Traffic Trace Info
DumpFile: 201203310245.dump
FileSize: 1603.52MB
Id: 201203310245
StartTime: Sat Mar 31 02:45:00 2012
EndTime: Sat Mar 31 03:00:00 2012
TotalTime: 900.13 seconds
TotalCapSize: 1260.48MB CapLen: 96 bytes
# of packets: 22480632 (16974.01MB)
AvgRate: 158.15Mbps stddev:24.88M
IP flow (unique src/dst pair) Information
# of flows: 1858563 (avg. 12.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 3.3% 2.9% 2.8% 2.4% 2.1% 1.9% 1.5% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 1427010
Top 10 bandwidth usage (bytes/total in %):
23.1% 7.7% 7.6% 6.5% 5.4% 4.9% 4.7% 4.6% 4.0% 4.0%
# of IPv6 addresses: 5985
Top 10 bandwidth usage (bytes/total in %):
31.0% 26.8% 26.7% 21.5% 13.2% 5.6% 4.6% 4.1% 4.0% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310245.pktlen.png)
detailed numbers
[ 32- 63]: 4862097
[ 64- 127]: 4329052
[ 128- 255]: 991238
[ 256- 511]: 492530
[ 512- 1023]: 613929
[ 1024- 2047]: 11191786
Protocol Breakdown
![[protocol breakdown chart]](201203310245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22480632 (100.00%) 17798539978 (100.00%) 791.73
ip 22319732 ( 99.28%) 17723503849 ( 99.58%) 794.07
tcp 16042866 ( 71.36%) 14742549089 ( 82.83%) 918.95
http(s) 7677112 ( 34.15%) 10355592548 ( 58.18%) 1348.89
http(c) 3347245 ( 14.89%) 397241023 ( 2.23%) 118.68
squid 56483 ( 0.25%) 35699711 ( 0.20%) 632.04
smtp 32021 ( 0.14%) 4576425 ( 0.03%) 142.92
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 21054 ( 0.09%) 11557118 ( 0.06%) 548.93
pop3 1370 ( 0.01%) 316304 ( 0.00%) 230.88
imap 1202 ( 0.01%) 167502 ( 0.00%) 139.35
telnet 2814 ( 0.01%) 197838 ( 0.00%) 70.30
ssh 26074 ( 0.12%) 8400452 ( 0.05%) 322.18
dns 2368 ( 0.01%) 275924 ( 0.00%) 116.52
bgp 672 ( 0.00%) 155286 ( 0.00%) 231.08
napster 34 ( 0.00%) 2200 ( 0.00%) 64.71
realaud 3 ( 0.00%) 186 ( 0.00%) 62.00
rtsp 4 ( 0.00%) 240 ( 0.00%) 60.00
icecast 2236 ( 0.01%) 651005 ( 0.00%) 291.15
hotline 4 ( 0.00%) 240 ( 0.00%) 60.00
other 4872169 ( 21.67%) 3927715027 ( 22.07%) 806.15
udp 3076334 ( 13.68%) 1347038532 ( 7.57%) 437.87
dns 255355 ( 1.14%) 53830660 ( 0.30%) 210.81
realaud 13 ( 0.00%) 1548 ( 0.00%) 119.08
halflif 58 ( 0.00%) 7904 ( 0.00%) 136.28
starcra 32 ( 0.00%) 3188 ( 0.00%) 99.62
everque 255 ( 0.00%) 69276 ( 0.00%) 271.67
unreal 41 ( 0.00%) 5442 ( 0.00%) 132.73
quake 9 ( 0.00%) 1260 ( 0.00%) 140.00
cuseeme 2 ( 0.00%) 194 ( 0.00%) 97.00
other 2799711 ( 12.45%) 1291667210 ( 7.26%) 461.36
icmp 1662912 ( 7.40%) 173022895 ( 0.97%) 104.05
ipip 183 ( 0.00%) 19050 ( 0.00%) 104.10
ipsec 2135 ( 0.01%) 740698 ( 0.00%) 346.93
ip6 1518500 ( 6.75%) 1457665616 ( 8.19%) 959.94
pim 250 ( 0.00%) 15000 ( 0.00%) 60.00
other 16552 ( 0.07%) 2452969 ( 0.01%) 148.20
frag 54946 ( 0.24%) 41650910 ( 0.23%) 758.03
ip6 160900 ( 0.72%) 75036129 ( 0.42%) 466.35
tcp6 88854 ( 0.40%) 58856501 ( 0.33%) 662.40
http(s) 8209 ( 0.04%) 11048053 ( 0.06%) 1345.85
http(c) 30535 ( 0.14%) 2615570 ( 0.01%) 85.66
smtp 98 ( 0.00%) 65661 ( 0.00%) 670.01
dns 100 ( 0.00%) 22126 ( 0.00%) 221.26
bgp 96 ( 0.00%) 19631 ( 0.00%) 204.49
other 49816 ( 0.22%) 45085460 ( 0.25%) 905.04
udp6 44230 ( 0.20%) 11751264 ( 0.07%) 265.69
dns 38224 ( 0.17%) 9388485 ( 0.05%) 245.62
halflif 1 ( 0.00%) 95 ( 0.00%) 95.00
other 6005 ( 0.03%) 2362684 ( 0.01%) 393.45
icmp6 26316 ( 0.12%) 3369684 ( 0.02%) 128.05
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1386 ( 0.01%) 1043188 ( 0.01%) 752.66
tcpdump file: 201203310245.dump.gz (507.04 MB)