Traffic Trace Info
DumpFile: 201204241400.dump
FileSize: 3761.67MB
Id: 201204241400
StartTime: Tue Apr 24 14:00:01 2012
EndTime: Tue Apr 24 14:15:00 2012
TotalTime: 899.59 seconds
TotalCapSize: -1184.61MB CapLen: 96 bytes
# of packets: 55723899 (29093.71MB)
AvgRate: 271.35Mbps stddev:31.30M
IP flow (unique src/dst pair) Information
# of flows: 12398625 (avg. 4.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.8% 1.8% 1.7% 1.5% 1.4% 1.4% 1.4% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 9345799
Top 10 bandwidth usage (bytes/total in %):
12.8% 6.7% 6.4% 6.4% 5.9% 5.7% 3.3% 3.1% 2.6% 2.3%
# of IPv6 addresses: 6145
Top 10 bandwidth usage (bytes/total in %):
60.2% 57.1% 17.0% 17.0% 11.4% 10.7% 2.4% 2.4% 1.4% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204241400.pktlen.png)
detailed numbers
[ 32- 63]: 22843337
[ 64- 127]: 10747135
[ 128- 255]: 1262024
[ 256- 511]: 1222460
[ 512- 1023]: 1299803
[ 1024- 2047]: 18349140
Protocol Breakdown
![[protocol breakdown chart]](201204241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 55723899 (100.00%) 30506966388 (100.00%) 547.47
ip 54993702 ( 98.69%) 29849382360 ( 97.84%) 542.78
tcp 30635121 ( 54.98%) 24387542507 ( 79.94%) 796.06
http(s) 14388461 ( 25.82%) 18883935090 ( 61.90%) 1312.44
http(c) 8119024 ( 14.57%) 1272261990 ( 4.17%) 156.70
squid 154164 ( 0.28%) 151287798 ( 0.50%) 981.34
smtp 60143 ( 0.11%) 26335635 ( 0.09%) 437.88
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 6994 ( 0.01%) 592126 ( 0.00%) 84.66
pop3 16658 ( 0.03%) 10429723 ( 0.03%) 626.11
imap 1941 ( 0.00%) 569739 ( 0.00%) 293.53
telnet 43837 ( 0.08%) 3238677 ( 0.01%) 73.88
ssh 17475 ( 0.03%) 5289268 ( 0.02%) 302.68
dns 4975 ( 0.01%) 2121223 ( 0.01%) 426.38
bgp 682 ( 0.00%) 149158 ( 0.00%) 218.71
napster 137 ( 0.00%) 8867 ( 0.00%) 64.72
realaud 49 ( 0.00%) 4085 ( 0.00%) 83.37
rtsp 65879 ( 0.12%) 84837783 ( 0.28%) 1287.78
icecast 14090 ( 0.03%) 11788516 ( 0.04%) 836.66
hotline 59 ( 0.00%) 5775 ( 0.00%) 97.88
other 7740545 ( 13.89%) 3934686560 ( 12.90%) 508.32
udp 5417274 ( 9.72%) 2531222756 ( 8.30%) 467.25
dns 489355 ( 0.88%) 125092919 ( 0.41%) 255.63
realaud 18 ( 0.00%) 2195 ( 0.00%) 121.94
halflif 64 ( 0.00%) 20001 ( 0.00%) 312.52
starcra 37 ( 0.00%) 3749 ( 0.00%) 101.32
everque 2531 ( 0.00%) 1366691 ( 0.00%) 539.98
unreal 89 ( 0.00%) 46159 ( 0.00%) 518.64
quake 99 ( 0.00%) 12360 ( 0.00%) 124.85
cuseeme 2 ( 0.00%) 184 ( 0.00%) 92.00
other 4702281 ( 8.44%) 2390275308 ( 7.84%) 508.32
icmp 16882527 ( 30.30%) 1080598987 ( 3.54%) 64.01
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 13932 ( 0.03%) 4639856 ( 0.02%) 333.04
ip6 2016599 ( 3.62%) 1840767598 ( 6.03%) 912.81
pim 174 ( 0.00%) 10440 ( 0.00%) 60.00
other 27891 ( 0.05%) 4581056 ( 0.02%) 164.25
frag 514699 ( 0.92%) 423710380 ( 1.39%) 823.22
ip6 730197 ( 1.31%) 657584028 ( 2.16%) 900.56
tcp6 610933 ( 1.10%) 618554816 ( 2.03%) 1012.48
http(s) 189340 ( 0.34%) 212600350 ( 0.70%) 1122.85
http(c) 76301 ( 0.14%) 6622281 ( 0.02%) 86.79
squid 6 ( 0.00%) 468 ( 0.00%) 78.00
smtp 106 ( 0.00%) 48576 ( 0.00%) 458.26
ftp 27 ( 0.00%) 2213 ( 0.00%) 81.96
dns 255 ( 0.00%) 54137 ( 0.00%) 212.30
bgp 89 ( 0.00%) 15185 ( 0.00%) 170.62
other 344809 ( 0.62%) 399211606 ( 1.31%) 1157.78
udp6 90507 ( 0.16%) 34593853 ( 0.11%) 382.22
dns 72717 ( 0.13%) 19779113 ( 0.06%) 272.00
everque 2 ( 0.00%) 202 ( 0.00%) 101.00
other 17788 ( 0.03%) 14814538 ( 0.05%) 832.84
icmp6 28055 ( 0.05%) 3869737 ( 0.01%) 137.93
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 588 ( 0.00%) 550130 ( 0.00%) 935.60
tcpdump file: 201204241400.dump.gz (1274.70 MB)