Traffic Trace Info
DumpFile: 201203310430.dump
FileSize: 1527.15MB
Id: 201203310430
StartTime: Sat Mar 31 04:30:47 2012
EndTime: Sat Mar 31 04:45:00 2012
TotalTime: 852.85 seconds
TotalCapSize: 1190.33MB CapLen: 96 bytes
# of packets: 22073436 (16181.51MB)
AvgRate: 159.17Mbps stddev:34.89M
IP flow (unique src/dst pair) Information
# of flows: 2051653 (avg. 10.76 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 3.8% 3.4% 3.1% 2.5% 2.4% 2.1% 1.9% 1.8% 1.7%
IP address Information
# of IPv4 addresses: 1579322
Top 10 bandwidth usage (bytes/total in %):
13.8% 8.9% 8.5% 6.7% 5.8% 5.7% 5.2% 5.1% 4.7% 4.6%
# of IPv6 addresses: 5274
Top 10 bandwidth usage (bytes/total in %):
59.4% 50.6% 19.5% 19.5% 7.0% 7.0% 6.9% 3.5% 2.3% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310430.pktlen.png)
detailed numbers
[ 32- 63]: 5234438
[ 64- 127]: 3960029
[ 128- 255]: 1206497
[ 256- 511]: 454411
[ 512- 1023]: 548191
[ 1024- 2047]: 10669870
Protocol Breakdown
![[protocol breakdown chart]](201203310430.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 22073436 (100.00%) 16967540365 (100.00%) 768.69
ip 21885150 ( 99.15%) 16835685137 ( 99.22%) 769.27
tcp 14223799 ( 64.44%) 12929178485 ( 76.20%) 908.98
http(s) 6322282 ( 28.64%) 8347807503 ( 49.20%) 1320.38
http(c) 2248301 ( 10.19%) 208258071 ( 1.23%) 92.63
squid 52481 ( 0.24%) 33029988 ( 0.19%) 629.37
smtp 26996 ( 0.12%) 5394245 ( 0.03%) 199.82
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 7934 ( 0.04%) 734394 ( 0.00%) 92.56
pop3 1294 ( 0.01%) 274112 ( 0.00%) 211.83
imap 2987 ( 0.01%) 1204243 ( 0.01%) 403.16
telnet 14295 ( 0.06%) 1039863 ( 0.01%) 72.74
ssh 105461 ( 0.48%) 11973568 ( 0.07%) 113.54
dns 2341 ( 0.01%) 272007 ( 0.00%) 116.19
bgp 581 ( 0.00%) 101171 ( 0.00%) 174.13
napster 27 ( 0.00%) 1748 ( 0.00%) 64.74
realaud 55 ( 0.00%) 33887 ( 0.00%) 616.13
rtsp 54 ( 0.00%) 9341 ( 0.00%) 172.98
icecast 346 ( 0.00%) 70496 ( 0.00%) 203.75
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 5438361 ( 24.64%) 4318973668 ( 25.45%) 794.17
udp 4809536 ( 21.79%) 2676727216 ( 15.78%) 556.55
dns 260918 ( 1.18%) 55180742 ( 0.33%) 211.49
realaud 9 ( 0.00%) 1343 ( 0.00%) 149.22
halflif 29 ( 0.00%) 3701 ( 0.00%) 127.62
starcra 21 ( 0.00%) 2686 ( 0.00%) 127.90
everque 1762 ( 0.01%) 1613896 ( 0.01%) 915.95
unreal 139 ( 0.00%) 60491 ( 0.00%) 435.19
quake 5 ( 0.00%) 694 ( 0.00%) 138.80
cuseeme 1 ( 0.00%) 93 ( 0.00%) 93.00
other 4119087 ( 18.66%) 2594078348 ( 15.29%) 629.77
icmp 1697617 ( 7.69%) 188362318 ( 1.11%) 110.96
ipip 175 ( 0.00%) 18218 ( 0.00%) 104.10
ipsec 4295 ( 0.02%) 1571706 ( 0.01%) 365.94
ip6 1131933 ( 5.13%) 1036666535 ( 6.11%) 915.84
pim 220 ( 0.00%) 13200 ( 0.00%) 60.00
other 17575 ( 0.08%) 3147459 ( 0.02%) 179.09
frag 1153184 ( 5.22%) 879608025 ( 5.18%) 762.76
ip6 188286 ( 0.85%) 131855228 ( 0.78%) 700.29
tcp6 123879 ( 0.56%) 118962155 ( 0.70%) 960.31
http(s) 24798 ( 0.11%) 35685344 ( 0.21%) 1439.04
http(c) 41121 ( 0.19%) 3473169 ( 0.02%) 84.46
smtp 22 ( 0.00%) 5923 ( 0.00%) 269.23
dns 260 ( 0.00%) 56651 ( 0.00%) 217.89
bgp 88 ( 0.00%) 14679 ( 0.00%) 166.81
other 57590 ( 0.26%) 79726389 ( 0.47%) 1384.38
udp6 40360 ( 0.18%) 8816789 ( 0.05%) 218.45
dns 33863 ( 0.15%) 7633624 ( 0.04%) 225.43
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
halflif 2 ( 0.00%) 203 ( 0.00%) 101.50
starcra 1 ( 0.00%) 118 ( 0.00%) 118.00
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
unreal 1 ( 0.00%) 118 ( 0.00%) 118.00
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 6490 ( 0.03%) 1182410 ( 0.01%) 182.19
icmp6 22192 ( 0.10%) 2749130 ( 0.02%) 123.88
ip6 79 ( 0.00%) 10722 ( 0.00%) 135.72
pim6 29 ( 0.00%) 3944 ( 0.00%) 136.00
other6 1747 ( 0.01%) 1312488 ( 0.01%) 751.28
tcpdump file: 201203310430.dump.gz (479.69 MB)