Traffic Trace Info
DumpFile: 201203310145.dump
FileSize: 1877.08MB
Id: 201203310145
StartTime: Sat Mar 31 01:45:00 2012
EndTime: Sat Mar 31 02:00:00 2012
TotalTime: 900.38 seconds
TotalCapSize: 1476.83MB CapLen: 96 bytes
# of packets: 26230060 (19309.91MB)
AvgRate: 179.86Mbps stddev:27.74M
IP flow (unique src/dst pair) Information
# of flows: 1905671 (avg. 13.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.1% 6.0% 4.7% 4.0% 3.0% 1.8% 1.5% 1.4% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 1472486
Top 10 bandwidth usage (bytes/total in %):
20.3% 18.2% 8.3% 7.8% 6.0% 5.4% 4.9% 4.1% 4.1% 3.7%
# of IPv6 addresses: 6344
Top 10 bandwidth usage (bytes/total in %):
37.3% 37.2% 12.3% 10.0% 10.0% 8.2% 5.8% 5.6% 4.1% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310145.pktlen.png)
detailed numbers
[ 32- 63]: 5375037
[ 64- 127]: 6071214
[ 128- 255]: 1045549
[ 256- 511]: 490613
[ 512- 1023]: 621152
[ 1024- 2047]: 12626495
Protocol Breakdown
![[protocol breakdown chart]](201203310145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26230060 (100.00%) 20247913381 (100.00%) 771.94
ip 26086454 ( 99.45%) 20176636338 ( 99.65%) 773.45
tcp 19907171 ( 75.89%) 17945072232 ( 88.63%) 901.44
http(s) 8838209 ( 33.69%) 11970802091 ( 59.12%) 1354.44
http(c) 3546165 ( 13.52%) 390333310 ( 1.93%) 110.07
squid 71246 ( 0.27%) 52463898 ( 0.26%) 736.38
smtp 35935 ( 0.14%) 9001976 ( 0.04%) 250.51
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 10885 ( 0.04%) 1131664 ( 0.01%) 103.97
pop3 1463 ( 0.01%) 321037 ( 0.00%) 219.44
imap 2706 ( 0.01%) 1265081 ( 0.01%) 467.51
telnet 2520 ( 0.01%) 183337 ( 0.00%) 72.75
ssh 34422 ( 0.13%) 12617655 ( 0.06%) 366.56
dns 2385 ( 0.01%) 293044 ( 0.00%) 122.87
bgp 633 ( 0.00%) 109181 ( 0.00%) 172.48
napster 42 ( 0.00%) 6754 ( 0.00%) 160.81
realaud 35 ( 0.00%) 5598 ( 0.00%) 159.94
rtsp 5 ( 0.00%) 347 ( 0.00%) 69.40
icecast 856 ( 0.00%) 149071 ( 0.00%) 174.15
hotline 33 ( 0.00%) 2857 ( 0.00%) 86.58
other 7359622 ( 28.06%) 5506384777 ( 27.19%) 748.19
udp 3198959 ( 12.20%) 1278261249 ( 6.31%) 399.59
dns 264330 ( 1.01%) 56099979 ( 0.28%) 212.23
realaud 19 ( 0.00%) 2715 ( 0.00%) 142.89
halflif 87 ( 0.00%) 13439 ( 0.00%) 154.47
starcra 14 ( 0.00%) 2541 ( 0.00%) 181.50
everque 239 ( 0.00%) 51634 ( 0.00%) 216.04
unreal 39 ( 0.00%) 5495 ( 0.00%) 140.90
quake 7 ( 0.00%) 827 ( 0.00%) 118.14
cuseeme 7 ( 0.00%) 483 ( 0.00%) 69.00
other 2932883 ( 11.18%) 1221976376 ( 6.04%) 416.65
icmp 1694938 ( 6.46%) 176914886 ( 0.87%) 104.38
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1991 ( 0.01%) 651914 ( 0.00%) 327.43
ip6 1262917 ( 4.81%) 772787864 ( 3.82%) 611.91
pim 307 ( 0.00%) 18420 ( 0.00%) 60.00
other 19986 ( 0.08%) 2910503 ( 0.01%) 145.63
frag 3540 ( 0.01%) 2787094 ( 0.01%) 787.31
ip6 143606 ( 0.55%) 71277043 ( 0.35%) 496.34
tcp6 59273 ( 0.23%) 53886970 ( 0.27%) 909.13
http(s) 5739 ( 0.02%) 6610795 ( 0.03%) 1151.91
http(c) 11759 ( 0.04%) 1022263 ( 0.01%) 86.93
smtp 193 ( 0.00%) 84101 ( 0.00%) 435.76
dns 113 ( 0.00%) 16769 ( 0.00%) 148.40
bgp 91 ( 0.00%) 15310 ( 0.00%) 168.24
other 41378 ( 0.16%) 46137732 ( 0.23%) 1115.03
udp6 53337 ( 0.20%) 13062844 ( 0.06%) 244.91
dns 39000 ( 0.15%) 8912426 ( 0.04%) 228.52
starcra 1 ( 0.00%) 115 ( 0.00%) 115.00
everque 2 ( 0.00%) 221 ( 0.00%) 110.50
quake 2 ( 0.00%) 197 ( 0.00%) 98.50
other 14332 ( 0.05%) 4149885 ( 0.02%) 289.55
icmp6 30429 ( 0.12%) 3869973 ( 0.02%) 127.18
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 452 ( 0.00%) 441646 ( 0.00%) 977.09
tcpdump file: 201203310145.dump.gz (600.03 MB)