Traffic Trace Info
DumpFile: 201203310230.dump
FileSize: 1736.73MB
Id: 201203310230
StartTime: Sat Mar 31 02:30:00 2012
EndTime: Sat Mar 31 02:45:00 2012
TotalTime: 900.14 seconds
TotalCapSize: 1366.88MB CapLen: 96 bytes
# of packets: 24237620 (19440.01MB)
AvgRate: 181.21Mbps stddev:37.91M
IP flow (unique src/dst pair) Information
# of flows: 1958457 (avg. 12.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.0% 2.4% 2.3% 2.1% 2.0% 1.8% 1.7% 1.5% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 1452445
Top 10 bandwidth usage (bytes/total in %):
25.8% 15.2% 6.1% 4.7% 4.0% 3.9% 3.6% 3.6% 3.3% 3.0%
# of IPv6 addresses: 6017
Top 10 bandwidth usage (bytes/total in %):
53.7% 53.5% 10.5% 7.5% 7.0% 7.0% 5.9% 5.3% 4.3% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310230.pktlen.png)
detailed numbers
[ 32- 63]: 4648149
[ 64- 127]: 4561668
[ 128- 255]: 988537
[ 256- 511]: 490768
[ 512- 1023]: 755567
[ 1024- 2047]: 12792931
Protocol Breakdown
![[protocol breakdown chart]](201203310230.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24237620 (100.00%) 20384330870 (100.00%) 841.02
ip 24002948 ( 99.03%) 20210704499 ( 99.15%) 842.01
tcp 18354295 ( 75.73%) 18041736683 ( 88.51%) 982.97
http(s) 10061559 ( 41.51%) 13855340945 ( 67.97%) 1377.06
http(c) 3413477 ( 14.08%) 378253931 ( 1.86%) 110.81
squid 56832 ( 0.23%) 40661062 ( 0.20%) 715.46
smtp 35525 ( 0.15%) 6317939 ( 0.03%) 177.84
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 23876 ( 0.10%) 13560911 ( 0.07%) 567.97
pop3 1404 ( 0.01%) 321433 ( 0.00%) 228.94
imap 1198 ( 0.00%) 117333 ( 0.00%) 97.94
telnet 11863 ( 0.05%) 867235 ( 0.00%) 73.10
ssh 24680 ( 0.10%) 9064515 ( 0.04%) 367.28
dns 2386 ( 0.01%) 279346 ( 0.00%) 117.08
bgp 660 ( 0.00%) 121895 ( 0.00%) 184.69
napster 60 ( 0.00%) 4494 ( 0.00%) 74.90
realaud 13 ( 0.00%) 1595 ( 0.00%) 122.69
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 1307 ( 0.01%) 952170 ( 0.00%) 728.52
hotline 8 ( 0.00%) 500 ( 0.00%) 62.50
other 4719443 ( 19.47%) 3735871139 ( 18.33%) 791.59
udp 2717551 ( 11.21%) 977521279 ( 4.80%) 359.71
dns 279654 ( 1.15%) 57659787 ( 0.28%) 206.18
realaud 6 ( 0.00%) 933 ( 0.00%) 155.50
halflif 41 ( 0.00%) 5000 ( 0.00%) 121.95
starcra 25 ( 0.00%) 4119 ( 0.00%) 164.76
everque 260 ( 0.00%) 53785 ( 0.00%) 206.87
unreal 23 ( 0.00%) 2264 ( 0.00%) 98.43
quake 7 ( 0.00%) 901 ( 0.00%) 128.71
cuseeme 2 ( 0.00%) 165 ( 0.00%) 82.50
other 2418679 ( 9.98%) 917788065 ( 4.50%) 379.46
icmp 1697614 ( 7.00%) 177013350 ( 0.87%) 104.27
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9633 ( 0.04%) 4028310 ( 0.02%) 418.18
ip6 1204114 ( 4.97%) 1006968468 ( 4.94%) 836.27
pim 308 ( 0.00%) 18480 ( 0.00%) 60.00
other 19248 ( 0.08%) 3398659 ( 0.02%) 176.57
frag 19642 ( 0.08%) 2820544 ( 0.01%) 143.60
ip6 234672 ( 0.97%) 173626371 ( 0.85%) 739.87
tcp6 161217 ( 0.67%) 156378402 ( 0.77%) 969.99
http(s) 84265 ( 0.35%) 122692801 ( 0.60%) 1456.04
http(c) 29748 ( 0.12%) 2638316 ( 0.01%) 88.69
smtp 198 ( 0.00%) 134122 ( 0.00%) 677.38
ftp 23 ( 0.00%) 1819 ( 0.00%) 79.09
dns 194 ( 0.00%) 51968 ( 0.00%) 267.88
bgp 90 ( 0.00%) 15998 ( 0.00%) 177.76
other 46699 ( 0.19%) 30843378 ( 0.15%) 660.47
udp6 46846 ( 0.19%) 13578745 ( 0.07%) 289.86
dns 38966 ( 0.16%) 9365483 ( 0.05%) 240.35
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
starcra 2 ( 0.00%) 205 ( 0.00%) 102.50
everque 10 ( 0.00%) 920 ( 0.00%) 92.00
unreal 1 ( 0.00%) 117 ( 0.00%) 117.00
quake 1 ( 0.00%) 112 ( 0.00%) 112.00
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 7864 ( 0.03%) 4211694 ( 0.02%) 535.57
icmp6 26234 ( 0.11%) 3403364 ( 0.02%) 129.73
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 263 ( 0.00%) 250604 ( 0.00%) 952.87
tcpdump file: 201203310230.dump.gz (551.55 MB)