Traffic Trace Info
DumpFile: 201204111400.dump
FileSize: 3473.91MB
Id: 201204111400
StartTime: Wed Apr 11 14:00:00 2012
EndTime: Wed Apr 11 14:15:01 2012
TotalTime: 900.29 seconds
TotalCapSize: -1362.51MB CapLen: 96 bytes
# of packets: 48523930 (38411.74MB)
AvgRate: 357.82Mbps stddev:109.28M
IP flow (unique src/dst pair) Information
# of flows: 1997290 (avg. 24.29 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.5% 7.7% 6.2% 5.6% 3.4% 3.1% 2.8% 2.5% 1.3% 1.0%
IP address Information
# of IPv4 addresses: 1419570
Top 10 bandwidth usage (bytes/total in %):
11.3% 9.1% 9.0% 9.0% 8.5% 8.2% 8.0% 6.5% 6.3% 5.9%
# of IPv6 addresses: 6009
Top 10 bandwidth usage (bytes/total in %):
91.2% 89.0% 3.7% 3.1% 1.8% 1.2% 1.0% 0.6% 0.6% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204111400.pktlen.png)
detailed numbers
[ 32- 63]: 9333338
[ 64- 127]: 9758200
[ 128- 255]: 1465139
[ 256- 511]: 1246976
[ 512- 1023]: 837566
[ 1024- 2047]: 25882711
Protocol Breakdown
![[protocol breakdown chart]](201204111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 48523930 (100.00%) 40277630069 (100.00%) 830.06
ip 46869478 ( 96.59%) 38720708165 ( 96.13%) 826.14
tcp 38969566 ( 80.31%) 35275443613 ( 87.58%) 905.20
http(s) 19227448 ( 39.62%) 26248011385 ( 65.17%) 1365.13
http(c) 9106172 ( 18.77%) 1884402330 ( 4.68%) 206.94
squid 83117 ( 0.17%) 76894534 ( 0.19%) 925.14
smtp 47746 ( 0.10%) 13162238 ( 0.03%) 275.67
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 8638 ( 0.02%) 838513 ( 0.00%) 97.07
pop3 6550 ( 0.01%) 3277158 ( 0.01%) 500.33
imap 6013 ( 0.01%) 1955161 ( 0.00%) 325.16
telnet 3048 ( 0.01%) 223679 ( 0.00%) 73.39
ssh 1457809 ( 3.00%) 1298257289 ( 3.22%) 890.55
dns 1996 ( 0.00%) 278445 ( 0.00%) 139.50
bgp 619 ( 0.00%) 105221 ( 0.00%) 169.99
napster 648 ( 0.00%) 43540 ( 0.00%) 67.19
realaud 28 ( 0.00%) 2478 ( 0.00%) 88.50
rtsp 15851 ( 0.03%) 19520691 ( 0.05%) 1231.51
icecast 61970 ( 0.13%) 47076043 ( 0.12%) 759.66
hotline 33 ( 0.00%) 3077 ( 0.00%) 93.24
other 8941878 ( 18.43%) 5681391689 ( 14.11%) 635.37
udp 4495365 ( 9.26%) 1915254773 ( 4.76%) 426.05
dns 606924 ( 1.25%) 138457493 ( 0.34%) 228.13
realaud 16 ( 0.00%) 1210 ( 0.00%) 75.62
halflif 120 ( 0.00%) 17463 ( 0.00%) 145.53
starcra 47 ( 0.00%) 6506 ( 0.00%) 138.43
everque 470 ( 0.00%) 87121 ( 0.00%) 185.36
unreal 5 ( 0.00%) 431 ( 0.00%) 86.20
quake 41 ( 0.00%) 5156 ( 0.00%) 125.76
cuseeme 2 ( 0.00%) 263 ( 0.00%) 131.50
other 3860792 ( 7.96%) 1771290381 ( 4.40%) 458.79
icmp 1710417 ( 3.52%) 138497702 ( 0.34%) 80.97
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 103276 ( 0.21%) 90727992 ( 0.23%) 878.50
ip6 1572160 ( 3.24%) 1296854539 ( 3.22%) 824.89
pim 205 ( 0.00%) 12300 ( 0.00%) 60.00
other 18304 ( 0.04%) 3897976 ( 0.01%) 212.96
frag 105451 ( 0.22%) 79396970 ( 0.20%) 752.93
ip6 1654452 ( 3.41%) 1556921904 ( 3.87%) 941.05
tcp6 1530273 ( 3.15%) 1520840552 ( 3.78%) 993.84
http(s) 85642 ( 0.18%) 78906166 ( 0.20%) 921.35
http(c) 357141 ( 0.74%) 30942168 ( 0.08%) 86.64
squid 6 ( 0.00%) 500 ( 0.00%) 83.33
smtp 194 ( 0.00%) 72552 ( 0.00%) 373.98
ftp 31 ( 0.00%) 3223 ( 0.00%) 103.97
pop3 9 ( 0.00%) 722 ( 0.00%) 80.22
dns 335 ( 0.00%) 65633 ( 0.00%) 195.92
bgp 96 ( 0.00%) 16557 ( 0.00%) 172.47
other 1086819 ( 2.24%) 1410833031 ( 3.50%) 1298.13
udp6 91720 ( 0.19%) 31306273 ( 0.08%) 341.32
dns 85626 ( 0.18%) 29188016 ( 0.07%) 340.88
realaud 2 ( 0.00%) 213 ( 0.00%) 106.50
starcra 1 ( 0.00%) 108 ( 0.00%) 108.00
everque 2 ( 0.00%) 230 ( 0.00%) 115.00
other 6089 ( 0.01%) 2117706 ( 0.01%) 347.79
icmp6 31703 ( 0.07%) 4140238 ( 0.01%) 130.59
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 643 ( 0.00%) 619467 ( 0.00%) 963.40
tcpdump file: 201204111400.dump.gz (1085.20 MB)