Traffic Trace Info
DumpFile: 201204161400.dump
FileSize: 3720.15MB
Id: 201204161400
StartTime: Mon Apr 16 14:00:01 2012
EndTime: Mon Apr 16 14:15:01 2012
TotalTime: 900.38 seconds
TotalCapSize: -1210.27MB CapLen: 96 bytes
# of packets: 54683919 (31904.65MB)
AvgRate: 297.26Mbps stddev:49.13M
IP flow (unique src/dst pair) Information
# of flows: 12386141 (avg. 4.41 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.1% 2.2% 2.0% 1.6% 1.6% 1.5% 1.5% 1.5% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 9718077
Top 10 bandwidth usage (bytes/total in %):
11.8% 11.3% 11.3% 9.5% 5.4% 3.7% 3.5% 3.2% 2.9% 2.9%
# of IPv6 addresses: 6155
Top 10 bandwidth usage (bytes/total in %):
40.9% 40.9% 32.4% 30.6% 7.9% 2.7% 2.0% 1.7% 1.7% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204161400.pktlen.png)
detailed numbers
[ 32- 63]: 21769906
[ 64- 127]: 9446767
[ 128- 255]: 1041029
[ 256- 511]: 921003
[ 512- 1023]: 1019770
[ 1024- 2047]: 20485444
Protocol Breakdown
![[protocol breakdown chart]](201204161400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 54683919 (100.00%) 33454451667 (100.00%) 611.78
ip 54127700 ( 98.98%) 33116605848 ( 98.99%) 611.82
tcp 31452146 ( 57.52%) 28571296847 ( 85.40%) 908.41
http(s) 17898811 ( 32.73%) 24562597370 ( 73.42%) 1372.30
http(c) 8238308 ( 15.07%) 1834587232 ( 5.48%) 222.69
squid 190335 ( 0.35%) 52537483 ( 0.16%) 276.03
smtp 39887 ( 0.07%) 9001528 ( 0.03%) 225.68
ftp 7743 ( 0.01%) 647871 ( 0.00%) 83.67
pop3 6355 ( 0.01%) 2468497 ( 0.01%) 388.43
imap 3159 ( 0.01%) 1429201 ( 0.00%) 452.42
telnet 1481 ( 0.00%) 98310 ( 0.00%) 66.38
ssh 66346 ( 0.12%) 26569144 ( 0.08%) 400.46
dns 2726 ( 0.00%) 293952 ( 0.00%) 107.83
bgp 604 ( 0.00%) 101564 ( 0.00%) 168.15
napster 218 ( 0.00%) 15177 ( 0.00%) 69.62
realaud 724 ( 0.00%) 177293 ( 0.00%) 244.88
rtsp 69417 ( 0.13%) 95760809 ( 0.29%) 1379.50
icecast 27450 ( 0.05%) 16501012 ( 0.05%) 601.13
hotline 34 ( 0.00%) 2218 ( 0.00%) 65.24
other 4898545 ( 8.96%) 1968508006 ( 5.88%) 401.86
udp 4163734 ( 7.61%) 2374456612 ( 7.10%) 570.27
dns 551300 ( 1.01%) 135976921 ( 0.41%) 246.65
realaud 19 ( 0.00%) 1888 ( 0.00%) 99.37
halflif 146 ( 0.00%) 25078 ( 0.00%) 171.77
starcra 85 ( 0.00%) 8108 ( 0.00%) 95.39
everque 28252 ( 0.05%) 22912662 ( 0.07%) 811.01
unreal 18 ( 0.00%) 1442 ( 0.00%) 80.11
quake 18 ( 0.00%) 2568 ( 0.00%) 142.67
cuseeme 3 ( 0.00%) 206 ( 0.00%) 68.67
other 3583777 ( 6.55%) 2215492265 ( 6.62%) 618.20
icmp 16915908 ( 30.93%) 1046685155 ( 3.13%) 61.88
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 16200 ( 0.03%) 4191520 ( 0.01%) 258.74
ip6 1549856 ( 2.83%) 1113826083 ( 3.33%) 718.66
pim 223 ( 0.00%) 13380 ( 0.00%) 60.00
other 29449 ( 0.05%) 6117091 ( 0.02%) 207.72
frag 1549 ( 0.00%) 1643126 ( 0.00%) 1060.77
ip6 556219 ( 1.02%) 337845819 ( 1.01%) 607.40
tcp6 449558 ( 0.82%) 305901456 ( 0.91%) 680.45
http(s) 156800 ( 0.29%) 135185960 ( 0.40%) 862.16
http(c) 51025 ( 0.09%) 5184863 ( 0.02%) 101.61
squid 1825 ( 0.00%) 1411549 ( 0.00%) 773.45
smtp 277 ( 0.00%) 300610 ( 0.00%) 1085.23
ftp 3 ( 0.00%) 230 ( 0.00%) 76.67
pop3 125 ( 0.00%) 90314 ( 0.00%) 722.51
dns 197 ( 0.00%) 36900 ( 0.00%) 187.31
bgp 78 ( 0.00%) 10390 ( 0.00%) 133.21
other 239228 ( 0.44%) 163680640 ( 0.49%) 684.20
udp6 81304 ( 0.15%) 27858131 ( 0.08%) 342.64
dns 75100 ( 0.14%) 21974731 ( 0.07%) 292.61
everque 2 ( 0.00%) 219 ( 0.00%) 109.50
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
quake 3 ( 0.00%) 314 ( 0.00%) 104.67
other 6198 ( 0.01%) 5882762 ( 0.02%) 949.14
icmp6 24793 ( 0.05%) 3656753 ( 0.01%) 147.49
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 452 ( 0.00%) 414223 ( 0.00%) 916.42
tcpdump file: 201204161400.dump.gz (1220.27 MB)