Traffic Trace Info
DumpFile: 201204171400.dump
FileSize: 3588.77MB
Id: 201204171400
StartTime: Tue Apr 17 14:00:00 2012
EndTime: Tue Apr 17 14:15:00 2012
TotalTime: 899.90 seconds
TotalCapSize: -1304.84MB CapLen: 96 bytes
# of packets: 52271781 (29986.20MB)
AvgRate: 279.54Mbps stddev:57.74M
IP flow (unique src/dst pair) Information
# of flows: 11429803 (avg. 4.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.2% 5.3% 3.6% 2.1% 1.8% 1.6% 1.5% 1.5% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 8827081
Top 10 bandwidth usage (bytes/total in %):
13.3% 7.5% 7.3% 6.9% 5.5% 4.9% 4.4% 3.6% 3.6% 3.6%
# of IPv6 addresses: 6827
Top 10 bandwidth usage (bytes/total in %):
53.4% 43.6% 11.7% 11.5% 10.7% 8.3% 4.2% 3.1% 2.6% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204171400.pktlen.png)
detailed numbers
[ 32- 63]: 19775901
[ 64- 127]: 9953749
[ 128- 255]: 1084573
[ 256- 511]: 1123323
[ 512- 1023]: 1164604
[ 1024- 2047]: 19169631
Protocol Breakdown
![[protocol breakdown chart]](201204171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 52271781 (100.00%) 31442809995 (100.00%) 601.53
ip 51794968 ( 99.09%) 31154987110 ( 99.08%) 601.51
tcp 30141450 ( 57.66%) 26848752114 ( 85.39%) 890.76
http(s) 15157212 ( 29.00%) 20102083227 ( 63.93%) 1326.24
http(c) 8278284 ( 15.84%) 2254826477 ( 7.17%) 272.38
squid 75105 ( 0.14%) 58609423 ( 0.19%) 780.37
smtp 44269 ( 0.08%) 8266737 ( 0.03%) 186.74
ftp 9426 ( 0.02%) 1645660 ( 0.01%) 174.59
pop3 35196 ( 0.07%) 33959460 ( 0.11%) 964.87
imap 17527 ( 0.03%) 1424917 ( 0.00%) 81.30
telnet 3834 ( 0.01%) 279017 ( 0.00%) 72.77
ssh 31833 ( 0.06%) 11212074 ( 0.04%) 352.22
dns 2776 ( 0.01%) 319441 ( 0.00%) 115.07
bgp 648 ( 0.00%) 117837 ( 0.00%) 181.85
napster 169 ( 0.00%) 11198 ( 0.00%) 66.26
realaud 196 ( 0.00%) 14422 ( 0.00%) 73.58
rtsp 68592 ( 0.13%) 94931933 ( 0.30%) 1384.01
icecast 17135 ( 0.03%) 17205627 ( 0.05%) 1004.12
hotline 45 ( 0.00%) 5970 ( 0.00%) 132.67
other 6399200 ( 12.24%) 4263838514 ( 13.56%) 666.31
udp 4178250 ( 7.99%) 1737929332 ( 5.53%) 415.95
dns 627711 ( 1.20%) 152424269 ( 0.48%) 242.83
realaud 9 ( 0.00%) 851 ( 0.00%) 94.56
halflif 40 ( 0.00%) 3238 ( 0.00%) 80.95
starcra 16 ( 0.00%) 2589 ( 0.00%) 161.81
everque 399 ( 0.00%) 76849 ( 0.00%) 192.60
unreal 7 ( 0.00%) 695 ( 0.00%) 99.29
quake 20 ( 0.00%) 2714 ( 0.00%) 135.70
cuseeme 4 ( 0.00%) 343 ( 0.00%) 85.75
other 3547339 ( 6.79%) 1585207206 ( 5.04%) 446.87
icmp 15583115 ( 29.81%) 974264728 ( 3.10%) 62.52
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 928 ( 0.00%) 311632 ( 0.00%) 335.81
ip6 1872762 ( 3.58%) 1589123873 ( 5.05%) 848.55
pim 202 ( 0.00%) 12120 ( 0.00%) 60.00
other 18076 ( 0.03%) 4574041 ( 0.01%) 253.04
frag 7727 ( 0.01%) 5961107 ( 0.02%) 771.46
ip6 476813 ( 0.91%) 287822885 ( 0.92%) 603.64
tcp6 362875 ( 0.69%) 256457934 ( 0.82%) 706.74
http(s) 202420 ( 0.39%) 191605990 ( 0.61%) 946.58
http(c) 40403 ( 0.08%) 3647380 ( 0.01%) 90.27
smtp 119 ( 0.00%) 47729 ( 0.00%) 401.08
ftp 87 ( 0.00%) 9669 ( 0.00%) 111.14
dns 306 ( 0.00%) 65344 ( 0.00%) 213.54
bgp 91 ( 0.00%) 23859 ( 0.00%) 262.19
other 119449 ( 0.23%) 61057963 ( 0.19%) 511.16
udp6 85283 ( 0.16%) 26364804 ( 0.08%) 309.14
dns 76484 ( 0.15%) 21545231 ( 0.07%) 281.70
realaud 3 ( 0.00%) 320 ( 0.00%) 106.67
everque 7 ( 0.00%) 819 ( 0.00%) 117.00
quake 2 ( 0.00%) 224 ( 0.00%) 112.00
cuseeme 2 ( 0.00%) 220 ( 0.00%) 110.00
other 8785 ( 0.02%) 4817990 ( 0.02%) 548.43
icmp6 27128 ( 0.05%) 3840395 ( 0.01%) 141.57
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1413 ( 0.00%) 1144260 ( 0.00%) 809.81
tcpdump file: 201204171400.dump.gz (1178.75 MB)