Traffic Trace Info
DumpFile: 201203310330.dump
FileSize: 1672.10MB
Id: 201203310330
StartTime: Sat Mar 31 03:30:01 2012
EndTime: Sat Mar 31 03:45:00 2012
TotalTime: 899.69 seconds
TotalCapSize: 1301.69MB CapLen: 96 bytes
# of packets: 24274788 (17712.50MB)
AvgRate: 165.05Mbps stddev:38.30M
IP flow (unique src/dst pair) Information
# of flows: 1930224 (avg. 12.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.1% 4.3% 4.2% 3.6% 2.8% 2.3% 1.9% 1.8% 1.7% 1.3%
IP address Information
# of IPv4 addresses: 1405749
Top 10 bandwidth usage (bytes/total in %):
12.3% 11.2% 8.7% 8.2% 7.7% 7.0% 6.8% 6.6% 5.4% 4.9%
# of IPv6 addresses: 5856
Top 10 bandwidth usage (bytes/total in %):
68.7% 64.2% 10.4% 7.4% 6.7% 6.7% 3.0% 2.9% 2.1% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310330.pktlen.png)
detailed numbers
[ 32- 63]: 5884846
[ 64- 127]: 4594206
[ 128- 255]: 1052911
[ 256- 511]: 449853
[ 512- 1023]: 558582
[ 1024- 2047]: 11734390
Protocol Breakdown
![[protocol breakdown chart]](201203310330.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24274788 (100.00%) 18572905100 (100.00%) 765.11
ip 23966952 ( 98.73%) 18381974359 ( 98.97%) 766.97
tcp 15329540 ( 63.15%) 13454714854 ( 72.44%) 877.70
http(s) 5572554 ( 22.96%) 7515075299 ( 40.46%) 1348.59
http(c) 2483974 ( 10.23%) 242075401 ( 1.30%) 97.45
squid 57951 ( 0.24%) 42902127 ( 0.23%) 740.32
smtp 29608 ( 0.12%) 4519908 ( 0.02%) 152.66
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 10779 ( 0.04%) 2464126 ( 0.01%) 228.60
pop3 1423 ( 0.01%) 308449 ( 0.00%) 216.76
imap 1491 ( 0.01%) 401142 ( 0.00%) 269.04
telnet 7288 ( 0.03%) 520982 ( 0.00%) 71.48
ssh 178490 ( 0.74%) 30878409 ( 0.17%) 173.00
dns 6236 ( 0.03%) 3778640 ( 0.02%) 605.94
bgp 608 ( 0.00%) 105876 ( 0.00%) 174.14
napster 33 ( 0.00%) 2846 ( 0.00%) 86.24
realaud 21 ( 0.00%) 2100 ( 0.00%) 100.00
rtsp 5 ( 0.00%) 300 ( 0.00%) 60.00
icecast 724 ( 0.00%) 129548 ( 0.00%) 178.93
hotline 11 ( 0.00%) 1170 ( 0.00%) 106.36
other 6978337 ( 28.75%) 5611548097 ( 30.21%) 804.14
udp 5637012 ( 23.22%) 3612081834 ( 19.45%) 640.78
dns 272548 ( 1.12%) 56707811 ( 0.31%) 208.07
realaud 11 ( 0.00%) 1375 ( 0.00%) 125.00
halflif 48 ( 0.00%) 6511 ( 0.00%) 135.65
starcra 33 ( 0.00%) 4148 ( 0.00%) 125.70
everque 3093 ( 0.01%) 2877335 ( 0.02%) 930.27
unreal 8 ( 0.00%) 1152 ( 0.00%) 144.00
quake 20 ( 0.00%) 2222 ( 0.00%) 111.10
other 5060527 ( 20.85%) 3534373363 ( 19.03%) 698.42
icmp 1724634 ( 7.10%) 180951710 ( 0.97%) 104.92
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2232 ( 0.01%) 848192 ( 0.00%) 380.01
ip6 1254043 ( 5.17%) 1129039919 ( 6.08%) 900.32
pim 219 ( 0.00%) 13140 ( 0.00%) 60.00
other 19087 ( 0.08%) 4305440 ( 0.02%) 225.57
frag 1140842 ( 4.70%) 872496328 ( 4.70%) 764.78
ip6 307836 ( 1.27%) 190930741 ( 1.03%) 620.24
tcp6 220582 ( 0.91%) 161712542 ( 0.87%) 733.12
http(s) 3678 ( 0.02%) 4088495 ( 0.02%) 1111.61
http(c) 102079 ( 0.42%) 8855185 ( 0.05%) 86.75
smtp 612 ( 0.00%) 249067 ( 0.00%) 406.97
ftp 6131 ( 0.03%) 611140 ( 0.00%) 99.68
dns 257 ( 0.00%) 55018 ( 0.00%) 214.08
bgp 91 ( 0.00%) 16063 ( 0.00%) 176.52
other 107734 ( 0.44%) 147837574 ( 0.80%) 1372.25
udp6 41866 ( 0.17%) 11113532 ( 0.06%) 265.45
dns 36632 ( 0.15%) 8574106 ( 0.05%) 234.06
realaud 1 ( 0.00%) 102 ( 0.00%) 102.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
unreal 1 ( 0.00%) 110 ( 0.00%) 110.00
other 5231 ( 0.02%) 2539106 ( 0.01%) 485.40
icmp6 23970 ( 0.10%) 3039062 ( 0.02%) 126.79
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 21305 ( 0.09%) 15050213 ( 0.08%) 706.42
tcpdump file: 201203310330.dump.gz (528.77 MB)