Traffic Trace Info
DumpFile: 201204271400.dump
FileSize: 2682.70MB
Id: 201204271400
StartTime: Fri Apr 27 14:00:00 2012
EndTime: Fri Apr 27 14:15:00 2012
TotalTime: 900.11 seconds
TotalCapSize: -1986.46MB CapLen: 96 bytes
# of packets: 37561692 (28102.62MB)
AvgRate: 261.90Mbps stddev:51.14M
IP flow (unique src/dst pair) Information
# of flows: 1941639 (avg. 19.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.7% 2.5% 1.7% 1.6% 1.5% 1.5% 1.3% 1.3% 1.0%
IP address Information
# of IPv4 addresses: 1168554
Top 10 bandwidth usage (bytes/total in %):
15.9% 8.4% 7.6% 5.0% 4.1% 3.6% 3.3% 3.0% 3.0% 2.9%
# of IPv6 addresses: 5766
Top 10 bandwidth usage (bytes/total in %):
55.2% 53.5% 31.6% 31.6% 6.7% 5.4% 1.4% 1.0% 1.0% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204271400.pktlen.png)
detailed numbers
[ 32- 63]: 7891288
[ 64- 127]: 8245908
[ 128- 255]: 1091903
[ 256- 511]: 844046
[ 512- 1023]: 880644
[ 1024- 2047]: 18607903
Protocol Breakdown
![[protocol breakdown chart]](201204271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37561692 (100.00%) 29467733153 (100.00%) 784.52
ip 36684376 ( 97.66%) 28548788834 ( 96.88%) 778.23
tcp 28816561 ( 76.72%) 24658360603 ( 83.68%) 855.70
http(s) 14877223 ( 39.61%) 19796733445 ( 67.18%) 1330.67
http(c) 7937507 ( 21.13%) 1316312433 ( 4.47%) 165.83
squid 266321 ( 0.71%) 92048605 ( 0.31%) 345.63
smtp 67984 ( 0.18%) 35749807 ( 0.12%) 525.86
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 8637 ( 0.02%) 797502 ( 0.00%) 92.34
pop3 4556 ( 0.01%) 1388513 ( 0.00%) 304.77
imap 5601 ( 0.01%) 2266852 ( 0.01%) 404.72
telnet 26148 ( 0.07%) 1914830 ( 0.01%) 73.23
ssh 69205 ( 0.18%) 47063016 ( 0.16%) 680.05
dns 1913 ( 0.01%) 265410 ( 0.00%) 138.74
bgp 669 ( 0.00%) 138637 ( 0.00%) 207.23
napster 80 ( 0.00%) 6400 ( 0.00%) 80.00
realaud 148 ( 0.00%) 16169 ( 0.00%) 109.25
rtsp 16011 ( 0.04%) 15740525 ( 0.05%) 983.11
icecast 15502 ( 0.04%) 12249953 ( 0.04%) 790.22
hotline 18 ( 0.00%) 1166 ( 0.00%) 64.78
other 5519026 ( 14.69%) 3335666592 ( 11.32%) 604.39
udp 4816376 ( 12.82%) 2791698852 ( 9.47%) 579.63
dns 505599 ( 1.35%) 129243497 ( 0.44%) 255.62
rip 2 ( 0.00%) 140 ( 0.00%) 70.00
realaud 21 ( 0.00%) 3338 ( 0.00%) 158.95
halflif 13 ( 0.00%) 1564 ( 0.00%) 120.31
starcra 63 ( 0.00%) 6300 ( 0.00%) 100.00
everque 1606 ( 0.00%) 958305 ( 0.00%) 596.70
unreal 31 ( 0.00%) 10120 ( 0.00%) 326.45
quake 564 ( 0.00%) 539100 ( 0.00%) 955.85
cuseeme 10 ( 0.00%) 1909 ( 0.00%) 190.90
other 4308226 ( 11.47%) 2660863772 ( 9.03%) 617.62
icmp 1318242 ( 3.51%) 148755127 ( 0.50%) 112.84
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1882 ( 0.01%) 622988 ( 0.00%) 331.02
ip6 1715409 ( 4.57%) 945235958 ( 3.21%) 551.03
pim 246 ( 0.00%) 14760 ( 0.00%) 60.00
other 15475 ( 0.04%) 4081276 ( 0.01%) 263.73
frag 6500 ( 0.02%) 5084671 ( 0.02%) 782.26
ip6 877316 ( 2.34%) 918944319 ( 3.12%) 1047.45
tcp6 772088 ( 2.06%) 896256814 ( 3.04%) 1160.82
http(s) 281847 ( 0.75%) 372547219 ( 1.26%) 1321.81
http(c) 71335 ( 0.19%) 6434088 ( 0.02%) 90.20
smtp 64 ( 0.00%) 36431 ( 0.00%) 569.23
pop3 51 ( 0.00%) 4994 ( 0.00%) 97.92
dns 379 ( 0.00%) 73823 ( 0.00%) 194.78
bgp 88 ( 0.00%) 23024 ( 0.00%) 261.64
other 418324 ( 1.11%) 517137235 ( 1.75%) 1236.21
udp6 72537 ( 0.19%) 17581664 ( 0.06%) 242.38
dns 69221 ( 0.18%) 16712193 ( 0.06%) 241.43
realaud 3 ( 0.00%) 321 ( 0.00%) 107.00
halflif 2 ( 0.00%) 225 ( 0.00%) 112.50
everque 1 ( 0.00%) 99 ( 0.00%) 99.00
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
cuseeme 1 ( 0.00%) 111 ( 0.00%) 111.00
other 3308 ( 0.01%) 868610 ( 0.00%) 262.58
icmp6 31944 ( 0.09%) 4493347 ( 0.02%) 140.66
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 633 ( 0.00%) 597002 ( 0.00%) 943.13
tcpdump file: 201204271400.dump.gz (862.95 MB)