Traffic Trace Info
DumpFile: 201204301400.dump
FileSize: 2252.19MB
Id: 201204301400
StartTime: Mon Apr 30 14:00:01 2012
EndTime: Mon Apr 30 14:15:01 2012
TotalTime: 900.03 seconds
TotalCapSize: 1777.59MB CapLen: 96 bytes
# of packets: 31103470 (21107.93MB)
AvgRate: 196.73Mbps stddev:43.93M
IP flow (unique src/dst pair) Information
# of flows: 1978350 (avg. 15.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 3.8% 2.6% 2.1% 1.9% 1.8% 1.4% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1452928
Top 10 bandwidth usage (bytes/total in %):
17.5% 15.7% 6.0% 5.7% 5.0% 4.1% 3.8% 3.4% 3.1% 2.7%
# of IPv6 addresses: 5841
Top 10 bandwidth usage (bytes/total in %):
43.1% 40.2% 29.2% 26.4% 9.6% 4.6% 2.4% 2.4% 2.1% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204301400.pktlen.png)
detailed numbers
[ 32- 63]: 6505003
[ 64- 127]: 8406458
[ 128- 255]: 1142531
[ 256- 511]: 660191
[ 512- 1023]: 756755
[ 1024- 2047]: 13632532
Protocol Breakdown
![[protocol breakdown chart]](201204301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31103470 (100.00%) 22133265978 (100.00%) 711.60
ip 30658037 ( 98.57%) 21925866894 ( 99.06%) 715.18
tcp 23327560 ( 75.00%) 18549197050 ( 83.81%) 795.16
http(s) 11050694 ( 35.53%) 15157305058 ( 68.48%) 1371.62
http(c) 7665146 ( 24.64%) 1271985522 ( 5.75%) 165.94
squid 89898 ( 0.29%) 53130806 ( 0.24%) 591.01
smtp 50105 ( 0.16%) 7628134 ( 0.03%) 152.24
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 6779 ( 0.02%) 1420796 ( 0.01%) 209.59
pop3 2736 ( 0.01%) 551852 ( 0.00%) 201.70
imap 9256 ( 0.03%) 8686197 ( 0.04%) 938.44
telnet 160633 ( 0.52%) 11866210 ( 0.05%) 73.87
ssh 197943 ( 0.64%) 14818017 ( 0.07%) 74.86
dns 3024 ( 0.01%) 1977165 ( 0.01%) 653.82
bgp 593 ( 0.00%) 91907 ( 0.00%) 154.99
napster 148 ( 0.00%) 12044 ( 0.00%) 81.38
realaud 52 ( 0.00%) 5011 ( 0.00%) 96.37
icecast 440 ( 0.00%) 79804 ( 0.00%) 181.37
hotline 112 ( 0.00%) 8285 ( 0.00%) 73.97
other 4089979 ( 13.15%) 2019628894 ( 9.12%) 493.80
udp 3794587 ( 12.20%) 1920448841 ( 8.68%) 506.10
dns 438091 ( 1.41%) 104720759 ( 0.47%) 239.04
realaud 5 ( 0.00%) 398 ( 0.00%) 79.60
halflif 44 ( 0.00%) 31813 ( 0.00%) 723.02
starcra 26 ( 0.00%) 3813 ( 0.00%) 146.65
everque 1044 ( 0.00%) 727233 ( 0.00%) 696.58
unreal 2 ( 0.00%) 163 ( 0.00%) 81.50
quake 90 ( 0.00%) 12957 ( 0.00%) 143.97
cuseeme 2 ( 0.00%) 487 ( 0.00%) 243.50
other 3293691 ( 10.59%) 1811153221 ( 8.18%) 549.89
icmp 1429887 ( 4.60%) 138501602 ( 0.63%) 96.86
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 7040 ( 0.02%) 1998208 ( 0.01%) 283.84
ip6 2084418 ( 6.70%) 1313459141 ( 5.93%) 630.13
pim 146 ( 0.00%) 8760 ( 0.00%) 60.00
other 14215 ( 0.05%) 2234132 ( 0.01%) 157.17
frag 131202 ( 0.42%) 99981333 ( 0.45%) 762.04
ip6 445433 ( 1.43%) 207399084 ( 0.94%) 465.61
tcp6 311444 ( 1.00%) 130773876 ( 0.59%) 419.90
http(s) 122265 ( 0.39%) 103331001 ( 0.47%) 845.14
http(c) 109172 ( 0.35%) 9863630 ( 0.04%) 90.35
smtp 25 ( 0.00%) 11024 ( 0.00%) 440.96
dns 222 ( 0.00%) 44966 ( 0.00%) 202.55
bgp 90 ( 0.00%) 19023 ( 0.00%) 211.37
other 79670 ( 0.26%) 17504232 ( 0.08%) 219.71
udp6 109691 ( 0.35%) 72955150 ( 0.33%) 665.10
dns 55223 ( 0.18%) 12509449 ( 0.06%) 226.53
realaud 2 ( 0.00%) 207 ( 0.00%) 103.50
halflif 3 ( 0.00%) 314 ( 0.00%) 104.67
everque 2 ( 0.00%) 224 ( 0.00%) 112.00
unreal 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 2 ( 0.00%) 201 ( 0.00%) 100.50
other 54458 ( 0.18%) 60444648 ( 0.27%) 1109.93
icmp6 23866 ( 0.08%) 3359251 ( 0.02%) 140.75
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 318 ( 0.00%) 295315 ( 0.00%) 928.66
tcpdump file: 201204301400.dump.gz (714.07 MB)