Traffic Trace Info
DumpFile: 201203310500.dump
FileSize: 1734.27MB
Id: 201203310500
StartTime: Sat Mar 31 05:00:00 2012
EndTime: Sat Mar 31 05:15:00 2012
TotalTime: 899.98 seconds
TotalCapSize: 1357.43MB CapLen: 96 bytes
# of packets: 24696171 (18928.01MB)
AvgRate: 176.45Mbps stddev:30.39M
IP flow (unique src/dst pair) Information
# of flows: 2046114 (avg. 12.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.5% 6.7% 5.8% 4.0% 2.7% 2.7% 2.3% 1.7% 1.6% 1.6%
IP address Information
# of IPv4 addresses: 1539826
Top 10 bandwidth usage (bytes/total in %):
24.7% 14.6% 13.1% 9.0% 6.3% 6.3% 5.8% 5.1% 4.9% 4.0%
# of IPv6 addresses: 5344
Top 10 bandwidth usage (bytes/total in %):
21.5% 20.6% 15.8% 15.8% 12.8% 12.7% 12.3% 9.3% 8.2% 5.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310500.pktlen.png)
detailed numbers
[ 32- 63]: 5606216
[ 64- 127]: 4182693
[ 128- 255]: 1182398
[ 256- 511]: 526418
[ 512- 1023]: 630413
[ 1024- 2047]: 12568033
Protocol Breakdown
![[protocol breakdown chart]](201203310500.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24696171 (100.00%) 19847459292 (100.00%) 803.67
ip 24495333 ( 99.19%) 19780021025 ( 99.66%) 807.50
tcp 16680966 ( 67.54%) 15585847588 ( 78.53%) 934.35
http(s) 6540877 ( 26.49%) 8816350457 ( 44.42%) 1347.89
http(c) 1797992 ( 7.28%) 182792599 ( 0.92%) 101.66
squid 76638 ( 0.31%) 58366945 ( 0.29%) 761.59
smtp 29418 ( 0.12%) 5186678 ( 0.03%) 176.31
ftp 7551 ( 0.03%) 679646 ( 0.00%) 90.01
pop3 1352 ( 0.01%) 289582 ( 0.00%) 214.19
imap 1611 ( 0.01%) 641784 ( 0.00%) 398.38
telnet 4067 ( 0.02%) 291365 ( 0.00%) 71.64
ssh 217819 ( 0.88%) 21122132 ( 0.11%) 96.97
dns 2514 ( 0.01%) 298133 ( 0.00%) 118.59
bgp 604 ( 0.00%) 92173 ( 0.00%) 152.60
napster 41 ( 0.00%) 3634 ( 0.00%) 88.63
realaud 28 ( 0.00%) 2533 ( 0.00%) 90.46
rtsp 76 ( 0.00%) 41811 ( 0.00%) 550.14
icecast 426 ( 0.00%) 101705 ( 0.00%) 238.74
hotline 7 ( 0.00%) 440 ( 0.00%) 62.86
other 7999945 ( 32.39%) 6499585971 ( 32.75%) 812.45
udp 4576978 ( 18.53%) 2528219280 ( 12.74%) 552.38
dns 286307 ( 1.16%) 58778559 ( 0.30%) 205.30
realaud 55 ( 0.00%) 5685 ( 0.00%) 103.36
halflif 118 ( 0.00%) 19633 ( 0.00%) 166.38
starcra 38 ( 0.00%) 5469 ( 0.00%) 143.92
everque 281 ( 0.00%) 70726 ( 0.00%) 251.69
unreal 147 ( 0.00%) 58013 ( 0.00%) 394.65
quake 19 ( 0.00%) 2125 ( 0.00%) 111.84
cuseeme 6 ( 0.00%) 1609 ( 0.00%) 268.17
other 3989164 ( 16.15%) 2451111714 ( 12.35%) 614.44
icmp 1818015 ( 7.36%) 203512299 ( 1.03%) 111.94
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2092 ( 0.01%) 708056 ( 0.00%) 338.46
ip6 1399526 ( 5.67%) 1458758899 ( 7.35%) 1042.32
pim 220 ( 0.00%) 13200 ( 0.00%) 60.00
other 17351 ( 0.07%) 2942433 ( 0.01%) 169.58
frag 950545 ( 3.85%) 725164785 ( 3.65%) 762.89
ip6 200838 ( 0.81%) 67438267 ( 0.34%) 335.78
tcp6 133359 ( 0.54%) 51986993 ( 0.26%) 389.83
http(s) 24388 ( 0.10%) 35108662 ( 0.18%) 1439.59
http(c) 91303 ( 0.37%) 7750679 ( 0.04%) 84.89
smtp 224 ( 0.00%) 148793 ( 0.00%) 664.25
ftp 44 ( 0.00%) 6031 ( 0.00%) 137.07
dns 370 ( 0.00%) 73858 ( 0.00%) 199.62
bgp 90 ( 0.00%) 17255 ( 0.00%) 191.72
other 16940 ( 0.07%) 8881715 ( 0.04%) 524.30
udp6 38766 ( 0.16%) 8999195 ( 0.05%) 232.14
dns 36994 ( 0.15%) 8738482 ( 0.04%) 236.21
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 2 ( 0.00%) 217 ( 0.00%) 108.50
other 1769 ( 0.01%) 260390 ( 0.00%) 147.20
icmp6 23862 ( 0.10%) 3024015 ( 0.02%) 126.73
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 4736 ( 0.02%) 3412436 ( 0.02%) 720.53
tcpdump file: 201203310500.dump.gz (540.76 MB)