Traffic Trace Info
DumpFile: 201203310345.dump
FileSize: 1655.15MB
Id: 201203310345
StartTime: Sat Mar 31 03:45:00 2012
EndTime: Sat Mar 31 04:00:01 2012
TotalTime: 900.25 seconds
TotalCapSize: 1295.59MB CapLen: 96 bytes
# of packets: 23563883 (17513.48MB)
AvgRate: 163.20Mbps stddev:39.46M
IP flow (unique src/dst pair) Information
# of flows: 1798642 (avg. 13.10 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.6% 4.9% 3.4% 2.8% 2.4% 2.4% 2.2% 1.6% 1.5% 1.5%
IP address Information
# of IPv4 addresses: 1403861
Top 10 bandwidth usage (bytes/total in %):
12.4% 9.2% 7.5% 7.5% 7.1% 6.7% 6.0% 5.6% 5.4% 4.7%
# of IPv6 addresses: 5668
Top 10 bandwidth usage (bytes/total in %):
96.3% 94.4% 1.0% 1.0% 1.0% 0.8% 0.8% 0.6% 0.6% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310345.pktlen.png)
detailed numbers
[ 32- 63]: 5545374
[ 64- 127]: 4405473
[ 128- 255]: 1036524
[ 256- 511]: 423296
[ 512- 1023]: 511014
[ 1024- 2047]: 11642202
Protocol Breakdown
![[protocol breakdown chart]](201203310345.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23563883 (100.00%) 18364219703 (100.00%) 779.34
ip 22119282 ( 93.87%) 16498149533 ( 89.84%) 745.87
tcp 13897197 ( 58.98%) 12072552367 ( 65.74%) 868.70
http(s) 5279604 ( 22.41%) 6739251002 ( 36.70%) 1276.47
http(c) 2243799 ( 9.52%) 228526026 ( 1.24%) 101.85
squid 65048 ( 0.28%) 48346098 ( 0.26%) 743.24
smtp 25349 ( 0.11%) 4324746 ( 0.02%) 170.61
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 12181 ( 0.05%) 5425845 ( 0.03%) 445.44
pop3 1366 ( 0.01%) 292271 ( 0.00%) 213.96
imap 2432 ( 0.01%) 784490 ( 0.00%) 322.57
telnet 3458 ( 0.01%) 247546 ( 0.00%) 71.59
ssh 132892 ( 0.56%) 23307235 ( 0.13%) 175.38
dns 2668 ( 0.01%) 398069 ( 0.00%) 149.20
bgp 623 ( 0.00%) 118491 ( 0.00%) 190.19
napster 34 ( 0.00%) 3012 ( 0.00%) 88.59
realaud 365 ( 0.00%) 189746 ( 0.00%) 519.85
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 5669 ( 0.02%) 4857444 ( 0.03%) 856.84
hotline 54 ( 0.00%) 3946 ( 0.00%) 73.07
other 6121641 ( 25.98%) 5016475532 ( 27.32%) 819.47
udp 5326125 ( 22.60%) 3231217807 ( 17.60%) 606.67
dns 245149 ( 1.04%) 52116602 ( 0.28%) 212.59
realaud 8 ( 0.00%) 1175 ( 0.00%) 146.88
halflif 81 ( 0.00%) 12537 ( 0.00%) 154.78
starcra 41 ( 0.00%) 3454 ( 0.00%) 84.24
everque 5580 ( 0.02%) 5571052 ( 0.03%) 998.40
unreal 11 ( 0.00%) 1722 ( 0.00%) 156.55
quake 12 ( 0.00%) 1736 ( 0.00%) 144.67
cuseeme 1 ( 0.00%) 93 ( 0.00%) 93.00
other 4562464 ( 19.36%) 3142697986 ( 17.11%) 688.82
icmp 1714948 ( 7.28%) 182567815 ( 0.99%) 106.46
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6997 ( 0.03%) 3358590 ( 0.02%) 480.00
ip6 1153360 ( 4.89%) 1004268710 ( 5.47%) 870.73
pim 309 ( 0.00%) 18540 ( 0.00%) 60.00
other 20161 ( 0.09%) 4146434 ( 0.02%) 205.67
frag 1384301 ( 5.87%) 1056049757 ( 5.75%) 762.88
ip6 1444601 ( 6.13%) 1866070170 ( 10.16%) 1291.75
tcp6 1354165 ( 5.75%) 1832729590 ( 9.98%) 1353.40
http(s) 21915 ( 0.09%) 31309292 ( 0.17%) 1428.67
http(c) 55035 ( 0.23%) 4779909 ( 0.03%) 86.85
smtp 563 ( 0.00%) 275099 ( 0.00%) 488.63
ftp 6514 ( 0.03%) 660644 ( 0.00%) 101.42
ssh 92 ( 0.00%) 28994 ( 0.00%) 315.15
dns 179 ( 0.00%) 35864 ( 0.00%) 200.36
bgp 97 ( 0.00%) 21533 ( 0.00%) 221.99
other 1269770 ( 5.39%) 1795618255 ( 9.78%) 1414.13
udp6 41751 ( 0.18%) 12734466 ( 0.07%) 305.01
dns 34587 ( 0.15%) 7903194 ( 0.04%) 228.50
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 116 ( 0.00%) 116.00
other 7162 ( 0.03%) 4831050 ( 0.03%) 674.54
icmp6 23690 ( 0.10%) 2998103 ( 0.02%) 126.56
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 24881 ( 0.11%) 17592519 ( 0.10%) 707.07
tcpdump file: 201203310345.dump.gz (508.33 MB)