Traffic Trace Info
DumpFile: 201203310445.dump
FileSize: 1660.30MB
Id: 201203310445
StartTime: Sat Mar 31 04:45:00 2012
EndTime: Sat Mar 31 05:00:00 2012
TotalTime: 900.14 seconds
TotalCapSize: 1294.75MB CapLen: 96 bytes
# of packets: 23955972 (18167.70MB)
AvgRate: 169.27Mbps stddev:31.55M
IP flow (unique src/dst pair) Information
# of flows: 1978563 (avg. 12.11 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 3.0% 2.7% 2.6% 2.2% 2.1% 2.1% 2.0% 1.9% 1.7%
IP address Information
# of IPv4 addresses: 1513409
Top 10 bandwidth usage (bytes/total in %):
16.8% 10.3% 9.9% 7.3% 7.0% 6.0% 4.8% 4.8% 4.5% 3.7%
# of IPv6 addresses: 5380
Top 10 bandwidth usage (bytes/total in %):
41.4% 32.4% 32.4% 30.9% 7.3% 6.2% 6.2% 3.8% 2.8% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310445.pktlen.png)
detailed numbers
[ 32- 63]: 5450608
[ 64- 127]: 4238293
[ 128- 255]: 1154117
[ 256- 511]: 495348
[ 512- 1023]: 582539
[ 1024- 2047]: 12035067
Protocol Breakdown
![[protocol breakdown chart]](201203310445.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23955972 (100.00%) 19050214428 (100.00%) 795.22
ip 23788713 ( 99.30%) 18968994355 ( 99.57%) 797.39
tcp 15714886 ( 65.60%) 14589678135 ( 76.59%) 928.40
http(s) 6589186 ( 27.51%) 8949166607 ( 46.98%) 1358.16
http(c) 2114236 ( 8.83%) 205766539 ( 1.08%) 97.32
squid 52697 ( 0.22%) 34486329 ( 0.18%) 654.43
smtp 29489 ( 0.12%) 5009655 ( 0.03%) 169.88
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 9073 ( 0.04%) 964904 ( 0.01%) 106.35
pop3 1424 ( 0.01%) 324632 ( 0.00%) 227.97
imap 1496 ( 0.01%) 703659 ( 0.00%) 470.36
telnet 4589 ( 0.02%) 324676 ( 0.00%) 70.75
ssh 28029 ( 0.12%) 5558464 ( 0.03%) 198.31
dns 2354 ( 0.01%) 278806 ( 0.00%) 118.44
bgp 642 ( 0.00%) 126184 ( 0.00%) 196.55
napster 101 ( 0.00%) 6490 ( 0.00%) 64.26
realaud 7 ( 0.00%) 821 ( 0.00%) 117.29
icecast 383 ( 0.00%) 67887 ( 0.00%) 177.25
other 6881172 ( 28.72%) 5386891988 ( 28.28%) 782.85
udp 5198954 ( 21.70%) 3178588111 ( 16.69%) 611.39
dns 246363 ( 1.03%) 52733935 ( 0.28%) 214.05
realaud 13 ( 0.00%) 1903 ( 0.00%) 146.38
halflif 26 ( 0.00%) 5721 ( 0.00%) 220.04
starcra 24 ( 0.00%) 2278 ( 0.00%) 94.92
everque 1247 ( 0.01%) 1059211 ( 0.01%) 849.41
unreal 132 ( 0.00%) 60194 ( 0.00%) 456.02
quake 6 ( 0.00%) 793 ( 0.00%) 132.17
cuseeme 3 ( 0.00%) 570 ( 0.00%) 190.00
other 4545290 ( 18.97%) 3100255767 ( 16.27%) 682.08
icmp 1790874 ( 7.48%) 199337064 ( 1.05%) 111.31
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 5989 ( 0.03%) 3636462 ( 0.02%) 607.19
ip6 1044631 ( 4.36%) 992974124 ( 5.21%) 950.55
pim 208 ( 0.00%) 12480 ( 0.00%) 60.00
other 32987 ( 0.14%) 4748819 ( 0.02%) 143.96
frag 1123795 ( 4.69%) 857317542 ( 4.50%) 762.88
ip6 167259 ( 0.70%) 81220073 ( 0.43%) 485.59
tcp6 99623 ( 0.42%) 64572004 ( 0.34%) 648.16
http(s) 35091 ( 0.15%) 51003984 ( 0.27%) 1453.48
http(c) 51544 ( 0.22%) 4233840 ( 0.02%) 82.14
smtp 124 ( 0.00%) 70848 ( 0.00%) 571.35
dns 115 ( 0.00%) 23381 ( 0.00%) 203.31
bgp 89 ( 0.00%) 15347 ( 0.00%) 172.44
other 12660 ( 0.05%) 9224604 ( 0.05%) 728.64
udp6 35646 ( 0.15%) 7983976 ( 0.04%) 223.98
dns 33399 ( 0.14%) 7645187 ( 0.04%) 228.90
other 2247 ( 0.01%) 338789 ( 0.00%) 150.77
icmp6 24045 ( 0.10%) 2961132 ( 0.02%) 123.15
ip6 84 ( 0.00%) 11462 ( 0.00%) 136.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 7831 ( 0.03%) 5687419 ( 0.03%) 726.27
tcpdump file: 201203310445.dump.gz (519.78 MB)