Traffic Trace Info
DumpFile: 201203310045.dump
FileSize: 2185.50MB
Id: 201203310045
StartTime: Sat Mar 31 00:45:00 2012
EndTime: Sat Mar 31 01:00:01 2012
TotalTime: 900.57 seconds
TotalCapSize: 1724.65MB CapLen: 96 bytes
# of packets: 30201804 (22578.99MB)
AvgRate: 210.30Mbps stddev:35.45M
IP flow (unique src/dst pair) Information
# of flows: 1803096 (avg. 16.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 6.1% 4.6% 2.6% 1.8% 1.6% 1.6% 1.3% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 1414163
Top 10 bandwidth usage (bytes/total in %):
22.1% 13.1% 11.6% 7.0% 6.3% 5.1% 4.7% 4.7% 4.5% 2.9%
# of IPv6 addresses: 6087
Top 10 bandwidth usage (bytes/total in %):
51.9% 51.9% 12.9% 12.8% 8.6% 4.8% 4.4% 4.2% 3.7% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310045.pktlen.png)
detailed numbers
[ 32- 63]: 5190230
[ 64- 127]: 7851411
[ 128- 255]: 1158355
[ 256- 511]: 523841
[ 512- 1023]: 622587
[ 1024- 2047]: 14855380
Protocol Breakdown
![[protocol breakdown chart]](201203310045.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30201804 (100.00%) 23675782508 (100.00%) 783.92
ip 29992765 ( 99.31%) 23516045938 ( 99.33%) 784.06
tcp 22764447 ( 75.37%) 20517560484 ( 86.66%) 901.30
http(s) 10089772 ( 33.41%) 13931193034 ( 58.84%) 1380.72
http(c) 5059917 ( 16.75%) 512110574 ( 2.16%) 101.21
squid 83072 ( 0.28%) 63243946 ( 0.27%) 761.31
smtp 51488 ( 0.17%) 11311536 ( 0.05%) 219.69
nntp 24 ( 0.00%) 1496 ( 0.00%) 62.33
ftp 33719 ( 0.11%) 23765603 ( 0.10%) 704.81
pop3 1376 ( 0.00%) 313747 ( 0.00%) 228.01
imap 6490 ( 0.02%) 3240742 ( 0.01%) 499.34
telnet 2389 ( 0.01%) 175534 ( 0.00%) 73.48
ssh 167344 ( 0.55%) 56473951 ( 0.24%) 337.47
dns 2558 ( 0.01%) 300784 ( 0.00%) 117.59
bgp 628 ( 0.00%) 106885 ( 0.00%) 170.20
napster 58 ( 0.00%) 5329 ( 0.00%) 91.88
realaud 20 ( 0.00%) 3535 ( 0.00%) 176.75
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 473 ( 0.00%) 71833 ( 0.00%) 151.87
hotline 22 ( 0.00%) 1915 ( 0.00%) 87.05
other 7265089 ( 24.06%) 5915239560 ( 24.98%) 814.20
udp 3545073 ( 11.74%) 1585241177 ( 6.70%) 447.17
dns 280737 ( 0.93%) 58866289 ( 0.25%) 209.68
realaud 13 ( 0.00%) 1854 ( 0.00%) 142.62
halflif 29 ( 0.00%) 3777 ( 0.00%) 130.24
starcra 22 ( 0.00%) 2866 ( 0.00%) 130.27
everque 217 ( 0.00%) 48841 ( 0.00%) 225.07
unreal 12 ( 0.00%) 1592 ( 0.00%) 132.67
quake 42 ( 0.00%) 11970 ( 0.00%) 285.00
cuseeme 8 ( 0.00%) 855 ( 0.00%) 106.88
other 3261421 ( 10.80%) 1526099014 ( 6.45%) 467.92
icmp 1709771 ( 5.66%) 183625017 ( 0.78%) 107.40
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2137 ( 0.01%) 723382 ( 0.00%) 338.50
ip6 1950909 ( 6.46%) 1225958416 ( 5.18%) 628.40
pim 298 ( 0.00%) 17880 ( 0.00%) 60.00
other 19945 ( 0.07%) 2900312 ( 0.01%) 145.42
frag 8331 ( 0.03%) 6345569 ( 0.03%) 761.68
ip6 209039 ( 0.69%) 159736570 ( 0.67%) 764.15
tcp6 123889 ( 0.41%) 140155649 ( 0.59%) 1131.30
http(s) 27934 ( 0.09%) 38058812 ( 0.16%) 1362.45
http(c) 13713 ( 0.05%) 1231634 ( 0.01%) 89.82
smtp 1177 ( 0.00%) 1614182 ( 0.01%) 1371.44
ftp 21 ( 0.00%) 2636 ( 0.00%) 125.52
dns 165 ( 0.00%) 26222 ( 0.00%) 158.92
bgp 89 ( 0.00%) 16145 ( 0.00%) 181.40
other 80790 ( 0.27%) 99206018 ( 0.42%) 1227.95
udp6 59161 ( 0.20%) 15704196 ( 0.07%) 265.45
dns 43810 ( 0.15%) 9803608 ( 0.04%) 223.78
halflif 1 ( 0.00%) 112 ( 0.00%) 112.00
quake 2 ( 0.00%) 211 ( 0.00%) 105.50
other 15348 ( 0.05%) 5900265 ( 0.02%) 384.43
icmp6 25391 ( 0.08%) 3428877 ( 0.01%) 135.04
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 483 ( 0.00%) 432220 ( 0.00%) 894.87
tcpdump file: 201203310045.dump.gz (686.10 MB)