Traffic Trace Info
DumpFile: 201203310300.dump
FileSize: 1933.64MB
Id: 201203310300
StartTime: Sat Mar 31 03:00:00 2012
EndTime: Sat Mar 31 03:15:00 2012
TotalTime: 900.28 seconds
TotalCapSize: 1513.28MB CapLen: 96 bytes
# of packets: 27548568 (16854.93MB)
AvgRate: 171.31Mbps stddev:31.74M
IP flow (unique src/dst pair) Information
# of flows: 1692343 (avg. 16.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 3.5% 3.3% 2.6% 2.4% 2.4% 1.9% 1.7% 1.5% 1.3%
IP address Information
# of IPv4 addresses: 1330968
Top 10 bandwidth usage (bytes/total in %):
14.2% 12.8% 12.7% 7.4% 6.3% 5.2% 4.7% 4.6% 3.6% 3.5%
# of IPv6 addresses: 5805
Top 10 bandwidth usage (bytes/total in %):
31.5% 29.8% 20.3% 16.4% 13.7% 5.3% 5.0% 3.9% 3.6% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310300.pktlen.png)
detailed numbers
[ 32- 63]: 10014110
[ 64- 127]: 4479868
[ 128- 255]: 928288
[ 256- 511]: 563849
[ 512- 1023]: 680691
[ 1024- 2047]: 10881762
Protocol Breakdown
![[protocol breakdown chart]](201203310300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27548568 (100.00%) 17673672223 (100.00%) 641.55
ip 27412650 ( 99.51%) 17609340739 ( 99.64%) 642.38
tcp 21528848 ( 78.15%) 15035109518 ( 85.07%) 698.37
http(s) 6681574 ( 24.25%) 9240021945 ( 52.28%) 1382.91
http(c) 3870303 ( 14.05%) 628189665 ( 3.55%) 162.31
squid 48845 ( 0.18%) 33163830 ( 0.19%) 678.96
smtp 35928 ( 0.13%) 9865305 ( 0.06%) 274.59
ftp 17979 ( 0.07%) 9047567 ( 0.05%) 503.23
pop3 1212 ( 0.00%) 259104 ( 0.00%) 213.78
imap 6758 ( 0.02%) 5129828 ( 0.03%) 759.07
telnet 4709 ( 0.02%) 309696 ( 0.00%) 65.77
ssh 111256 ( 0.40%) 20444345 ( 0.12%) 183.76
dns 3740 ( 0.01%) 1424321 ( 0.01%) 380.83
bgp 560 ( 0.00%) 91575 ( 0.00%) 163.53
napster 208 ( 0.00%) 14010 ( 0.00%) 67.36
realaud 106 ( 0.00%) 8540 ( 0.00%) 80.57
icecast 15053 ( 0.05%) 10531218 ( 0.06%) 699.61
hotline 84 ( 0.00%) 5044 ( 0.00%) 60.05
other 10730532 ( 38.95%) 5076603465 ( 28.72%) 473.10
udp 2730822 ( 9.91%) 1059347112 ( 5.99%) 387.92
dns 278915 ( 1.01%) 56512454 ( 0.32%) 202.62
realaud 14 ( 0.00%) 2344 ( 0.00%) 167.43
halflif 96 ( 0.00%) 15014 ( 0.00%) 156.40
starcra 42 ( 0.00%) 5714 ( 0.00%) 136.05
everque 642 ( 0.00%) 240257 ( 0.00%) 374.23
unreal 40 ( 0.00%) 5830 ( 0.00%) 145.75
quake 4 ( 0.00%) 562 ( 0.00%) 140.50
cuseeme 3 ( 0.00%) 560 ( 0.00%) 186.67
other 2433345 ( 8.83%) 1001396135 ( 5.67%) 411.53
icmp 1668295 ( 6.06%) 170753547 ( 0.97%) 102.35
ipip 168 ( 0.00%) 17496 ( 0.00%) 104.14
ipsec 1929 ( 0.01%) 647958 ( 0.00%) 335.90
ip6 1462834 ( 5.31%) 1338519405 ( 7.57%) 915.02
pim 290 ( 0.00%) 17400 ( 0.00%) 60.00
other 19464 ( 0.07%) 4928303 ( 0.03%) 253.20
frag 38133 ( 0.14%) 28959802 ( 0.16%) 759.44
ip6 135918 ( 0.49%) 64331484 ( 0.36%) 473.31
tcp6 66524 ( 0.24%) 47038555 ( 0.27%) 707.09
http(s) 9427 ( 0.03%) 10452761 ( 0.06%) 1108.81
http(c) 12236 ( 0.04%) 1065459 ( 0.01%) 87.08
smtp 84 ( 0.00%) 35631 ( 0.00%) 424.18
ftp 7161 ( 0.03%) 754889 ( 0.00%) 105.42
dns 171 ( 0.00%) 37414 ( 0.00%) 218.80
bgp 78 ( 0.00%) 12713 ( 0.00%) 162.99
other 37367 ( 0.14%) 34679688 ( 0.20%) 928.08
udp6 44315 ( 0.16%) 13385265 ( 0.08%) 302.05
dns 36424 ( 0.13%) 8954632 ( 0.05%) 245.84
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 1 ( 0.00%) 102 ( 0.00%) 102.00
other 7889 ( 0.03%) 4430424 ( 0.03%) 561.60
icmp6 23869 ( 0.09%) 3005146 ( 0.02%) 125.90
ip6 74 ( 0.00%) 10032 ( 0.00%) 135.57
pim6 28 ( 0.00%) 3808 ( 0.00%) 136.00
other6 1108 ( 0.00%) 888678 ( 0.01%) 802.06
tcpdump file: 201203310300.dump.gz (610.09 MB)