Traffic Trace Info
DumpFile: 201204231400.dump
FileSize: 3440.13MB
Id: 201204231400
StartTime: Mon Apr 23 14:00:00 2012
EndTime: Mon Apr 23 14:15:00 2012
TotalTime: 900.56 seconds
TotalCapSize: -1428.01MB CapLen: 96 bytes
# of packets: 50602290 (26908.52MB)
AvgRate: 250.72Mbps stddev:75.33M
IP flow (unique src/dst pair) Information
# of flows: 11351364 (avg. 4.46 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 4.3% 3.1% 2.3% 2.0% 1.9% 1.9% 1.4% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 8719177
Top 10 bandwidth usage (bytes/total in %):
13.6% 6.9% 6.9% 6.1% 5.1% 5.0% 4.9% 4.5% 4.5% 4.2%
# of IPv6 addresses: 5263
Top 10 bandwidth usage (bytes/total in %):
86.4% 84.0% 4.3% 3.8% 2.0% 2.0% 1.2% 0.7% 0.6% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204231400.pktlen.png)
detailed numbers
[ 32- 63]: 20809702
[ 64- 127]: 9686322
[ 128- 255]: 1093563
[ 256- 511]: 870816
[ 512- 1023]: 963332
[ 1024- 2047]: 17178555
Protocol Breakdown
![[protocol breakdown chart]](201204231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 50602290 (100.00%) 28215625201 (100.00%) 557.60
ip 49778883 ( 98.37%) 27431908112 ( 97.22%) 551.08
tcp 28221883 ( 55.77%) 23248130747 ( 82.39%) 823.76
http(s) 13726209 ( 27.13%) 18305834180 ( 64.88%) 1333.64
http(c) 6625200 ( 13.09%) 1237382317 ( 4.39%) 186.77
squid 87581 ( 0.17%) 78494929 ( 0.28%) 896.26
smtp 129436 ( 0.26%) 49543908 ( 0.18%) 382.77
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 21097 ( 0.04%) 7879396 ( 0.03%) 373.48
pop3 8352 ( 0.02%) 6015793 ( 0.02%) 720.28
imap 2197 ( 0.00%) 584297 ( 0.00%) 265.95
telnet 736 ( 0.00%) 77743 ( 0.00%) 105.63
ssh 12459 ( 0.02%) 2914319 ( 0.01%) 233.91
dns 2573 ( 0.01%) 297875 ( 0.00%) 115.77
bgp 622 ( 0.00%) 112857 ( 0.00%) 181.44
napster 101 ( 0.00%) 14079 ( 0.00%) 139.40
realaud 1578 ( 0.00%) 100535 ( 0.00%) 63.71
rtsp 18360 ( 0.04%) 19521325 ( 0.07%) 1063.25
icecast 12473 ( 0.02%) 7506526 ( 0.03%) 601.82
hotline 41 ( 0.00%) 5046 ( 0.00%) 123.07
other 7572857 ( 14.97%) 3531844948 ( 12.52%) 466.38
udp 4152392 ( 8.21%) 1925007537 ( 6.82%) 463.59
dns 574784 ( 1.14%) 141006474 ( 0.50%) 245.32
realaud 91 ( 0.00%) 15136 ( 0.00%) 166.33
halflif 10 ( 0.00%) 1203 ( 0.00%) 120.30
starcra 24 ( 0.00%) 3477 ( 0.00%) 144.88
everque 805 ( 0.00%) 245009 ( 0.00%) 304.36
unreal 7 ( 0.00%) 994 ( 0.00%) 142.00
quake 31 ( 0.00%) 4506 ( 0.00%) 145.35
cuseeme 5 ( 0.00%) 660 ( 0.00%) 132.00
other 3576377 ( 7.07%) 1783671018 ( 6.32%) 498.74
icmp 15865612 ( 31.35%) 1044920848 ( 3.70%) 65.86
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 13055 ( 0.03%) 2612186 ( 0.01%) 200.09
ip6 1507431 ( 2.98%) 1206703795 ( 4.28%) 800.50
pim 283 ( 0.00%) 16980 ( 0.00%) 60.00
other 18043 ( 0.04%) 4496859 ( 0.02%) 249.23
frag 16588 ( 0.03%) 12792961 ( 0.05%) 771.22
ip6 823405 ( 1.63%) 783716969 ( 2.78%) 951.80
tcp6 716009 ( 1.41%) 755630363 ( 2.68%) 1055.34
http(s) 52900 ( 0.10%) 52284143 ( 0.19%) 988.36
http(c) 47825 ( 0.09%) 4474776 ( 0.02%) 93.57
smtp 460 ( 0.00%) 170292 ( 0.00%) 370.20
pop3 171 ( 0.00%) 72211 ( 0.00%) 422.29
dns 381 ( 0.00%) 69384 ( 0.00%) 182.11
bgp 102 ( 0.00%) 27715 ( 0.00%) 271.72
realaud 4 ( 0.00%) 304 ( 0.00%) 76.00
other 614166 ( 1.21%) 698531538 ( 2.48%) 1137.37
udp6 82030 ( 0.16%) 23824737 ( 0.08%) 290.44
dns 74334 ( 0.15%) 19539654 ( 0.07%) 262.86
realaud 1 ( 0.00%) 105 ( 0.00%) 105.00
halflif 2 ( 0.00%) 212 ( 0.00%) 106.00
starcra 1 ( 0.00%) 104 ( 0.00%) 104.00
quake 2 ( 0.00%) 212 ( 0.00%) 106.00
cuseeme 1 ( 0.00%) 105 ( 0.00%) 105.00
other 7689 ( 0.02%) 4284345 ( 0.02%) 557.20
icmp6 24693 ( 0.05%) 3715569 ( 0.01%) 150.47
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 559 ( 0.00%) 530790 ( 0.00%) 949.53
tcpdump file: 201204231400.dump.gz (1154.96 MB)