Traffic Trace Info
DumpFile: 201204121400.dump
FileSize: 2089.51MB
Id: 201204121400
StartTime: Thu Apr 12 14:00:01 2012
EndTime: Thu Apr 12 14:15:01 2012
TotalTime: 900.17 seconds
TotalCapSize: 1646.40MB CapLen: 96 bytes
# of packets: 29039065 (18171.63MB)
AvgRate: 169.29Mbps stddev:29.65M
IP flow (unique src/dst pair) Information
# of flows: 2137074 (avg. 13.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 1.8% 1.8% 1.6% 1.1% 1.0% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 1515983
Top 10 bandwidth usage (bytes/total in %):
9.0% 7.1% 4.7% 4.6% 4.1% 4.1% 3.9% 2.8% 2.8% 1.9%
# of IPv6 addresses: 6244
Top 10 bandwidth usage (bytes/total in %):
37.9% 31.2% 24.8% 11.0% 10.9% 9.5% 8.0% 7.3% 4.3% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204121400.pktlen.png)
detailed numbers
[ 32- 63]: 7091388
[ 64- 127]: 7486310
[ 128- 255]: 1101405
[ 256- 511]: 886365
[ 512- 1023]: 877611
[ 1024- 2047]: 11595986
Protocol Breakdown
![[protocol breakdown chart]](201204121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29039065 (100.00%) 19054334396 (100.00%) 656.16
ip 28479799 ( 98.07%) 18636497076 ( 97.81%) 654.38
tcp 22155047 ( 76.29%) 16046908934 ( 84.22%) 724.30
http(s) 9248298 ( 31.85%) 11921647917 ( 62.57%) 1289.06
http(c) 7163401 ( 24.67%) 1515521920 ( 7.95%) 211.56
squid 49316 ( 0.17%) 23970656 ( 0.13%) 486.06
smtp 59777 ( 0.21%) 39300909 ( 0.21%) 657.46
nntp 5 ( 0.00%) 300 ( 0.00%) 60.00
ftp 9753 ( 0.03%) 933391 ( 0.00%) 95.70
pop3 7616 ( 0.03%) 3983802 ( 0.02%) 523.08
imap 1605 ( 0.01%) 760260 ( 0.00%) 473.68
telnet 90088 ( 0.31%) 6488283 ( 0.03%) 72.02
ssh 67483 ( 0.23%) 12751755 ( 0.07%) 188.96
dns 5675 ( 0.02%) 2314184 ( 0.01%) 407.79
bgp 662 ( 0.00%) 145998 ( 0.00%) 220.54
napster 269 ( 0.00%) 17549 ( 0.00%) 65.24
realaud 1665 ( 0.01%) 104427 ( 0.00%) 62.72
rtsp 37124 ( 0.13%) 48269883 ( 0.25%) 1300.23
icecast 55090 ( 0.19%) 46734641 ( 0.25%) 848.33
hotline 37 ( 0.00%) 2324 ( 0.00%) 62.81
other 5357183 ( 18.45%) 2423960735 ( 12.72%) 452.47
udp 3143804 ( 10.83%) 1541746268 ( 8.09%) 490.41
dns 485667 ( 1.67%) 124809561 ( 0.66%) 256.99
realaud 906 ( 0.00%) 54499 ( 0.00%) 60.15
halflif 24 ( 0.00%) 3195 ( 0.00%) 133.12
starcra 35 ( 0.00%) 3830 ( 0.00%) 109.43
everque 317 ( 0.00%) 63850 ( 0.00%) 201.42
unreal 22 ( 0.00%) 4625 ( 0.00%) 210.23
quake 16 ( 0.00%) 2586 ( 0.00%) 161.62
cuseeme 5 ( 0.00%) 901 ( 0.00%) 180.20
other 2656483 ( 9.15%) 1416700603 ( 7.44%) 533.30
icmp 1883447 ( 6.49%) 151173614 ( 0.79%) 80.26
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 11056 ( 0.04%) 3875008 ( 0.02%) 350.49
ip6 1263974 ( 4.35%) 888942907 ( 4.67%) 703.29
pim 186 ( 0.00%) 11160 ( 0.00%) 60.00
other 22101 ( 0.08%) 3820025 ( 0.02%) 172.84
frag 1096 ( 0.00%) 1048369 ( 0.01%) 956.54
ip6 559266 ( 1.93%) 417837320 ( 2.19%) 747.12
tcp6 363216 ( 1.25%) 284662755 ( 1.49%) 783.73
http(s) 210150 ( 0.72%) 193108120 ( 1.01%) 918.91
http(c) 41320 ( 0.14%) 3629318 ( 0.02%) 87.83
squid 8 ( 0.00%) 1345 ( 0.00%) 168.12
smtp 164 ( 0.00%) 86402 ( 0.00%) 526.84
ftp 66 ( 0.00%) 6689 ( 0.00%) 101.35
dns 400 ( 0.00%) 71533 ( 0.00%) 178.83
bgp 83 ( 0.00%) 13484 ( 0.00%) 162.46
napster 3 ( 0.00%) 254 ( 0.00%) 84.67
other 111022 ( 0.38%) 87745610 ( 0.46%) 790.34
udp6 157873 ( 0.54%) 120303194 ( 0.63%) 762.03
dns 72537 ( 0.25%) 20812795 ( 0.11%) 286.93
halflif 1 ( 0.00%) 109 ( 0.00%) 109.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 2 ( 0.00%) 202 ( 0.00%) 101.00
other 85332 ( 0.29%) 99489980 ( 0.52%) 1165.92
icmp6 24908 ( 0.09%) 3471038 ( 0.02%) 139.35
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 13157 ( 0.05%) 9385077 ( 0.05%) 713.31
tcpdump file: 201204121400.dump.gz (696.40 MB)