Traffic Trace Info
DumpFile: 201204261400.dump
FileSize: 3373.52MB
Id: 201204261400
StartTime: Thu Apr 26 14:00:00 2012
EndTime: Thu Apr 26 14:15:00 2012
TotalTime: 899.89 seconds
TotalCapSize: -1496.31MB CapLen: 96 bytes
# of packets: 50713467 (25746.80MB)
AvgRate: 239.97Mbps stddev:37.29M
IP flow (unique src/dst pair) Information
# of flows: 11354565 (avg. 4.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.3% 2.5% 2.4% 2.2% 1.5% 1.3% 1.0% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 8793160
Top 10 bandwidth usage (bytes/total in %):
10.6% 7.7% 7.4% 7.3% 5.8% 4.7% 4.1% 3.5% 3.5% 3.4%
# of IPv6 addresses: 5836
Top 10 bandwidth usage (bytes/total in %):
44.5% 39.6% 14.4% 11.2% 8.5% 5.2% 5.2% 4.6% 3.2% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204261400.pktlen.png)
detailed numbers
[ 32- 63]: 22633771
[ 64- 127]: 8987862
[ 128- 255]: 1267975
[ 256- 511]: 792445
[ 512- 1023]: 731710
[ 1024- 2047]: 16299704
Protocol Breakdown
![[protocol breakdown chart]](201204261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 50713467 (100.00%) 26997478895 (100.00%) 532.35
ip 50356368 ( 99.30%) 26798736968 ( 99.26%) 532.18
tcp 28398236 ( 56.00%) 22425718362 ( 83.07%) 789.69
http(s) 14122557 ( 27.85%) 18920771193 ( 70.08%) 1339.76
http(c) 9832359 ( 19.39%) 1223109884 ( 4.53%) 124.40
squid 41853 ( 0.08%) 22486888 ( 0.08%) 537.28
smtp 64136 ( 0.13%) 29144411 ( 0.11%) 454.42
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 10827 ( 0.02%) 1038979 ( 0.00%) 95.96
pop3 6644 ( 0.01%) 3821065 ( 0.01%) 575.12
imap 2135 ( 0.00%) 506234 ( 0.00%) 237.11
telnet 524 ( 0.00%) 64218 ( 0.00%) 122.55
ssh 12336 ( 0.02%) 2158193 ( 0.01%) 174.95
dns 2555 ( 0.01%) 290960 ( 0.00%) 113.88
bgp 627 ( 0.00%) 106812 ( 0.00%) 170.35
napster 66 ( 0.00%) 11470 ( 0.00%) 173.79
realaud 287 ( 0.00%) 19116 ( 0.00%) 66.61
rtsp 48490 ( 0.10%) 69508191 ( 0.26%) 1433.45
icecast 19704 ( 0.04%) 15549883 ( 0.06%) 789.17
hotline 24 ( 0.00%) 2026 ( 0.00%) 84.42
other 4233100 ( 8.35%) 2137128091 ( 7.92%) 504.86
udp 4844539 ( 9.55%) 2293253318 ( 8.49%) 473.37
dns 507777 ( 1.00%) 124741577 ( 0.46%) 245.66
realaud 30 ( 0.00%) 3672 ( 0.00%) 122.40
halflif 36 ( 0.00%) 5470 ( 0.00%) 151.94
starcra 63 ( 0.00%) 9156 ( 0.00%) 145.33
everque 4657 ( 0.01%) 3639726 ( 0.01%) 781.56
unreal 36 ( 0.00%) 8756 ( 0.00%) 243.22
quake 11 ( 0.00%) 1438 ( 0.00%) 130.73
cuseeme 2 ( 0.00%) 237 ( 0.00%) 118.50
other 4330818 ( 8.54%) 2164716538 ( 8.02%) 499.84
icmp 15865737 ( 31.29%) 1039670841 ( 3.85%) 65.53
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2691 ( 0.01%) 625906 ( 0.00%) 232.59
ip6 1228007 ( 2.42%) 1035259969 ( 3.83%) 843.04
pim 393 ( 0.00%) 23580 ( 0.00%) 60.00
other 16581 ( 0.03%) 4165832 ( 0.02%) 251.24
frag 843163 ( 1.66%) 643485947 ( 2.38%) 763.18
ip6 357099 ( 0.70%) 198741927 ( 0.74%) 556.55
tcp6 239823 ( 0.47%) 174631644 ( 0.65%) 728.17
http(s) 128180 ( 0.25%) 114685389 ( 0.42%) 894.72
http(c) 61631 ( 0.12%) 5467975 ( 0.02%) 88.72
smtp 101 ( 0.00%) 37795 ( 0.00%) 374.21
pop3 11 ( 0.00%) 981 ( 0.00%) 89.18
dns 325 ( 0.00%) 60585 ( 0.00%) 186.42
bgp 90 ( 0.00%) 27392 ( 0.00%) 304.36
other 49485 ( 0.10%) 54351527 ( 0.20%) 1098.34
udp6 90236 ( 0.18%) 19823516 ( 0.07%) 219.69
dns 68638 ( 0.14%) 16746327 ( 0.06%) 243.98
halflif 1 ( 0.00%) 118 ( 0.00%) 118.00
starcra 2 ( 0.00%) 220 ( 0.00%) 110.00
everque 2 ( 0.00%) 199 ( 0.00%) 99.50
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 21592 ( 0.04%) 3076545 ( 0.01%) 142.49
icmp6 26353 ( 0.05%) 3733942 ( 0.01%) 141.69
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 572 ( 0.00%) 537197 ( 0.00%) 939.16
tcpdump file: 201204261400.dump.gz (1135.73 MB)