Traffic Trace Info
DumpFile: 201204291400.dump
FileSize: 1954.76MB
Id: 201204291400
StartTime: Sun Apr 29 14:00:00 2012
EndTime: Sun Apr 29 14:15:00 2012
TotalTime: 899.46 seconds
TotalCapSize: 1535.12MB CapLen: 96 bytes
# of packets: 27500872 (20958.30MB)
AvgRate: 195.48Mbps stddev:46.68M
IP flow (unique src/dst pair) Information
# of flows: 1779566 (avg. 15.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.3% 2.7% 2.3% 1.9% 1.8% 1.8% 1.7% 1.5% 1.4% 1.2%
IP address Information
# of IPv4 addresses: 1395191
Top 10 bandwidth usage (bytes/total in %):
17.1% 15.4% 12.4% 6.9% 4.0% 3.5% 3.1% 2.7% 2.7% 2.7%
# of IPv6 addresses: 4874
Top 10 bandwidth usage (bytes/total in %):
42.6% 35.7% 23.6% 13.1% 13.1% 4.4% 3.5% 3.4% 3.2% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204291400.pktlen.png)
detailed numbers
[ 32- 63]: 5798919
[ 64- 127]: 5769188
[ 128- 255]: 804523
[ 256- 511]: 656778
[ 512- 1023]: 571208
[ 1024- 2047]: 13900256
Protocol Breakdown
![[protocol breakdown chart]](201204291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27500872 (100.00%) 21976366266 (100.00%) 799.12
ip 27009408 ( 98.21%) 21577541546 ( 98.19%) 798.89
tcp 20251113 ( 73.64%) 18101487019 ( 82.37%) 893.85
http(s) 11005914 ( 40.02%) 15218162457 ( 69.25%) 1382.73
http(c) 4495234 ( 16.35%) 643271540 ( 2.93%) 143.10
squid 35409 ( 0.13%) 12393454 ( 0.06%) 350.01
smtp 45764 ( 0.17%) 18535761 ( 0.08%) 405.03
ftp 10443 ( 0.04%) 1579287 ( 0.01%) 151.23
pop3 29134 ( 0.11%) 24950439 ( 0.11%) 856.40
imap 2512 ( 0.01%) 277890 ( 0.00%) 110.62
telnet 7655 ( 0.03%) 582011 ( 0.00%) 76.03
ssh 114047 ( 0.41%) 11613103 ( 0.05%) 101.83
dns 1849 ( 0.01%) 244275 ( 0.00%) 132.11
bgp 642 ( 0.00%) 125426 ( 0.00%) 195.37
napster 177 ( 0.00%) 12204 ( 0.00%) 68.95
realaud 134 ( 0.00%) 8512 ( 0.00%) 63.52
rtsp 23236 ( 0.08%) 13359304 ( 0.06%) 574.94
icecast 2535 ( 0.01%) 315821 ( 0.00%) 124.58
hotline 47212 ( 0.17%) 46216478 ( 0.21%) 978.91
other 4429215 ( 16.11%) 2109838997 ( 9.60%) 476.35
udp 3995664 ( 14.53%) 2366925684 ( 10.77%) 592.37
dns 357901 ( 1.30%) 87222639 ( 0.40%) 243.71
realaud 32 ( 0.00%) 4434 ( 0.00%) 138.56
halflif 51 ( 0.00%) 10755 ( 0.00%) 210.88
starcra 25 ( 0.00%) 3554 ( 0.00%) 142.16
everque 1067 ( 0.00%) 751799 ( 0.00%) 704.59
unreal 99 ( 0.00%) 40932 ( 0.00%) 413.45
quake 112 ( 0.00%) 17076 ( 0.00%) 152.46
other 3636264 ( 13.22%) 2278839033 ( 10.37%) 626.70
icmp 1455778 ( 5.29%) 154545255 ( 0.70%) 106.16
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 5977 ( 0.02%) 1572118 ( 0.01%) 263.03
ip6 1285959 ( 4.68%) 950350424 ( 4.32%) 739.02
pim 177 ( 0.00%) 10620 ( 0.00%) 60.00
other 14555 ( 0.05%) 2631156 ( 0.01%) 180.77
frag 730 ( 0.00%) 673791 ( 0.00%) 923.00
ip6 491464 ( 1.79%) 398824720 ( 1.81%) 811.50
tcp6 397913 ( 1.45%) 363698243 ( 1.65%) 914.01
http(s) 32340 ( 0.12%) 34238973 ( 0.16%) 1058.72
http(c) 31825 ( 0.12%) 2752068 ( 0.01%) 86.48
smtp 10 ( 0.00%) 1397 ( 0.00%) 139.70
dns 272 ( 0.00%) 55034 ( 0.00%) 202.33
bgp 88 ( 0.00%) 17464 ( 0.00%) 198.45
other 333378 ( 1.21%) 326633307 ( 1.49%) 979.77
udp6 61529 ( 0.22%) 26924054 ( 0.12%) 437.58
dns 40518 ( 0.15%) 9027441 ( 0.04%) 222.80
everque 1 ( 0.00%) 99 ( 0.00%) 99.00
unreal 1 ( 0.00%) 109 ( 0.00%) 109.00
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 21008 ( 0.08%) 17896301 ( 0.08%) 851.88
icmp6 25301 ( 0.09%) 3497188 ( 0.02%) 138.22
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6608 ( 0.02%) 4689811 ( 0.02%) 709.72
tcpdump file: 201204291400.dump.gz (624.51 MB)