451802
Protocol Breakdown
![[protocol breakdown chart]](201204091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34062865 (100.00%) 24755598670 (100.00%) 726.76
ip 33301586 ( 97.77%) 24023409606 ( 97.04%) 721.39
tcp 26025361 ( 76.40%) 20466742648 ( 82.68%) 786.42
http(s) 11478850 ( 33.70%) 15074137199 ( 60.89%) 1313.21
http(c) 7367179 ( 21.63%) 1352244642 ( 5.46%) 183.55
squid 41463 ( 0.12%) 28229366 ( 0.11%) 680.83
smtp 89575 ( 0.26%) 27693763 ( 0.11%) 309.17
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 11400 ( 0.03%) 1090946 ( 0.00%) 95.70
pop3 32240 ( 0.09%) 3000618 ( 0.01%) 93.07
imap 1426 ( 0.00%) 244676 ( 0.00%) 171.58
telnet 10593 ( 0.03%) 779969 ( 0.00%) 73.63
ssh 1117537 ( 3.28%) 956374238 ( 3.86%) 855.79
dns 146107 ( 0.43%) 145236331 ( 0.59%) 994.04
bgp 671 ( 0.00%) 149256 ( 0.00%) 222.44
napster 603 ( 0.00%) 39985 ( 0.00%) 66.31
realaud 52 ( 0.00%) 4536 ( 0.00%) 87.23
rtsp 10194 ( 0.03%) 11668963 ( 0.05%) 1144.69
icecast 1534 ( 0.00%) 349708 ( 0.00%) 227.97
hotline 53 ( 0.00%) 3727 ( 0.00%) 70.32
other 5715882 ( 16.78%) 2865494605 ( 11.58%) 501.32
udp 3882879 ( 11.40%) 1956594235 ( 7.90%) 503.90
dns 573696 ( 1.68%) 134418222 ( 0.54%) 234.30
rip 5 ( 0.00%) 5221 ( 0.00%) 1044.20
realaud 12 ( 0.00%) 1609 ( 0.00%) 134.08
halflif 85 ( 0.00%) 12981 ( 0.00%) 152.72
starcra 184 ( 0.00%) 33548 ( 0.00%) 182.33
everque 616 ( 0.00%) 145889 ( 0.00%) 236.83
unreal 39 ( 0.00%) 14710 ( 0.00%) 377.18
quake 9 ( 0.00%) 932 ( 0.00%) 103.56
cuseeme 2 ( 0.00%) 160 ( 0.00%) 80.00
other 3307759 ( 9.71%) 1821647025 ( 7.36%) 550.72
icmp 1594198 ( 4.68%) 122827390 ( 0.50%) 77.05
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 36592 ( 0.11%) 10236224 ( 0.04%) 279.74
ip6 1746213 ( 5.13%) 1463823211 ( 5.91%) 838.28
pim 209 ( 0.00%) 12540 ( 0.00%) 60.00
other 15949 ( 0.05%) 3154088 ( 0.01%) 197.76
frag 8126 ( 0.02%) 10461382 ( 0.04%) 1287.40
ip6 761279 ( 2.23%) 732189064 ( 2.96%) 961.79
tcp6 652013 ( 1.91%) 699356591 ( 2.83%) 1072.61
http(s) 37601 ( 0.11%) 48493637 ( 0.20%) 1289.69
http(c) 42904 ( 0.13%) 3772462 ( 0.02%) 87.93
smtp 70 ( 0.00%) 32189 ( 0.00%) 459.84
pop3 77 ( 0.00%) 6867 ( 0.00%) 89.18
dns 218 ( 0.00%) 47035 ( 0.00%) 215.76
bgp 91 ( 0.00%) 17870 ( 0.00%) 196.37
other 571052 ( 1.68%) 646986531 ( 2.61%) 1132.97
udp6 80931 ( 0.24%) 27789831 ( 0.11%) 343.38
dns 70810 ( 0.21%) 21091752 ( 0.09%) 297.86
realaud 1 ( 0.00%) 114 ( 0.00%) 114.00
halflif 2 ( 0.00%) 234 ( 0.00%) 117.00
other 10118 ( 0.03%) 6697731 ( 0.03%) 661.96
icmp6 26711 ( 0.08%) 3796774 ( 0.02%) 142.14
ip6 84 ( 0.00%) 11462 ( 0.00%) 136.45
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1509 ( 0.00%) 1230190 ( 0.00%) 815.24
tcpdump file: 201204091400.dump.gz (802.48 MB)