Traffic Trace Info
DumpFile: 201204201400.dump
FileSize: 4504.83MB
Id: 201204201400
StartTime: Fri Apr 20 14:00:01 2012
EndTime: Fri Apr 20 14:15:01 2012
TotalTime: 899.91 seconds
TotalCapSize: -580.89MB CapLen: 96 bytes
# of packets: 64861761 (36816.41MB)
AvgRate: 343.20Mbps stddev:43.87M
IP flow (unique src/dst pair) Information
# of flows: 11579478 (avg. 5.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.0% 4.0% 3.8% 3.2% 3.0% 1.8% 1.7% 1.4% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 8841622
Top 10 bandwidth usage (bytes/total in %):
10.9% 8.2% 8.1% 8.1% 8.0% 5.6% 4.9% 4.1% 4.1% 3.9%
# of IPv6 addresses: 5659
Top 10 bandwidth usage (bytes/total in %):
28.0% 26.0% 10.1% 9.6% 8.5% 8.2% 7.5% 5.8% 5.1% 5.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204201400.pktlen.png)
detailed numbers
[ 32- 63]: 23458835
[ 64- 127]: 14284875
[ 128- 255]: 1268734
[ 256- 511]: 1048791
[ 512- 1023]: 815811
[ 1024- 2047]: 23984715
Protocol Breakdown
![[protocol breakdown chart]](201204201400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 64861761 (100.00%) 38604804367 (100.00%) 595.19
ip 63344043 ( 97.66%) 38259392653 ( 99.11%) 603.99
tcp 36723811 ( 56.62%) 29526573736 ( 76.48%) 804.02
http(s) 18782109 ( 28.96%) 25752687853 ( 66.71%) 1371.13
http(c) 8854202 ( 13.65%) 1263466872 ( 3.27%) 142.70
squid 30567 ( 0.05%) 17792565 ( 0.05%) 582.08
smtp 61785 ( 0.10%) 13777123 ( 0.04%) 222.98
ftp 11875 ( 0.02%) 1005960 ( 0.00%) 84.71
pop3 10253 ( 0.02%) 7864284 ( 0.02%) 767.02
imap 2192 ( 0.00%) 347331 ( 0.00%) 158.45
telnet 2722 ( 0.00%) 225347 ( 0.00%) 82.79
ssh 3550763 ( 5.47%) 254179094 ( 0.66%) 71.58
dns 2818 ( 0.00%) 307652 ( 0.00%) 109.17
bgp 633 ( 0.00%) 118037 ( 0.00%) 186.47
napster 476 ( 0.00%) 32866 ( 0.00%) 69.05
realaud 304 ( 0.00%) 115332 ( 0.00%) 379.38
rtsp 15531 ( 0.02%) 19263852 ( 0.05%) 1240.35
icecast 3294 ( 0.01%) 1810006 ( 0.00%) 549.49
hotline 61 ( 0.00%) 4729 ( 0.00%) 77.52
other 5394225 ( 8.32%) 2193574773 ( 5.68%) 406.65
udp 6442005 ( 9.93%) 3191555955 ( 8.27%) 495.43
dns 599862 ( 0.92%) 142802319 ( 0.37%) 238.06
rip 2 ( 0.00%) 141 ( 0.00%) 70.50
realaud 4 ( 0.00%) 390 ( 0.00%) 97.50
halflif 129 ( 0.00%) 33672 ( 0.00%) 261.02
starcra 27 ( 0.00%) 4812 ( 0.00%) 178.22
everque 444 ( 0.00%) 100651 ( 0.00%) 226.69
unreal 41 ( 0.00%) 9477 ( 0.00%) 231.15
quake 31 ( 0.00%) 3263 ( 0.00%) 105.26
cuseeme 3 ( 0.00%) 216 ( 0.00%) 72.00
other 5820942 ( 8.97%) 3047335860 ( 7.89%) 523.51
icmp 16616522 ( 25.62%) 1110087579 ( 2.88%) 66.81
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3551 ( 0.01%) 988618 ( 0.00%) 278.41
ip6 3537181 ( 5.45%) 4426677524 ( 11.47%) 1251.47
pim 256 ( 0.00%) 15360 ( 0.00%) 60.00
other 20532 ( 0.03%) 3474611 ( 0.01%) 169.23
frag 118222 ( 0.18%) 111439405 ( 0.29%) 942.63
ip6 1517718 ( 2.34%) 345411714 ( 0.89%) 227.59
tcp6 1418407 ( 2.19%) 319196403 ( 0.83%) 225.04
http(s) 72589 ( 0.11%) 72448667 ( 0.19%) 998.07
http(c) 42187 ( 0.07%) 3795005 ( 0.01%) 89.96
smtp 124 ( 0.00%) 54405 ( 0.00%) 438.75
ssh 1094569 ( 1.69%) 96753436 ( 0.25%) 88.39
dns 355 ( 0.00%) 72614 ( 0.00%) 204.55
bgp 91 ( 0.00%) 18456 ( 0.00%) 202.81
other 208492 ( 0.32%) 146053820 ( 0.38%) 700.52
udp6 71130 ( 0.11%) 21661226 ( 0.06%) 304.53
dns 68984 ( 0.11%) 21204526 ( 0.05%) 307.38
halflif 1 ( 0.00%) 108 ( 0.00%) 108.00
everque 1 ( 0.00%) 110 ( 0.00%) 110.00
other 2144 ( 0.00%) 456482 ( 0.00%) 212.91
icmp6 27332 ( 0.04%) 3827048 ( 0.01%) 140.02
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 733 ( 0.00%) 711291 ( 0.00%) 970.38
tcpdump file: 201204201400.dump.gz (1419.31 MB)