Traffic Trace Info
DumpFile: 201204101400.dump
FileSize: 2425.96MB
Id: 201204101400
StartTime: Tue Apr 10 14:00:00 2012
EndTime: Tue Apr 10 14:15:01 2012
TotalTime: 900.14 seconds
TotalCapSize: 1912.46MB CapLen: 96 bytes
# of packets: 33652317 (24081.53MB)
AvgRate: 224.42Mbps stddev:37.48M
IP flow (unique src/dst pair) Information
# of flows: 2086686 (avg. 16.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 1.9% 1.5% 1.5% 1.4% 1.4% 1.4% 1.4% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 1497480
Top 10 bandwidth usage (bytes/total in %):
17.2% 6.1% 5.2% 4.9% 4.3% 4.2% 4.2% 4.0% 3.8% 2.4%
# of IPv6 addresses: 5620
Top 10 bandwidth usage (bytes/total in %):
46.0% 46.0% 24.3% 24.3% 4.7% 4.0% 3.5% 3.3% 2.4% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204101400.pktlen.png)
detailed numbers
[ 32- 63]: 6590650
[ 64- 127]: 8239478
[ 128- 255]: 1172629
[ 256- 511]: 902194
[ 512- 1023]: 944960
[ 1024- 2047]: 15802406
Protocol Breakdown
![[protocol breakdown chart]](201204101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33652317 (100.00%) 25251317981 (100.00%) 750.36
ip 33083730 ( 98.31%) 24844713024 ( 98.39%) 750.96
tcp 25217190 ( 74.93%) 20834036586 ( 82.51%) 826.18
http(s) 12804021 ( 38.05%) 17028693904 ( 67.44%) 1329.95
http(c) 6869181 ( 20.41%) 1483290439 ( 5.87%) 215.93
squid 112452 ( 0.33%) 25783644 ( 0.10%) 229.29
smtp 48041 ( 0.14%) 17768779 ( 0.07%) 369.87
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 55949 ( 0.17%) 4669840 ( 0.02%) 83.47
pop3 4334 ( 0.01%) 1355449 ( 0.01%) 312.75
imap 6059 ( 0.02%) 828523 ( 0.00%) 136.74
telnet 7066 ( 0.02%) 516866 ( 0.00%) 73.15
ssh 385705 ( 1.15%) 372334979 ( 1.47%) 965.34
dns 1963 ( 0.01%) 486297 ( 0.00%) 247.73
bgp 622 ( 0.00%) 113117 ( 0.00%) 181.86
napster 130 ( 0.00%) 8242 ( 0.00%) 63.40
realaud 119 ( 0.00%) 35377 ( 0.00%) 297.29
rtsp 41698 ( 0.12%) 58503543 ( 0.23%) 1403.03
icecast 16249 ( 0.05%) 13656611 ( 0.05%) 840.46
hotline 32 ( 0.00%) 2012 ( 0.00%) 62.88
other 4863563 ( 14.45%) 1825988590 ( 7.23%) 375.44
udp 4648386 ( 13.81%) 2407681253 ( 9.53%) 517.96
dns 579049 ( 1.72%) 136413238 ( 0.54%) 235.58
rip 1 ( 0.00%) 69 ( 0.00%) 69.00
realaud 30 ( 0.00%) 5164 ( 0.00%) 172.13
halflif 26 ( 0.00%) 2553 ( 0.00%) 98.19
starcra 17 ( 0.00%) 2059 ( 0.00%) 121.12
everque 370 ( 0.00%) 86731 ( 0.00%) 234.41
unreal 51 ( 0.00%) 26717 ( 0.00%) 523.86
quake 15 ( 0.00%) 1235 ( 0.00%) 82.33
cuseeme 3 ( 0.00%) 249 ( 0.00%) 83.00
other 4068674 ( 12.09%) 2271101343 ( 8.99%) 558.19
icmp 1660890 ( 4.94%) 130080066 ( 0.52%) 78.32
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 19095 ( 0.06%) 2861498 ( 0.01%) 149.86
ip6 1522783 ( 4.53%) 1467301903 ( 5.81%) 963.57
pim 268 ( 0.00%) 16080 ( 0.00%) 60.00
other 14934 ( 0.04%) 2716478 ( 0.01%) 181.90
frag 718 ( 0.00%) 672801 ( 0.00%) 937.05
ip6 568587 ( 1.69%) 406604957 ( 1.61%) 715.11
tcp6 450016 ( 1.34%) 370341684 ( 1.47%) 822.95
http(s) 143157 ( 0.43%) 206853008 ( 0.82%) 1444.94
http(c) 93068 ( 0.28%) 8088013 ( 0.03%) 86.90
squid 6 ( 0.00%) 508 ( 0.00%) 84.67
smtp 99 ( 0.00%) 26857 ( 0.00%) 271.28
dns 264 ( 0.00%) 49597 ( 0.00%) 187.87
bgp 92 ( 0.00%) 18317 ( 0.00%) 199.10
other 213330 ( 0.63%) 155305384 ( 0.62%) 728.01
udp6 84465 ( 0.25%) 29597100 ( 0.12%) 350.41
dns 69631 ( 0.21%) 20343375 ( 0.08%) 292.16
realaud 1 ( 0.00%) 94 ( 0.00%) 94.00
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 3 ( 0.00%) 321 ( 0.00%) 107.00
quake 1 ( 0.00%) 101 ( 0.00%) 101.00
other 14828 ( 0.04%) 9253103 ( 0.04%) 624.03
icmp6 30681 ( 0.09%) 4177006 ( 0.02%) 136.14
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3311 ( 0.01%) 2473657 ( 0.01%) 747.10
tcpdump file: 201204101400.dump.gz (797.57 MB)