Traffic Trace Info
DumpFile: 201204141400.dump
FileSize: 3875.80MB
Id: 201204141400
StartTime: Sat Apr 14 14:00:01 2012
EndTime: Sat Apr 14 14:15:00 2012
TotalTime: 899.47 seconds
TotalCapSize: -1078.23MB CapLen: 96 bytes
# of packets: 56230810 (33044.46MB)
AvgRate: 308.24Mbps stddev:72.24M
IP flow (unique src/dst pair) Information
# of flows: 12270933 (avg. 4.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.6% 2.5% 2.3% 1.9% 1.8% 1.8% 1.6% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 9671931
Top 10 bandwidth usage (bytes/total in %):
25.3% 14.7% 7.3% 5.3% 5.3% 3.5% 3.0% 2.9% 2.6% 2.5%
# of IPv6 addresses: 5172
Top 10 bandwidth usage (bytes/total in %):
52.2% 48.3% 11.4% 11.0% 9.7% 6.4% 6.3% 4.5% 4.5% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204141400.pktlen.png)
detailed numbers
[ 32- 63]: 21090639
[ 64- 127]: 11226480
[ 128- 255]: 906382
[ 256- 511]: 678007
[ 512- 1023]: 1077186
[ 1024- 2047]: 21252116
Protocol Breakdown
![[protocol breakdown chart]](201204141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 56230810 (100.00%) 34649623993 (100.00%) 616.20
ip 55766175 ( 99.17%) 34342194261 ( 99.11%) 615.82
tcp 31949888 ( 56.82%) 30395464171 ( 87.72%) 951.35
http(s) 18926153 ( 33.66%) 26245981929 ( 75.75%) 1386.76
http(c) 7095061 ( 12.62%) 806296164 ( 2.33%) 113.64
squid 148708 ( 0.26%) 114289725 ( 0.33%) 768.55
smtp 28526 ( 0.05%) 4316718 ( 0.01%) 151.33
ftp 17767 ( 0.03%) 1440809 ( 0.00%) 81.09
pop3 2831 ( 0.01%) 1166718 ( 0.00%) 412.12
imap 2269 ( 0.00%) 503982 ( 0.00%) 222.12
telnet 3339 ( 0.01%) 239413 ( 0.00%) 71.70
ssh 22624 ( 0.04%) 3919721 ( 0.01%) 173.25
dns 4932 ( 0.01%) 3265735 ( 0.01%) 662.15
bgp 1695 ( 0.00%) 1106468 ( 0.00%) 652.78
napster 92 ( 0.00%) 6127 ( 0.00%) 66.60
realaud 58 ( 0.00%) 4354 ( 0.00%) 75.07
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 21867 ( 0.04%) 16357844 ( 0.05%) 748.06
hotline 32 ( 0.00%) 1990 ( 0.00%) 62.19
other 5673930 ( 10.09%) 3196566190 ( 9.23%) 563.38
udp 3915711 ( 6.96%) 1479174830 ( 4.27%) 377.75
dns 387900 ( 0.69%) 90314031 ( 0.26%) 232.83
rip 1 ( 0.00%) 68 ( 0.00%) 68.00
realaud 14 ( 0.00%) 1679 ( 0.00%) 119.93
halflif 17 ( 0.00%) 1964 ( 0.00%) 115.53
starcra 26 ( 0.00%) 3381 ( 0.00%) 130.04
everque 263 ( 0.00%) 55488 ( 0.00%) 210.98
unreal 32 ( 0.00%) 5516 ( 0.00%) 172.38
quake 40 ( 0.00%) 8308 ( 0.00%) 207.70
cuseeme 1 ( 0.00%) 70 ( 0.00%) 70.00
other 3526503 ( 6.27%) 1388711333 ( 4.01%) 393.79
icmp 18189762 ( 32.35%) 1152311065 ( 3.33%) 63.35
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 820 ( 0.00%) 282712 ( 0.00%) 344.77
ip6 1688596 ( 3.00%) 1307410213 ( 3.77%) 774.26
pim 234 ( 0.00%) 14040 ( 0.00%) 60.00
other 20979 ( 0.04%) 7517960 ( 0.02%) 358.36
frag 2284 ( 0.00%) 1829065 ( 0.01%) 800.82
ip6 464635 ( 0.83%) 307429732 ( 0.89%) 661.66
tcp6 374216 ( 0.67%) 275116002 ( 0.79%) 735.18
http(s) 64959 ( 0.12%) 57321801 ( 0.17%) 882.43
http(c) 21398 ( 0.04%) 1860756 ( 0.01%) 86.96
squid 1894 ( 0.00%) 2191087 ( 0.01%) 1156.86
smtp 26 ( 0.00%) 11686 ( 0.00%) 449.46
dns 242 ( 0.00%) 47752 ( 0.00%) 197.32
bgp 87 ( 0.00%) 13272 ( 0.00%) 152.55
other 285610 ( 0.51%) 213669648 ( 0.62%) 748.12
udp6 63085 ( 0.11%) 28038266 ( 0.08%) 444.45
dns 46680 ( 0.08%) 11251536 ( 0.03%) 241.04
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
starcra 1 ( 0.00%) 117 ( 0.00%) 117.00
other 16403 ( 0.03%) 16786506 ( 0.05%) 1023.38
icmp6 26715 ( 0.05%) 3793764 ( 0.01%) 142.01
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 504 ( 0.00%) 466040 ( 0.00%) 924.68
tcpdump file: 201204141400.dump.gz (1219.07 MB)