Traffic Trace Info
DumpFile: 201203310315.dump
FileSize: 1881.12MB
Id: 201203310315
StartTime: Sat Mar 31 03:15:00 2012
EndTime: Sat Mar 31 03:30:01 2012
TotalTime: 900.24 seconds
TotalCapSize: 1484.62MB CapLen: 96 bytes
# of packets: 25984225 (19750.27MB)
AvgRate: 184.02Mbps stddev:42.17M
IP flow (unique src/dst pair) Information
# of flows: 1995457 (avg. 13.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 2.6% 2.6% 2.6% 2.6% 2.5% 2.1% 2.0% 1.8% 1.6%
IP address Information
# of IPv4 addresses: 1497911
Top 10 bandwidth usage (bytes/total in %):
21.5% 9.5% 7.1% 6.4% 6.0% 5.6% 4.8% 4.5% 3.6% 3.5%
# of IPv6 addresses: 5849
Top 10 bandwidth usage (bytes/total in %):
88.7% 88.5% 6.3% 6.3% 1.9% 1.7% 0.8% 0.7% 0.7% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310315.pktlen.png)
detailed numbers
[ 32- 63]: 5233907
[ 64- 127]: 5443517
[ 128- 255]: 1098857
[ 256- 511]: 475811
[ 512- 1023]: 656989
[ 1024- 2047]: 13075144
Protocol Breakdown
![[protocol breakdown chart]](201203310315.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25984225 (100.00%) 20709663592 (100.00%) 797.01
ip 24952748 ( 96.03%) 19407540840 ( 93.71%) 777.77
tcp 18593352 ( 71.56%) 16524922079 ( 79.79%) 888.75
http(s) 7563455 ( 29.11%) 10418204492 ( 50.31%) 1377.44
http(c) 3114806 ( 11.99%) 302880110 ( 1.46%) 97.24
squid 92111 ( 0.35%) 68138417 ( 0.33%) 739.74
smtp 39674 ( 0.15%) 9845595 ( 0.05%) 248.16
nntp 13 ( 0.00%) 808 ( 0.00%) 62.15
ftp 7545 ( 0.03%) 691516 ( 0.00%) 91.65
pop3 1653 ( 0.01%) 309445 ( 0.00%) 187.20
imap 1600 ( 0.01%) 627404 ( 0.00%) 392.13
telnet 3840 ( 0.01%) 266437 ( 0.00%) 69.38
ssh 543440 ( 2.09%) 87279822 ( 0.42%) 160.61
dns 3583 ( 0.01%) 1305428 ( 0.01%) 364.34
bgp 622 ( 0.00%) 106947 ( 0.00%) 171.94
napster 26 ( 0.00%) 2682 ( 0.00%) 103.15
realaud 46 ( 0.00%) 3452 ( 0.00%) 75.04
icecast 11609 ( 0.04%) 6772975 ( 0.03%) 583.42
hotline 13 ( 0.00%) 812 ( 0.00%) 62.46
other 7209316 ( 27.74%) 5628485737 ( 27.18%) 780.72
udp 3085390 ( 11.87%) 1387351182 ( 6.70%) 449.65
dns 283881 ( 1.09%) 58055573 ( 0.28%) 204.51
realaud 24 ( 0.00%) 2424 ( 0.00%) 101.00
halflif 51 ( 0.00%) 7993 ( 0.00%) 156.73
starcra 45 ( 0.00%) 4179 ( 0.00%) 92.87
everque 1766 ( 0.01%) 1408776 ( 0.01%) 797.72
unreal 32 ( 0.00%) 4627 ( 0.00%) 144.59
quake 16 ( 0.00%) 1554 ( 0.00%) 97.12
cuseeme 26 ( 0.00%) 15797 ( 0.00%) 607.58
other 2752886 ( 10.59%) 1324849436 ( 6.40%) 481.26
icmp 1686520 ( 6.49%) 177778176 ( 0.86%) 105.41
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1902 ( 0.01%) 625812 ( 0.00%) 329.03
ip6 1551933 ( 5.97%) 1291408446 ( 6.24%) 832.13
pim 209 ( 0.00%) 12540 ( 0.00%) 60.00
other 33257 ( 0.13%) 25423335 ( 0.12%) 764.45
frag 118651 ( 0.46%) 90107223 ( 0.44%) 759.43
ip6 1031477 ( 3.97%) 1302122752 ( 6.29%) 1262.39
tcp6 957981 ( 3.69%) 1282776084 ( 6.19%) 1339.04
http(s) 7078 ( 0.03%) 8972159 ( 0.04%) 1267.61
http(c) 10078 ( 0.04%) 870470 ( 0.00%) 86.37
smtp 1307 ( 0.01%) 529750 ( 0.00%) 405.32
ftp 11005 ( 0.04%) 1092364 ( 0.01%) 99.26
ssh 39011 ( 0.15%) 8822820 ( 0.04%) 226.16
dns 70 ( 0.00%) 8411 ( 0.00%) 120.16
bgp 90 ( 0.00%) 15697 ( 0.00%) 174.41
other 889342 ( 3.42%) 1262464413 ( 6.10%) 1419.55
udp6 47599 ( 0.18%) 14892720 ( 0.07%) 312.88
dns 38378 ( 0.15%) 8967920 ( 0.04%) 233.67
halflif 2 ( 0.00%) 217 ( 0.00%) 108.50
starcra 1 ( 0.00%) 111 ( 0.00%) 111.00
unreal 1 ( 0.00%) 99 ( 0.00%) 99.00
quake 2 ( 0.00%) 224 ( 0.00%) 112.00
cuseeme 1 ( 0.00%) 95 ( 0.00%) 95.00
other 9214 ( 0.04%) 5924054 ( 0.03%) 642.94
icmp6 23943 ( 0.09%) 3018111 ( 0.01%) 126.05
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1841 ( 0.01%) 1420413 ( 0.01%) 771.54
tcpdump file: 201203310315.dump.gz (580.39 MB)