Traffic Trace Info
DumpFile: 201203310400.dump
FileSize: 1587.11MB
Id: 201203310400
StartTime: Sat Mar 31 04:00:01 2012
EndTime: Sat Mar 31 04:15:00 2012
TotalTime: 899.48 seconds
TotalCapSize: 1240.16MB CapLen: 96 bytes
# of packets: 22736968 (16629.18MB)
AvgRate: 155.05Mbps stddev:36.92M
IP flow (unique src/dst pair) Information
# of flows: 1858161 (avg. 12.24 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 4.0% 3.9% 3.3% 3.2% 2.9% 1.6% 1.6% 1.5% 1.5%
IP address Information
# of IPv4 addresses: 1438500
Top 10 bandwidth usage (bytes/total in %):
12.2% 11.9% 8.7% 8.2% 6.7% 6.4% 5.4% 4.9% 4.7% 4.7%
# of IPv6 addresses: 5972
Top 10 bandwidth usage (bytes/total in %):
35.4% 33.0% 11.4% 10.9% 10.9% 8.5% 8.5% 7.9% 7.9% 5.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310400.pktlen.png)
detailed numbers
[ 32- 63]: 5091799
[ 64- 127]: 4553547
[ 128- 255]: 1121568
[ 256- 511]: 488084
[ 512- 1023]: 523312
[ 1024- 2047]: 10958658
Protocol Breakdown
![[protocol breakdown chart]](201203310400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22736968 (100.00%) 17436956413 (100.00%) 766.90
ip 22417624 ( 98.60%) 17239968989 ( 98.87%) 769.04
tcp 14771176 ( 64.97%) 13393087965 ( 76.81%) 906.70
http(s) 5772133 ( 25.39%) 7831538686 ( 44.91%) 1356.78
http(c) 2545753 ( 11.20%) 236305685 ( 1.36%) 92.82
squid 98068 ( 0.43%) 77253102 ( 0.44%) 787.75
smtp 34533 ( 0.15%) 7262466 ( 0.04%) 210.31
ftp 7926 ( 0.03%) 740175 ( 0.00%) 93.39
pop3 1317 ( 0.01%) 297327 ( 0.00%) 225.76
imap 1045 ( 0.00%) 115784 ( 0.00%) 110.80
telnet 3565 ( 0.02%) 254190 ( 0.00%) 71.30
ssh 47868 ( 0.21%) 6842096 ( 0.04%) 142.94
dns 5083 ( 0.02%) 501106 ( 0.00%) 98.58
bgp 616 ( 0.00%) 102595 ( 0.00%) 166.55
napster 57 ( 0.00%) 4179 ( 0.00%) 73.32
realaud 35 ( 0.00%) 3772 ( 0.00%) 107.77
icecast 613 ( 0.00%) 114301 ( 0.00%) 186.46
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 6252561 ( 27.50%) 5231752321 ( 30.00%) 836.74
udp 4621103 ( 20.32%) 2638514512 ( 15.13%) 570.97
dns 319227 ( 1.40%) 64133237 ( 0.37%) 200.90
realaud 5 ( 0.00%) 646 ( 0.00%) 129.20
halflif 31 ( 0.00%) 4640 ( 0.00%) 149.68
starcra 29 ( 0.00%) 4676 ( 0.00%) 161.24
everque 4019 ( 0.02%) 3769335 ( 0.02%) 937.88
unreal 33 ( 0.00%) 5315 ( 0.00%) 161.06
quake 3 ( 0.00%) 269 ( 0.00%) 89.67
cuseeme 4 ( 0.00%) 472 ( 0.00%) 118.00
other 3983054 ( 17.52%) 2551656515 ( 14.63%) 640.63
icmp 1766599 ( 7.77%) 196947442 ( 1.13%) 111.48
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 12753 ( 0.06%) 4850614 ( 0.03%) 380.35
ip6 1220726 ( 5.37%) 999254669 ( 5.73%) 818.57
pim 268 ( 0.00%) 16080 ( 0.00%) 60.00
other 24814 ( 0.11%) 7278437 ( 0.04%) 293.32
frag 805077 ( 3.54%) 613936731 ( 3.52%) 762.58
ip6 319344 ( 1.40%) 196987424 ( 1.13%) 616.85
tcp6 220257 ( 0.97%) 162745376 ( 0.93%) 738.89
http(s) 12289 ( 0.05%) 17131810 ( 0.10%) 1394.08
http(c) 27912 ( 0.12%) 2520966 ( 0.01%) 90.32
smtp 3684 ( 0.02%) 3263152 ( 0.02%) 885.76
ftp 6105 ( 0.03%) 612387 ( 0.00%) 100.31
ssh 73148 ( 0.32%) 15647221 ( 0.09%) 213.91
dns 280 ( 0.00%) 63355 ( 0.00%) 226.27
bgp 88 ( 0.00%) 15045 ( 0.00%) 170.97
other 96751 ( 0.43%) 123491440 ( 0.71%) 1276.38
udp6 51716 ( 0.23%) 14753066 ( 0.08%) 285.27
dns 44514 ( 0.20%) 11341618 ( 0.07%) 254.79
halflif 1 ( 0.00%) 110 ( 0.00%) 110.00
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
cuseeme 1 ( 0.00%) 105 ( 0.00%) 105.00
other 7199 ( 0.03%) 3411128 ( 0.02%) 473.83
icmp6 24150 ( 0.11%) 3099095 ( 0.02%) 128.33
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 23106 ( 0.10%) 16374227 ( 0.09%) 708.66
tcpdump file: 201203310400.dump.gz (502.59 MB)