Traffic Trace Info
DumpFile: 201204211400.dump
FileSize: 3376.08MB
Id: 201204211400
StartTime: Sat Apr 21 14:00:00 2012
EndTime: Sat Apr 21 14:15:00 2012
TotalTime: 900.44 seconds
TotalCapSize: -1467.12MB CapLen: 96 bytes
# of packets: 48967807 (28727.11MB)
AvgRate: 267.62Mbps stddev:52.29M
IP flow (unique src/dst pair) Information
# of flows: 11258431 (avg. 4.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.4% 5.2% 4.7% 2.4% 1.6% 1.6% 1.5% 1.4% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 8735311
Top 10 bandwidth usage (bytes/total in %):
16.4% 11.9% 11.2% 10.5% 10.5% 7.0% 6.2% 5.3% 4.8% 3.8%
# of IPv6 addresses: 4807
Top 10 bandwidth usage (bytes/total in %):
54.2% 21.5% 20.5% 13.0% 12.2% 7.8% 5.2% 5.1% 4.9% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204211400.pktlen.png)
detailed numbers
[ 32- 63]: 19759807
[ 64- 127]: 8030631
[ 128- 255]: 1102722
[ 256- 511]: 654887
[ 512- 1023]: 762773
[ 1024- 2047]: 18656987
Protocol Breakdown
![[protocol breakdown chart]](201204211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 48967807 (100.00%) 30122558636 (100.00%) 615.15
ip 47620470 ( 97.25%) 29936681556 ( 99.38%) 628.65
tcp 24795773 ( 50.64%) 23228524162 ( 77.11%) 936.79
http(s) 14128739 ( 28.85%) 19224831286 ( 63.82%) 1360.69
http(c) 4788890 ( 9.78%) 463073209 ( 1.54%) 96.70
squid 181648 ( 0.37%) 171042151 ( 0.57%) 941.61
smtp 30593 ( 0.06%) 6541973 ( 0.02%) 213.84
ftp 35473 ( 0.07%) 2986677 ( 0.01%) 84.20
pop3 6730 ( 0.01%) 5442344 ( 0.02%) 808.67
imap 727 ( 0.00%) 266359 ( 0.00%) 366.38
telnet 17944 ( 0.04%) 1344910 ( 0.00%) 74.95
ssh 31657 ( 0.06%) 19840709 ( 0.07%) 626.74
dns 2213 ( 0.00%) 254755 ( 0.00%) 115.12
bgp 635 ( 0.00%) 135097 ( 0.00%) 212.75
napster 91 ( 0.00%) 6775 ( 0.00%) 74.45
realaud 600 ( 0.00%) 64867 ( 0.00%) 108.11
rtsp 82078 ( 0.17%) 121469940 ( 0.40%) 1479.93
icecast 4617 ( 0.01%) 3575812 ( 0.01%) 774.49
hotline 35 ( 0.00%) 2690 ( 0.00%) 76.86
other 5483103 ( 11.20%) 3207644608 ( 10.65%) 585.01
udp 3748714 ( 7.66%) 1583539006 ( 5.26%) 422.42
dns 422212 ( 0.86%) 94938575 ( 0.32%) 224.86
rip 1 ( 0.00%) 70 ( 0.00%) 70.00
realaud 62 ( 0.00%) 7828 ( 0.00%) 126.26
halflif 95 ( 0.00%) 15490 ( 0.00%) 163.05
starcra 49 ( 0.00%) 6693 ( 0.00%) 136.59
everque 278 ( 0.00%) 38451 ( 0.00%) 138.31
unreal 9 ( 0.00%) 1294 ( 0.00%) 143.78
quake 17 ( 0.00%) 2783 ( 0.00%) 163.71
cuseeme 5 ( 0.00%) 771 ( 0.00%) 154.20
other 3325894 ( 6.79%) 1488487177 ( 4.94%) 447.54
icmp 15657264 ( 31.97%) 1025274146 ( 3.40%) 65.48
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 208 ( 0.00%) 32224 ( 0.00%) 154.92
ip6 3401872 ( 6.95%) 4095039799 ( 13.59%) 1203.76
pim 124 ( 0.00%) 7440 ( 0.00%) 60.00
other 16331 ( 0.03%) 4245619 ( 0.01%) 259.97
frag 438 ( 0.00%) 416639 ( 0.00%) 951.23
ip6 1347337 ( 2.75%) 185877080 ( 0.62%) 137.96
tcp6 1259129 ( 2.57%) 157535043 ( 0.52%) 125.11
http(s) 9225 ( 0.02%) 9232621 ( 0.03%) 1000.83
http(c) 27769 ( 0.06%) 2378530 ( 0.01%) 85.65
squid 907 ( 0.00%) 758955 ( 0.00%) 836.78
smtp 1 ( 0.00%) 74 ( 0.00%) 74.00
ssh 1140859 ( 2.33%) 100756405 ( 0.33%) 88.32
dns 247 ( 0.00%) 53232 ( 0.00%) 215.51
bgp 89 ( 0.00%) 14897 ( 0.00%) 167.38
other 80032 ( 0.16%) 44340329 ( 0.15%) 554.03
udp6 55613 ( 0.11%) 15604176 ( 0.05%) 280.59
dns 53529 ( 0.11%) 15175352 ( 0.05%) 283.50
halflif 3 ( 0.00%) 336 ( 0.00%) 112.00
quake 2 ( 0.00%) 195 ( 0.00%) 97.50
other 2079 ( 0.00%) 428293 ( 0.00%) 206.01
icmp6 18456 ( 0.04%) 2782249 ( 0.01%) 150.75
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 14027 ( 0.03%) 9940356 ( 0.03%) 708.66
tcpdump file: 201204211400.dump.gz (1082.30 MB)