Traffic Trace Info
DumpFile: 201203310215.dump
FileSize: 1951.22MB
Id: 201203310215
StartTime: Sat Mar 31 02:15:01 2012
EndTime: Sat Mar 31 02:30:00 2012
TotalTime: 899.40 seconds
TotalCapSize: 1536.19MB CapLen: 96 bytes
# of packets: 27198741 (21056.11MB)
AvgRate: 196.42Mbps stddev:41.61M
IP flow (unique src/dst pair) Information
# of flows: 1898103 (avg. 14.33 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 3.4% 2.5% 2.2% 1.7% 1.5% 1.5% 1.4% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 1442820
Top 10 bandwidth usage (bytes/total in %):
18.1% 15.1% 14.3% 6.1% 6.0% 4.6% 4.5% 4.2% 3.5% 3.2%
# of IPv6 addresses: 5897
Top 10 bandwidth usage (bytes/total in %):
84.0% 84.0% 4.1% 3.6% 3.6% 1.8% 1.7% 1.4% 1.3% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310215.pktlen.png)
detailed numbers
[ 32- 63]: 5181428
[ 64- 127]: 5956705
[ 128- 255]: 1073220
[ 256- 511]: 491492
[ 512- 1023]: 585714
[ 1024- 2047]: 13910182
Protocol Breakdown
![[protocol breakdown chart]](201203310215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27198741 (100.00%) 22078930425 (100.00%) 811.76
ip 26792471 ( 98.51%) 21619606978 ( 97.92%) 806.93
tcp 20918416 ( 76.91%) 19489860610 ( 88.27%) 931.71
http(s) 8891773 ( 32.69%) 12347701974 ( 55.93%) 1388.67
http(c) 3675073 ( 13.51%) 386440597 ( 1.75%) 105.15
squid 72442 ( 0.27%) 55396679 ( 0.25%) 764.70
smtp 32365 ( 0.12%) 5502112 ( 0.02%) 170.00
ftp 22874 ( 0.08%) 12309999 ( 0.06%) 538.17
pop3 1456 ( 0.01%) 336818 ( 0.00%) 231.33
imap 4470 ( 0.02%) 2807961 ( 0.01%) 628.18
telnet 4386 ( 0.02%) 314617 ( 0.00%) 71.73
ssh 117777 ( 0.43%) 23992396 ( 0.11%) 203.71
dns 2657 ( 0.01%) 320183 ( 0.00%) 120.51
bgp 627 ( 0.00%) 107673 ( 0.00%) 171.73
napster 17 ( 0.00%) 1160 ( 0.00%) 68.24
realaud 7 ( 0.00%) 834 ( 0.00%) 119.14
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 1049 ( 0.00%) 111181 ( 0.00%) 105.99
hotline 16 ( 0.00%) 1785 ( 0.00%) 111.56
other 8091422 ( 29.75%) 6654514341 ( 30.14%) 822.42
udp 2885076 ( 10.61%) 998564307 ( 4.52%) 346.11
dns 280953 ( 1.03%) 57065804 ( 0.26%) 203.12
realaud 18 ( 0.00%) 3040 ( 0.00%) 168.89
halflif 32 ( 0.00%) 4033 ( 0.00%) 126.03
starcra 18 ( 0.00%) 2079 ( 0.00%) 115.50
everque 238 ( 0.00%) 60716 ( 0.00%) 255.11
unreal 44 ( 0.00%) 5602 ( 0.00%) 127.32
quake 30 ( 0.00%) 2621 ( 0.00%) 87.37
cuseeme 3 ( 0.00%) 531 ( 0.00%) 177.00
other 2561110 ( 9.42%) 932469886 ( 4.22%) 364.09
icmp 1727627 ( 6.35%) 180899516 ( 0.82%) 104.71
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 1921 ( 0.01%) 692182 ( 0.00%) 360.32
ip6 1235098 ( 4.54%) 938397436 ( 4.25%) 759.78
pim 252 ( 0.00%) 15120 ( 0.00%) 60.00
other 23897 ( 0.09%) 11158647 ( 0.05%) 466.95
frag 43649 ( 0.16%) 9955937 ( 0.05%) 228.09
ip6 406270 ( 1.49%) 459323447 ( 2.08%) 1130.59
tcp6 317462 ( 1.17%) 433554809 ( 1.96%) 1365.69
http(s) 2856 ( 0.01%) 2739699 ( 0.01%) 959.28
http(c) 13719 ( 0.05%) 1185233 ( 0.01%) 86.39
smtp 133 ( 0.00%) 84477 ( 0.00%) 635.17
dns 150 ( 0.00%) 25750 ( 0.00%) 171.67
bgp 92 ( 0.00%) 14836 ( 0.00%) 161.26
other 300512 ( 1.10%) 429504814 ( 1.95%) 1429.24
udp6 46755 ( 0.17%) 13057003 ( 0.06%) 279.26
dns 38545 ( 0.14%) 8785127 ( 0.04%) 227.92
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 4 ( 0.00%) 368 ( 0.00%) 92.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 8204 ( 0.03%) 4271296 ( 0.02%) 520.64
icmp6 29491 ( 0.11%) 3854596 ( 0.02%) 130.70
ip6 86 ( 0.00%) 11698 ( 0.00%) 136.02
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12446 ( 0.05%) 8841261 ( 0.04%) 710.37
tcpdump file: 201203310215.dump.gz (614.40 MB)