Traffic Trace Info
DumpFile: 201203310515.dump
FileSize: 1721.93MB
Id: 201203310515
StartTime: Sat Mar 31 05:15:00 2012
EndTime: Sat Mar 31 05:30:00 2012
TotalTime: 899.27 seconds
TotalCapSize: 1351.93MB CapLen: 96 bytes
# of packets: 24248013 (18568.67MB)
AvgRate: 173.20Mbps stddev:31.11M
IP flow (unique src/dst pair) Information
# of flows: 2080635 (avg. 11.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 4.3% 3.6% 3.1% 2.3% 2.3% 2.1% 1.9% 1.8% 1.7%
IP address Information
# of IPv4 addresses: 1532551
Top 10 bandwidth usage (bytes/total in %):
20.8% 12.3% 8.2% 7.7% 6.4% 6.0% 4.7% 4.5% 4.5% 4.5%
# of IPv6 addresses: 5229
Top 10 bandwidth usage (bytes/total in %):
86.4% 86.4% 5.5% 2.7% 2.7% 2.7% 1.4% 1.3% 1.3% 1.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310515.pktlen.png)
detailed numbers
[ 32- 63]: 5044197
[ 64- 127]: 4724438
[ 128- 255]: 1127292
[ 256- 511]: 497082
[ 512- 1023]: 607275
[ 1024- 2047]: 12247729
Protocol Breakdown
![[protocol breakdown chart]](201203310515.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24248013 (100.00%) 19470663816 (100.00%) 802.98
ip 23879438 ( 98.48%) 19102366650 ( 98.11%) 799.95
tcp 17048915 ( 70.31%) 15854448619 ( 81.43%) 929.94
http(s) 5936802 ( 24.48%) 8074022939 ( 41.47%) 1360.00
http(c) 1851994 ( 7.64%) 191817264 ( 0.99%) 103.57
squid 53270 ( 0.22%) 36765433 ( 0.19%) 690.17
smtp 29719 ( 0.12%) 4946331 ( 0.03%) 166.44
ftp 5979 ( 0.02%) 779347 ( 0.00%) 130.35
pop3 1455 ( 0.01%) 326762 ( 0.00%) 224.58
imap 2994 ( 0.01%) 1417338 ( 0.01%) 473.39
telnet 3328 ( 0.01%) 239116 ( 0.00%) 71.85
ssh 262798 ( 1.08%) 27604289 ( 0.14%) 105.04
dns 2451 ( 0.01%) 313373 ( 0.00%) 127.86
bgp 627 ( 0.00%) 111078 ( 0.00%) 177.16
napster 61 ( 0.00%) 11801 ( 0.00%) 193.46
realaud 16 ( 0.00%) 994 ( 0.00%) 62.12
rtsp 5 ( 0.00%) 300 ( 0.00%) 60.00
icecast 344 ( 0.00%) 54671 ( 0.00%) 158.93
hotline 13 ( 0.00%) 1193 ( 0.00%) 91.77
other 8897059 ( 36.69%) 7516036390 ( 38.60%) 844.78
udp 3885450 ( 16.02%) 1962534655 ( 10.08%) 505.10
dns 264849 ( 1.09%) 54518481 ( 0.28%) 205.85
realaud 7 ( 0.00%) 558 ( 0.00%) 79.71
halflif 58 ( 0.00%) 10502 ( 0.00%) 181.07
starcra 20 ( 0.00%) 1815 ( 0.00%) 90.75
everque 212 ( 0.00%) 55084 ( 0.00%) 259.83
unreal 143 ( 0.00%) 48001 ( 0.00%) 335.67
quake 12 ( 0.00%) 1289 ( 0.00%) 107.42
cuseeme 1 ( 0.00%) 77 ( 0.00%) 77.00
other 3406750 ( 14.05%) 1894981278 ( 9.73%) 556.24
icmp 1791029 ( 7.39%) 201697461 ( 1.04%) 112.62
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 13990 ( 0.06%) 8011236 ( 0.04%) 572.64
ip6 1122295 ( 4.63%) 1070494842 ( 5.50%) 953.84
pim 230 ( 0.00%) 13800 ( 0.00%) 60.00
other 17345 ( 0.07%) 5146877 ( 0.03%) 296.74
frag 699699 ( 2.89%) 533848907 ( 2.74%) 762.97
ip6 368575 ( 1.52%) 368297166 ( 1.89%) 999.25
tcp6 301589 ( 1.24%) 352186516 ( 1.81%) 1167.77
http(s) 11535 ( 0.05%) 16176111 ( 0.08%) 1402.35
http(c) 64392 ( 0.27%) 5061454 ( 0.03%) 78.60
smtp 569 ( 0.00%) 285373 ( 0.00%) 501.53
dns 86 ( 0.00%) 17040 ( 0.00%) 198.14
bgp 92 ( 0.00%) 18902 ( 0.00%) 205.46
other 224915 ( 0.93%) 330627636 ( 1.70%) 1470.01
udp6 36549 ( 0.15%) 8148071 ( 0.04%) 222.94
dns 34734 ( 0.14%) 7883541 ( 0.04%) 226.97
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 1 ( 0.00%) 111 ( 0.00%) 111.00
unreal 1 ( 0.00%) 103 ( 0.00%) 103.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 1811 ( 0.01%) 264103 ( 0.00%) 145.83
icmp6 23307 ( 0.10%) 2949206 ( 0.02%) 126.54
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 7018 ( 0.03%) 4998117 ( 0.03%) 712.19
tcpdump file: 201203310515.dump.gz (532.36 MB)