Traffic Trace Info
DumpFile: 201204131400.dump
FileSize: 3785.73MB
Id: 201204131400
StartTime: Fri Apr 13 14:00:01 2012
EndTime: Fri Apr 13 14:15:01 2012
TotalTime: 899.98 seconds
TotalCapSize: -1156.18MB CapLen: 96 bytes
# of packets: 55437012 (29383.92MB)
AvgRate: 273.89Mbps stddev:41.31M
IP flow (unique src/dst pair) Information
# of flows: 12342859 (avg. 4.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 3.4% 2.7% 2.0% 1.8% 1.7% 1.6% 1.3% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 9697608
Top 10 bandwidth usage (bytes/total in %):
6.5% 5.4% 4.6% 4.3% 4.3% 4.2% 3.8% 3.8% 3.7% 3.6%
# of IPv6 addresses: 5613
Top 10 bandwidth usage (bytes/total in %):
78.0% 75.7% 7.4% 7.0% 4.0% 4.0% 3.2% 3.2% 1.3% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204131400.pktlen.png)
detailed numbers
[ 32- 63]: 22923001
[ 64- 127]: 10473474
[ 128- 255]: 1399835
[ 256- 511]: 902167
[ 512- 1023]: 1174166
[ 1024- 2047]: 18564369
Protocol Breakdown
![[protocol breakdown chart]](201204131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 55437012 (100.00%) 30811274526 (100.00%) 555.79
ip 54278643 ( 97.91%) 29693614764 ( 96.37%) 547.06
tcp 30838619 ( 55.63%) 25738162833 ( 83.53%) 834.61
http(s) 14513466 ( 26.18%) 19387008866 ( 62.92%) 1335.79
http(c) 7140118 ( 12.88%) 1266836760 ( 4.11%) 177.43
squid 360960 ( 0.65%) 314561457 ( 1.02%) 871.46
smtp 54381 ( 0.10%) 14622737 ( 0.05%) 268.89
ftp 10813 ( 0.02%) 1084170 ( 0.00%) 100.27
pop3 8644 ( 0.02%) 2173259 ( 0.01%) 251.42
imap 5272 ( 0.01%) 4586830 ( 0.01%) 870.04
telnet 120 ( 0.00%) 8628 ( 0.00%) 71.90
ssh 1996137 ( 3.60%) 1408916669 ( 4.57%) 705.82
dns 5594 ( 0.01%) 824241 ( 0.00%) 147.34
bgp 628 ( 0.00%) 108836 ( 0.00%) 173.31
napster 506 ( 0.00%) 33685 ( 0.00%) 66.57
realaud 38 ( 0.00%) 2776 ( 0.00%) 73.05
rtsp 6535 ( 0.01%) 7699129 ( 0.02%) 1178.14
icecast 24864 ( 0.04%) 16275315 ( 0.05%) 654.57
hotline 10 ( 0.00%) 626 ( 0.00%) 62.60
other 6710533 ( 12.10%) 3313418849 ( 10.75%) 493.76
udp 3770094 ( 6.80%) 1597171214 ( 5.18%) 423.64
dns 579448 ( 1.05%) 141685852 ( 0.46%) 244.52
realaud 11 ( 0.00%) 971 ( 0.00%) 88.27
halflif 10 ( 0.00%) 870 ( 0.00%) 87.00
starcra 5481 ( 0.01%) 4797889 ( 0.02%) 875.37
everque 27512 ( 0.05%) 24831956 ( 0.08%) 902.59
unreal 11 ( 0.00%) 1903 ( 0.00%) 173.00
quake 42 ( 0.00%) 3795 ( 0.00%) 90.36
cuseeme 4 ( 0.00%) 412 ( 0.00%) 103.00
other 3146578 ( 5.68%) 1425144850 ( 4.63%) 452.92
icmp 17726944 ( 31.98%) 1119094502 ( 3.63%) 63.13
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 5903 ( 0.01%) 2488898 ( 0.01%) 421.63
ip6 1913220 ( 3.45%) 1233615278 ( 4.00%) 644.78
pim 249 ( 0.00%) 14940 ( 0.00%) 60.00
other 23429 ( 0.04%) 3047829 ( 0.01%) 130.09
frag 45491 ( 0.08%) 34842107 ( 0.11%) 765.91
ip6 1158369 ( 2.09%) 1117659762 ( 3.63%) 964.86
tcp6 1044114 ( 1.88%) 1077241039 ( 3.50%) 1031.73
http(s) 154736 ( 0.28%) 154529167 ( 0.50%) 998.66
http(c) 96025 ( 0.17%) 7995875 ( 0.03%) 83.27
squid 2 ( 0.00%) 188 ( 0.00%) 94.00
smtp 209 ( 0.00%) 74610 ( 0.00%) 356.99
ftp 28 ( 0.00%) 2601 ( 0.00%) 92.89
ssh 39 ( 0.00%) 5802 ( 0.00%) 148.77
dns 324 ( 0.00%) 69915 ( 0.00%) 215.79
bgp 80 ( 0.00%) 11547 ( 0.00%) 144.34
icecast 1 ( 0.00%) 94 ( 0.00%) 94.00
other 792670 ( 1.43%) 914551240 ( 2.97%) 1153.76
udp6 86787 ( 0.16%) 32076237 ( 0.10%) 369.60
dns 71917 ( 0.13%) 20641684 ( 0.07%) 287.02
realaud 3 ( 0.00%) 344 ( 0.00%) 114.67
starcra 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 1 ( 0.00%) 118 ( 0.00%) 118.00
quake 2 ( 0.00%) 209 ( 0.00%) 104.50
cuseeme 2 ( 0.00%) 215 ( 0.00%) 107.50
other 14861 ( 0.03%) 11433560 ( 0.04%) 769.37
icmp6 19990 ( 0.04%) 2913649 ( 0.01%) 145.76
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 7363 ( 0.01%) 5413209 ( 0.02%) 735.19
tcpdump file: 201204131400.dump.gz (1248.19 MB)