Traffic Trace Info
DumpFile: 201204281400.dump
FileSize: 2370.85MB
Id: 201204281400
StartTime: Sat Apr 28 14:00:00 2012
EndTime: Sat Apr 28 14:15:01 2012
TotalTime: 900.24 seconds
TotalCapSize: 1866.65MB CapLen: 96 bytes
# of packets: 33042566 (25927.50MB)
AvgRate: 241.57Mbps stddev:54.50M
IP flow (unique src/dst pair) Information
# of flows: 1960126 (avg. 16.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 2.9% 2.2% 1.9% 1.7% 1.7% 1.7% 1.7% 1.5% 1.5%
IP address Information
# of IPv4 addresses: 1471850
Top 10 bandwidth usage (bytes/total in %):
19.6% 11.0% 10.4% 7.4% 5.3% 5.0% 4.1% 3.6% 3.6% 3.5%
# of IPv6 addresses: 4914
Top 10 bandwidth usage (bytes/total in %):
22.9% 18.2% 18.1% 14.9% 13.0% 13.0% 10.1% 9.5% 7.8% 6.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204281400.pktlen.png)
detailed numbers
[ 32- 63]: 6684893
[ 64- 127]: 6830342
[ 128- 255]: 859059
[ 256- 511]: 715353
[ 512- 1023]: 779267
[ 1024- 2047]: 17173652
Protocol Breakdown
![[protocol breakdown chart]](201204281400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33042566 (100.00%) 27186952159 (100.00%) 822.79
ip 32588250 ( 98.63%) 26914240726 ( 99.00%) 825.89
tcp 26065121 ( 78.88%) 23696786539 ( 87.16%) 909.14
http(s) 14518911 ( 43.94%) 20256318913 ( 74.51%) 1395.17
http(c) 6526640 ( 19.75%) 737583543 ( 2.71%) 113.01
squid 48090 ( 0.15%) 37049797 ( 0.14%) 770.43
smtp 48208 ( 0.15%) 10704986 ( 0.04%) 222.06
ftp 9000 ( 0.03%) 894900 ( 0.00%) 99.43
pop3 1793 ( 0.01%) 488613 ( 0.00%) 272.51
imap 1266 ( 0.00%) 113999 ( 0.00%) 90.05
telnet 6272 ( 0.02%) 459508 ( 0.00%) 73.26
ssh 198075 ( 0.60%) 33303946 ( 0.12%) 168.14
dns 1547 ( 0.00%) 238910 ( 0.00%) 154.43
bgp 631 ( 0.00%) 114963 ( 0.00%) 182.19
napster 515 ( 0.00%) 32949 ( 0.00%) 63.98
realaud 30 ( 0.00%) 3876 ( 0.00%) 129.20
rtsp 5533 ( 0.02%) 5830896 ( 0.02%) 1053.84
icecast 1006 ( 0.00%) 190096 ( 0.00%) 188.96
hotline 21 ( 0.00%) 1725 ( 0.00%) 82.14
other 4697579 ( 14.22%) 2613454679 ( 9.61%) 556.34
udp 3312402 ( 10.02%) 1607062719 ( 5.91%) 485.17
dns 421758 ( 1.28%) 106175126 ( 0.39%) 251.74
realaud 8 ( 0.00%) 1002 ( 0.00%) 125.25
halflif 84 ( 0.00%) 26319 ( 0.00%) 313.32
starcra 16 ( 0.00%) 1945 ( 0.00%) 121.56
everque 999 ( 0.00%) 694426 ( 0.00%) 695.12
unreal 64 ( 0.00%) 31801 ( 0.00%) 496.89
quake 77 ( 0.00%) 11759 ( 0.00%) 152.71
cuseeme 6 ( 0.00%) 539 ( 0.00%) 89.83
other 2872522 ( 8.69%) 1499073288 ( 5.51%) 521.87
icmp 1484265 ( 4.49%) 148079686 ( 0.54%) 99.77
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6216 ( 0.02%) 1552696 ( 0.01%) 249.79
ip6 1704509 ( 5.16%) 1456562479 ( 5.36%) 854.53
pim 187 ( 0.00%) 11220 ( 0.00%) 60.00
other 15365 ( 0.05%) 4166117 ( 0.02%) 271.14
frag 36917 ( 0.11%) 28251805 ( 0.10%) 765.28
ip6 454316 ( 1.37%) 272711433 ( 1.00%) 600.27
tcp6 285441 ( 0.86%) 184001293 ( 0.68%) 644.62
http(s) 57305 ( 0.17%) 47982313 ( 0.18%) 837.31
http(c) 56040 ( 0.17%) 4832025 ( 0.02%) 86.22
squid 481 ( 0.00%) 551239 ( 0.00%) 1146.03
smtp 20 ( 0.00%) 14994 ( 0.00%) 749.70
dns 261 ( 0.00%) 52607 ( 0.00%) 201.56
bgp 88 ( 0.00%) 14245 ( 0.00%) 161.88
other 171246 ( 0.52%) 130553870 ( 0.48%) 762.38
udp6 75040 ( 0.23%) 35646715 ( 0.13%) 475.04
dns 47914 ( 0.15%) 10763967 ( 0.04%) 224.65
realaud 2 ( 0.00%) 211 ( 0.00%) 105.50
starcra 3 ( 0.00%) 286 ( 0.00%) 95.33
other 27121 ( 0.08%) 24882251 ( 0.09%) 917.45
icmp6 22985 ( 0.07%) 3287209 ( 0.01%) 143.02
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 70736 ( 0.21%) 49760724 ( 0.18%) 703.47
tcpdump file: 201204281400.dump.gz (745.64 MB)