Traffic Trace Info
DumpFile: 201204151400.dump
FileSize: 3409.91MB
Id: 201204151400
StartTime: Sun Apr 15 14:00:00 2012
EndTime: Sun Apr 15 14:15:01 2012
TotalTime: 900.11 seconds
TotalCapSize: -1474.38MB CapLen: 96 bytes
# of packets: 51661028 (29701.08MB)
AvgRate: 276.80Mbps stddev:57.13M
IP flow (unique src/dst pair) Information
# of flows: 12366836 (avg. 4.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.2% 4.9% 2.2% 2.0% 1.7% 1.2% 1.1% 1.0% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 9710291
Top 10 bandwidth usage (bytes/total in %):
23.0% 21.8% 14.5% 10.5% 5.0% 4.6% 3.9% 3.5% 2.9% 2.3%
# of IPv6 addresses: 5689
Top 10 bandwidth usage (bytes/total in %):
33.7% 22.5% 15.4% 14.5% 14.2% 11.4% 5.0% 3.9% 3.7% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204151400.pktlen.png)
detailed numbers
[ 32- 63]: 23252634
[ 64- 127]: 6819463
[ 128- 255]: 952079
[ 256- 511]: 617848
[ 512- 1023]: 914057
[ 1024- 2047]: 19104947
Protocol Breakdown
![[protocol breakdown chart]](201204151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 51661028 (100.00%) 31143835417 (100.00%) 602.85
ip 51294183 ( 99.29%) 30994905107 ( 99.52%) 604.26
tcp 28808396 ( 55.76%) 26622791770 ( 85.48%) 924.13
http(s) 17196857 ( 33.29%) 23967548649 ( 76.96%) 1393.72
http(c) 7429526 ( 14.38%) 597977928 ( 1.92%) 80.49
squid 58465 ( 0.11%) 45366679 ( 0.15%) 775.96
smtp 42271 ( 0.08%) 9492752 ( 0.03%) 224.57
nntp 2 ( 0.00%) 128 ( 0.00%) 64.00
ftp 9310 ( 0.02%) 856037 ( 0.00%) 91.95
pop3 1395 ( 0.00%) 462022 ( 0.00%) 331.20
imap 1391 ( 0.00%) 162507 ( 0.00%) 116.83
telnet 1083 ( 0.00%) 72838 ( 0.00%) 67.26
ssh 70300 ( 0.14%) 17555131 ( 0.06%) 249.72
dns 1855 ( 0.00%) 232044 ( 0.00%) 125.09
bgp 642 ( 0.00%) 116647 ( 0.00%) 181.69
napster 1155 ( 0.00%) 75343 ( 0.00%) 65.23
realaud 37 ( 0.00%) 3336 ( 0.00%) 90.16
rtsp 1254 ( 0.00%) 80206 ( 0.00%) 63.96
icecast 1760 ( 0.00%) 670541 ( 0.00%) 380.99
hotline 36 ( 0.00%) 2492 ( 0.00%) 69.22
other 3991057 ( 7.73%) 1982116490 ( 6.36%) 496.64
udp 4249932 ( 8.23%) 1996740409 ( 6.41%) 469.83
dns 380102 ( 0.74%) 89765173 ( 0.29%) 236.16
rip 1 ( 0.00%) 68 ( 0.00%) 68.00
realaud 13 ( 0.00%) 1983 ( 0.00%) 152.54
halflif 19 ( 0.00%) 2646 ( 0.00%) 139.26
starcra 69 ( 0.00%) 7982 ( 0.00%) 115.68
everque 1713 ( 0.00%) 1092317 ( 0.00%) 637.66
unreal 8 ( 0.00%) 1270 ( 0.00%) 158.75
quake 11 ( 0.00%) 885 ( 0.00%) 80.45
cuseeme 3 ( 0.00%) 296 ( 0.00%) 98.67
other 3864708 ( 7.48%) 1905657012 ( 6.12%) 493.09
icmp 16477958 ( 31.90%) 1025931829 ( 3.29%) 62.26
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 17290 ( 0.03%) 8542708 ( 0.03%) 494.08
ip6 1716513 ( 3.32%) 1337182187 ( 4.29%) 779.01
pim 175 ( 0.00%) 10500 ( 0.00%) 60.00
other 23735 ( 0.05%) 3686544 ( 0.01%) 155.32
frag 29114 ( 0.06%) 22657909 ( 0.07%) 778.25
ip6 366845 ( 0.71%) 148930310 ( 0.48%) 405.98
tcp6 255894 ( 0.50%) 102545922 ( 0.33%) 400.74
http(s) 55334 ( 0.11%) 55870611 ( 0.18%) 1009.70
http(c) 19030 ( 0.04%) 1840252 ( 0.01%) 96.70
smtp 126 ( 0.00%) 72669 ( 0.00%) 576.74
dns 292 ( 0.00%) 54499 ( 0.00%) 186.64
bgp 77 ( 0.00%) 10598 ( 0.00%) 137.64
realaud 10 ( 0.00%) 1122 ( 0.00%) 112.20
other 181025 ( 0.35%) 44696171 ( 0.14%) 246.91
udp6 70360 ( 0.14%) 34581217 ( 0.11%) 491.49
dns 40873 ( 0.08%) 9551966 ( 0.03%) 233.70
realaud 1 ( 0.00%) 101 ( 0.00%) 101.00
starcra 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 2 ( 0.00%) 220 ( 0.00%) 110.00
cuseeme 1 ( 0.00%) 108 ( 0.00%) 108.00
other 29482 ( 0.06%) 25028715 ( 0.08%) 848.95
icmp6 29641 ( 0.06%) 4111948 ( 0.01%) 138.73
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 10835 ( 0.02%) 7675595 ( 0.02%) 708.41
tcpdump file: 201204151400.dump.gz (1111.31 MB)