Traffic Trace Info
DumpFile: 201203310415.dump
FileSize: 1342.61MB
Id: 201203310415
StartTime: Sat Mar 31 04:15:00 2012
EndTime: Sat Mar 31 04:30:47 2012
TotalTime: 947.39 seconds
TotalCapSize: 1046.85MB CapLen: 96 bytes
# of packets: 19382581 (14724.08MB)
AvgRate: 192.12Mbps stddev:43.34M
IP flow (unique src/dst pair) Information
# of flows: 1496353 (avg. 12.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 4.9% 4.4% 4.1% 3.1% 2.4% 2.3% 2.2% 1.9% 1.7%
IP address Information
# of IPv4 addresses: 1135923
Top 10 bandwidth usage (bytes/total in %):
11.5% 11.0% 10.1% 8.8% 8.1% 7.3% 5.9% 4.7% 4.5% 4.5%
# of IPv6 addresses: 4837
Top 10 bandwidth usage (bytes/total in %):
65.4% 64.7% 7.9% 7.9% 7.9% 7.9% 7.9% 7.9% 4.3% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310415.pktlen.png)
detailed numbers
[ 32- 63]: 4455117
[ 64- 127]: 3517062
[ 128- 255]: 831427
[ 256- 511]: 373734
[ 512- 1023]: 409127
[ 1024- 2047]: 9796114
Protocol Breakdown
![[protocol breakdown chart]](201203310415.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19382581 (100.00%) 15439316903 (100.00%) 796.56
ip 19156630 ( 98.83%) 15227232801 ( 98.63%) 794.88
tcp 13060269 ( 67.38%) 12159835906 ( 78.76%) 931.06
http(s) 5156975 ( 26.61%) 7073479847 ( 45.81%) 1371.63
http(c) 1954163 ( 10.08%) 183314559 ( 1.19%) 93.81
squid 74827 ( 0.39%) 32399693 ( 0.21%) 432.99
smtp 19773 ( 0.10%) 2869504 ( 0.02%) 145.12
ftp 6810 ( 0.04%) 632173 ( 0.00%) 92.83
pop3 1158 ( 0.01%) 251028 ( 0.00%) 216.78
imap 1417 ( 0.01%) 641304 ( 0.00%) 452.58
telnet 2452 ( 0.01%) 172128 ( 0.00%) 70.20
ssh 36376 ( 0.19%) 7294359 ( 0.05%) 200.53
dns 2751 ( 0.01%) 290959 ( 0.00%) 105.76
bgp 471 ( 0.00%) 79941 ( 0.00%) 169.73
napster 18 ( 0.00%) 1527 ( 0.00%) 84.83
realaud 6 ( 0.00%) 378 ( 0.00%) 63.00
icecast 284 ( 0.00%) 49649 ( 0.00%) 174.82
hotline 12 ( 0.00%) 780 ( 0.00%) 65.00
other 5802775 ( 29.94%) 4858358017 ( 31.47%) 837.25
udp 3839986 ( 19.81%) 2205978792 ( 14.29%) 574.48
dns 205666 ( 1.06%) 42548108 ( 0.28%) 206.88
realaud 9 ( 0.00%) 1076 ( 0.00%) 119.56
halflif 35 ( 0.00%) 4733 ( 0.00%) 135.23
starcra 22 ( 0.00%) 2679 ( 0.00%) 121.77
everque 209 ( 0.00%) 56763 ( 0.00%) 271.59
unreal 124 ( 0.00%) 54409 ( 0.00%) 438.78
quake 10 ( 0.00%) 1549 ( 0.00%) 154.90
other 3340923 ( 17.24%) 2145605059 ( 13.90%) 642.22
icmp 1343537 ( 6.93%) 147251846 ( 0.95%) 109.60
ipip 139 ( 0.00%) 14486 ( 0.00%) 104.22
ipsec 6083 ( 0.03%) 2196770 ( 0.01%) 361.13
ip6 893090 ( 4.61%) 709735867 ( 4.60%) 794.70
pim 185 ( 0.00%) 11100 ( 0.00%) 60.00
other 13341 ( 0.07%) 2208034 ( 0.01%) 165.51
frag 877945 ( 4.53%) 669562530 ( 4.34%) 762.65
ip6 225949 ( 1.17%) 212083982 ( 1.37%) 938.64
tcp6 148240 ( 0.76%) 184384318 ( 1.19%) 1243.82
http(s) 15089 ( 0.08%) 21561525 ( 0.14%) 1428.96
http(c) 19018 ( 0.10%) 1710889 ( 0.01%) 89.96
smtp 146 ( 0.00%) 97097 ( 0.00%) 665.05
ftp 40 ( 0.00%) 6447 ( 0.00%) 161.18
dns 162 ( 0.00%) 22353 ( 0.00%) 137.98
bgp 70 ( 0.00%) 12128 ( 0.00%) 173.26
other 113715 ( 0.59%) 160973879 ( 1.04%) 1415.59
udp6 35358 ( 0.18%) 7933125 ( 0.05%) 224.37
dns 28742 ( 0.15%) 6663823 ( 0.04%) 231.85
realaud 1 ( 0.00%) 103 ( 0.00%) 103.00
everque 1 ( 0.00%) 110 ( 0.00%) 110.00
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
other 6613 ( 0.03%) 1268984 ( 0.01%) 191.89
icmp6 17570 ( 0.09%) 2261041 ( 0.01%) 128.69
ip6 62 ( 0.00%) 8366 ( 0.00%) 134.94
pim6 24 ( 0.00%) 3264 ( 0.00%) 136.00
other6 24695 ( 0.13%) 17493868 ( 0.11%) 708.40
tcpdump file: 201203310415.dump.gz (416.92 MB)