Traffic Trace Info
DumpFile: 201204221400.dump
FileSize: 3024.89MB
Id: 201204221400
StartTime: Sun Apr 22 14:00:01 2012
EndTime: Sun Apr 22 14:15:00 2012
TotalTime: 899.48 seconds
TotalCapSize: -1747.25MB CapLen: 96 bytes
# of packets: 44311392 (23666.59MB)
AvgRate: 220.69Mbps stddev:35.25M
IP flow (unique src/dst pair) Information
# of flows: 11310643 (avg. 3.92 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.9% 3.0% 2.6% 2.2% 2.1% 2.0% 1.9% 1.8% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 8791750
Top 10 bandwidth usage (bytes/total in %):
16.3% 12.8% 12.0% 12.0% 6.3% 5.1% 4.6% 3.8% 3.3% 3.1%
# of IPv6 addresses: 4401
Top 10 bandwidth usage (bytes/total in %):
59.3% 21.9% 20.1% 14.1% 14.1% 13.0% 9.0% 8.3% 5.7% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204221400.pktlen.png)
detailed numbers
[ 32- 63]: 19022467
[ 64- 127]: 7667985
[ 128- 255]: 1283776
[ 256- 511]: 564839
[ 512- 1023]: 699940
[ 1024- 2047]: 15072385
Protocol Breakdown
![[protocol breakdown chart]](201204221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44311392 (100.00%) 24816216467 (100.00%) 560.04
ip 43006168 ( 97.05%) 24656112088 ( 99.35%) 573.32
tcp 19141869 ( 43.20%) 17178892273 ( 69.22%) 897.45
http(s) 10288915 ( 23.22%) 13931643910 ( 56.14%) 1354.04
http(c) 4990970 ( 11.26%) 976356618 ( 3.93%) 195.62
squid 28959 ( 0.07%) 17279454 ( 0.07%) 596.69
smtp 40731 ( 0.09%) 6810701 ( 0.03%) 167.21
ftp 16843 ( 0.04%) 1444443 ( 0.01%) 85.76
pop3 10233 ( 0.02%) 10821660 ( 0.04%) 1057.53
imap 2569 ( 0.01%) 1477270 ( 0.01%) 575.04
telnet 669 ( 0.00%) 83583 ( 0.00%) 124.94
ssh 46261 ( 0.10%) 4540280 ( 0.02%) 98.14
dns 2359 ( 0.01%) 277383 ( 0.00%) 117.58
bgp 641 ( 0.00%) 127472 ( 0.00%) 198.86
napster 190 ( 0.00%) 13111 ( 0.00%) 69.01
realaud 19 ( 0.00%) 1200 ( 0.00%) 63.16
rtsp 185 ( 0.00%) 48334 ( 0.00%) 261.26
icecast 1784 ( 0.00%) 474043 ( 0.00%) 265.72
hotline 33 ( 0.00%) 2820 ( 0.00%) 85.45
other 3710508 ( 8.37%) 2227489991 ( 8.98%) 600.32
udp 4733603 ( 10.68%) 2663310358 ( 10.73%) 562.64
dns 355679 ( 0.80%) 83418386 ( 0.34%) 234.53
realaud 14 ( 0.00%) 1477 ( 0.00%) 105.50
halflif 86 ( 0.00%) 13644 ( 0.00%) 158.65
starcra 192 ( 0.00%) 29037 ( 0.00%) 151.23
everque 1467 ( 0.00%) 155470 ( 0.00%) 105.98
unreal 6 ( 0.00%) 810 ( 0.00%) 135.00
quake 31 ( 0.00%) 3916 ( 0.00%) 126.32
cuseeme 2 ( 0.00%) 152 ( 0.00%) 76.00
other 4376073 ( 9.88%) 2579657160 ( 10.40%) 589.49
icmp 15887296 ( 35.85%) 1037768408 ( 4.18%) 65.32
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 514 ( 0.00%) 162268 ( 0.00%) 315.70
ip6 3225173 ( 7.28%) 3773030718 ( 15.20%) 1169.87
pim 255 ( 0.00%) 15300 ( 0.00%) 60.00
other 17273 ( 0.04%) 2913493 ( 0.01%) 168.67
frag 426 ( 0.00%) 381835 ( 0.00%) 896.33
ip6 1305222 ( 2.95%) 160104259 ( 0.65%) 122.66
tcp6 1236221 ( 2.79%) 145013843 ( 0.58%) 117.30
http(s) 7577 ( 0.02%) 6925849 ( 0.03%) 914.06
http(c) 52471 ( 0.12%) 4581782 ( 0.02%) 87.32
smtp 40 ( 0.00%) 12408 ( 0.00%) 310.20
ssh 1076953 ( 2.43%) 94865813 ( 0.38%) 88.09
dns 328 ( 0.00%) 54616 ( 0.00%) 166.51
bgp 97 ( 0.00%) 20960 ( 0.00%) 216.08
other 98755 ( 0.22%) 38552415 ( 0.16%) 390.38
udp6 46049 ( 0.10%) 11303942 ( 0.05%) 245.48
dns 43677 ( 0.10%) 10681531 ( 0.04%) 244.56
realaud 1 ( 0.00%) 101 ( 0.00%) 101.00
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
cuseeme 1 ( 0.00%) 106 ( 0.00%) 106.00
other 2369 ( 0.01%) 622099 ( 0.00%) 262.60
icmp6 22309 ( 0.05%) 3276932 ( 0.01%) 146.89
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 530 ( 0.00%) 494168 ( 0.00%) 932.39
tcpdump file: 201204221400.dump.gz (966.29 MB)