Traffic Trace Info
DumpFile: 201204191400.dump
FileSize: 3572.41MB
Id: 201204191400
StartTime: Thu Apr 19 14:00:01 2012
EndTime: Thu Apr 19 14:15:01 2012
TotalTime: 899.66 seconds
TotalCapSize: -1323.11MB CapLen: 96 bytes
# of packets: 52396705 (28899.39MB)
AvgRate: 269.43Mbps stddev:58.74M
IP flow (unique src/dst pair) Information
# of flows: 11491732 (avg. 4.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.8% 1.6% 1.5% 1.3% 1.2% 1.2% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 8786884
Top 10 bandwidth usage (bytes/total in %):
6.2% 6.1% 5.7% 5.6% 5.5% 4.7% 3.7% 3.4% 3.1% 3.0%
# of IPv6 addresses: 6294
Top 10 bandwidth usage (bytes/total in %):
47.6% 45.5% 14.9% 14.5% 14.5% 8.9% 5.9% 5.1% 3.7% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204191400.pktlen.png)
detailed numbers
[ 32- 63]: 20639279
[ 64- 127]: 9650144
[ 128- 255]: 1178085
[ 256- 511]: 1409869
[ 512- 1023]: 1132180
[ 1024- 2047]: 18387148
Protocol Breakdown
![[protocol breakdown chart]](201204191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 52396705 (100.00%) 30303204925 (100.00%) 578.34
ip 52044217 ( 99.33%) 30054863546 ( 99.18%) 577.49
tcp 30356604 ( 57.94%) 25325457874 ( 83.57%) 834.27
http(s) 15298972 ( 29.20%) 20443392077 ( 67.46%) 1336.26
http(c) 8975197 ( 17.13%) 2058347161 ( 6.79%) 229.34
squid 51562 ( 0.10%) 41803116 ( 0.14%) 810.73
smtp 44446 ( 0.08%) 11906466 ( 0.04%) 267.89
ftp 40596 ( 0.08%) 3420077 ( 0.01%) 84.25
pop3 6356 ( 0.01%) 4338029 ( 0.01%) 682.51
imap 2650 ( 0.01%) 901141 ( 0.00%) 340.05
telnet 36414 ( 0.07%) 2530971 ( 0.01%) 69.51
ssh 199354 ( 0.38%) 23918899 ( 0.08%) 119.98
dns 2716 ( 0.01%) 312988 ( 0.00%) 115.24
bgp 652 ( 0.00%) 137743 ( 0.00%) 211.26
napster 64 ( 0.00%) 4409 ( 0.00%) 68.89
realaud 167 ( 0.00%) 31779 ( 0.00%) 190.29
rtsp 62148 ( 0.12%) 88155754 ( 0.29%) 1418.48
icecast 53422 ( 0.10%) 46487834 ( 0.15%) 870.20
hotline 946 ( 0.00%) 492258 ( 0.00%) 520.36
other 5580940 ( 10.65%) 2599277052 ( 8.58%) 465.74
udp 4217609 ( 8.05%) 1987434236 ( 6.56%) 471.22
dns 566996 ( 1.08%) 138139711 ( 0.46%) 243.63
realaud 10 ( 0.00%) 1274 ( 0.00%) 127.40
halflif 26 ( 0.00%) 3263 ( 0.00%) 125.50
starcra 46 ( 0.00%) 10635 ( 0.00%) 231.20
everque 1390 ( 0.00%) 844015 ( 0.00%) 607.21
unreal 21 ( 0.00%) 3511 ( 0.00%) 167.19
quake 57 ( 0.00%) 4806 ( 0.00%) 84.32
cuseeme 8 ( 0.00%) 1952 ( 0.00%) 244.00
other 3648897 ( 6.96%) 1848362871 ( 6.10%) 506.55
icmp 15495982 ( 29.57%) 968885845 ( 3.20%) 62.52
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 11491 ( 0.02%) 3080098 ( 0.01%) 268.04
ip6 1939160 ( 3.70%) 1763163534 ( 5.82%) 909.24
pim 318 ( 0.00%) 19080 ( 0.00%) 60.00
other 22869 ( 0.04%) 6803719 ( 0.02%) 297.51
frag 632 ( 0.00%) 594415 ( 0.00%) 940.53
ip6 352488 ( 0.67%) 248341379 ( 0.82%) 704.54
tcp6 252877 ( 0.48%) 224103921 ( 0.74%) 886.22
http(s) 153468 ( 0.29%) 132000890 ( 0.44%) 860.12
http(c) 22520 ( 0.04%) 2084593 ( 0.01%) 92.57
smtp 5009 ( 0.01%) 6320671 ( 0.02%) 1261.86
dns 333 ( 0.00%) 56919 ( 0.00%) 170.93
bgp 98 ( 0.00%) 17342 ( 0.00%) 176.96
other 71449 ( 0.14%) 83623506 ( 0.28%) 1170.39
udp6 74812 ( 0.14%) 20136155 ( 0.07%) 269.16
dns 72568 ( 0.14%) 19805759 ( 0.07%) 272.93
halflif 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 2242 ( 0.00%) 330182 ( 0.00%) 147.27
icmp6 24100 ( 0.05%) 3518879 ( 0.01%) 146.01
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 584 ( 0.00%) 566796 ( 0.00%) 970.54
tcpdump file: 201204191400.dump.gz (1195.46 MB)