Traffic Trace Info
DumpFile: 201204181400.dump
FileSize: 4302.54MB
Id: 201204181400
StartTime: Wed Apr 18 14:00:00 2012
EndTime: Wed Apr 18 14:15:00 2012
TotalTime: 900.03 seconds
TotalCapSize: -764.47MB CapLen: 96 bytes
# of packets: 63635028 (36706.94MB)
AvgRate: 342.02Mbps stddev:56.59M
IP flow (unique src/dst pair) Information
# of flows: 11250596 (avg. 5.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.5% 6.9% 5.7% 3.7% 1.3% 1.1% 1.0% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 8707593
Top 10 bandwidth usage (bytes/total in %):
26.0% 8.8% 7.5% 7.4% 7.2% 5.9% 4.7% 3.8% 3.4% 3.0%
# of IPv6 addresses: 6336
Top 10 bandwidth usage (bytes/total in %):
64.9% 64.8% 21.0% 20.0% 3.7% 2.7% 2.1% 1.4% 1.3% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204181400.pktlen.png)
detailed numbers
[ 32- 63]: 25526031
[ 64- 127]: 10638091
[ 128- 255]: 1202323
[ 256- 511]: 1196659
[ 512- 1023]: 1835817
[ 1024- 2047]: 23236107
Protocol Breakdown
![[protocol breakdown chart]](201204181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 63635028 (100.00%) 38490013063 (100.00%) 604.86
ip 62877779 ( 98.81%) 37821274687 ( 98.26%) 601.50
tcp 41199091 ( 64.74%) 33745457272 ( 87.67%) 819.08
http(s) 19529124 ( 30.69%) 26279080036 ( 68.28%) 1345.64
http(c) 12982153 ( 20.40%) 2203947782 ( 5.73%) 169.77
squid 33048 ( 0.05%) 15161526 ( 0.04%) 458.77
smtp 45889 ( 0.07%) 12283370 ( 0.03%) 267.68
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 18942 ( 0.03%) 1503440 ( 0.00%) 79.37
pop3 4999 ( 0.01%) 1485877 ( 0.00%) 297.23
imap 2723 ( 0.00%) 1246456 ( 0.00%) 457.75
telnet 385 ( 0.00%) 24484 ( 0.00%) 63.59
ssh 224506 ( 0.35%) 36099533 ( 0.09%) 160.80
dns 2479 ( 0.00%) 324583 ( 0.00%) 130.93
bgp 641 ( 0.00%) 118884 ( 0.00%) 185.47
napster 80 ( 0.00%) 5058 ( 0.00%) 63.23
realaud 67 ( 0.00%) 4362 ( 0.00%) 65.10
rtsp 16902 ( 0.03%) 19371086 ( 0.05%) 1146.08
icecast 79769 ( 0.13%) 69855968 ( 0.18%) 875.73
hotline 1130 ( 0.00%) 768980 ( 0.00%) 680.51
other 8256247 ( 12.97%) 5104175421 ( 13.26%) 618.22
udp 4313911 ( 6.78%) 2336612860 ( 6.07%) 541.65
dns 619615 ( 0.97%) 152226760 ( 0.40%) 245.68
rip 1 ( 0.00%) 68 ( 0.00%) 68.00
realaud 11 ( 0.00%) 1665 ( 0.00%) 151.36
halflif 12 ( 0.00%) 1573 ( 0.00%) 131.08
starcra 11 ( 0.00%) 1699 ( 0.00%) 154.45
everque 343 ( 0.00%) 72486 ( 0.00%) 211.33
unreal 54 ( 0.00%) 23696 ( 0.00%) 438.81
quake 8 ( 0.00%) 854 ( 0.00%) 106.75
cuseeme 2 ( 0.00%) 142 ( 0.00%) 71.00
other 3693711 ( 5.80%) 2184252478 ( 5.67%) 591.34
icmp 15948499 ( 25.06%) 995203542 ( 2.59%) 62.40
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2907 ( 0.00%) 861858 ( 0.00%) 296.48
ip6 1393182 ( 2.19%) 739868103 ( 1.92%) 531.06
pim 316 ( 0.00%) 18960 ( 0.00%) 60.00
other 19688 ( 0.03%) 3232822 ( 0.01%) 164.20
frag 681 ( 0.00%) 617303 ( 0.00%) 906.47
ip6 757249 ( 1.19%) 668738376 ( 1.74%) 883.12
tcp6 633470 ( 1.00%) 630367626 ( 1.64%) 995.10
http(s) 179978 ( 0.28%) 154667310 ( 0.40%) 859.37
http(c) 33061 ( 0.05%) 3346579 ( 0.01%) 101.22
smtp 204 ( 0.00%) 115710 ( 0.00%) 567.21
ftp 51 ( 0.00%) 4872 ( 0.00%) 95.53
ssh 47 ( 0.00%) 8962 ( 0.00%) 190.68
dns 262 ( 0.00%) 51206 ( 0.00%) 195.44
bgp 87 ( 0.00%) 16877 ( 0.00%) 193.99
other 419780 ( 0.66%) 472156110 ( 1.23%) 1124.77
udp6 81479 ( 0.13%) 25036773 ( 0.07%) 307.28
dns 71982 ( 0.11%) 19574720 ( 0.05%) 271.94
everque 1 ( 0.00%) 104 ( 0.00%) 104.00
quake 4 ( 0.00%) 412 ( 0.00%) 103.00
other 9492 ( 0.01%) 5461537 ( 0.01%) 575.38
icmp6 29104 ( 0.05%) 3910814 ( 0.01%) 134.37
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 13081 ( 0.02%) 9407503 ( 0.02%) 719.17
tcpdump file: 201204181400.dump.gz (1412.41 MB)