Traffic Trace Info
DumpFile: 201203310530.dump
FileSize: 1626.57MB
Id: 201203310530
StartTime: Sat Mar 31 05:30:00 2012
EndTime: Sat Mar 31 05:45:00 2012
TotalTime: 900.21 seconds
TotalCapSize: 1270.13MB CapLen: 96 bytes
# of packets: 23359292 (17391.74MB)
AvgRate: 162.06Mbps stddev:27.36M
IP flow (unique src/dst pair) Information
# of flows: 2003510 (avg. 11.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.1% 4.1% 3.7% 2.9% 2.4% 2.4% 2.2% 2.1% 1.7% 1.6%
IP address Information
# of IPv4 addresses: 1506981
Top 10 bandwidth usage (bytes/total in %):
14.8% 13.0% 7.5% 7.3% 7.1% 6.3% 5.6% 5.2% 4.4% 4.3%
# of IPv6 addresses: 5093
Top 10 bandwidth usage (bytes/total in %):
19.6% 18.0% 17.2% 15.2% 15.2% 13.3% 13.3% 11.5% 7.1% 7.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310530.pktlen.png)
detailed numbers
[ 32- 63]: 5262368
[ 64- 127]: 4365633
[ 128- 255]: 1165227
[ 256- 511]: 503925
[ 512- 1023]: 550201
[ 1024- 2047]: 11511938
Protocol Breakdown
![[protocol breakdown chart]](201203310530.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23359292 (100.00%) 18236565352 (100.00%) 780.70
ip 23185228 ( 99.25%) 18178266107 ( 99.68%) 784.05
tcp 15250828 ( 65.29%) 14054273046 ( 77.07%) 921.54
http(s) 5499164 ( 23.54%) 7374486042 ( 40.44%) 1341.02
http(c) 2173760 ( 9.31%) 209938494 ( 1.15%) 96.58
squid 56752 ( 0.24%) 36772775 ( 0.20%) 647.96
smtp 27843 ( 0.12%) 4468412 ( 0.02%) 160.49
nntp 8 ( 0.00%) 494 ( 0.00%) 61.75
ftp 6377 ( 0.03%) 640276 ( 0.00%) 100.40
pop3 1425 ( 0.01%) 336937 ( 0.00%) 236.45
imap 1591 ( 0.01%) 630058 ( 0.00%) 396.01
telnet 3878 ( 0.02%) 273932 ( 0.00%) 70.64
ssh 103569 ( 0.44%) 14596538 ( 0.08%) 140.94
dns 2491 ( 0.01%) 307448 ( 0.00%) 123.42
bgp 604 ( 0.00%) 106443 ( 0.00%) 176.23
napster 30 ( 0.00%) 2008 ( 0.00%) 66.93
realaud 19 ( 0.00%) 2405 ( 0.00%) 126.58
rtsp 3 ( 0.00%) 180 ( 0.00%) 60.00
icecast 458 ( 0.00%) 107309 ( 0.00%) 234.30
hotline 11 ( 0.00%) 1085 ( 0.00%) 98.64
other 7372845 ( 31.56%) 6411602210 ( 35.16%) 869.62
udp 4715442 ( 20.19%) 2604864713 ( 14.28%) 552.41
dns 264329 ( 1.13%) 54627663 ( 0.30%) 206.67
realaud 20 ( 0.00%) 2253 ( 0.00%) 112.65
halflif 85 ( 0.00%) 11806 ( 0.00%) 138.89
starcra 22 ( 0.00%) 3231 ( 0.00%) 146.86
everque 821 ( 0.00%) 98873 ( 0.00%) 120.43
unreal 78 ( 0.00%) 26908 ( 0.00%) 344.97
quake 25 ( 0.00%) 2387 ( 0.00%) 95.48
cuseeme 1 ( 0.00%) 72 ( 0.00%) 72.00
other 4035803 ( 17.28%) 2524872684 ( 13.85%) 625.62
icmp 1827128 ( 7.82%) 207311063 ( 1.14%) 113.46
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 8285 ( 0.04%) 4395598 ( 0.02%) 530.55
ip6 1367256 ( 5.85%) 1304558930 ( 7.15%) 954.14
pim 220 ( 0.00%) 13200 ( 0.00%) 60.00
other 15884 ( 0.07%) 2830287 ( 0.02%) 178.18
frag 1265059 ( 5.42%) 964598284 ( 5.29%) 762.49
ip6 174064 ( 0.75%) 58299245 ( 0.32%) 334.93
tcp6 103754 ( 0.44%) 39656515 ( 0.22%) 382.22
http(s) 14873 ( 0.06%) 20114853 ( 0.11%) 1352.44
http(c) 69676 ( 0.30%) 5518891 ( 0.03%) 79.21
smtp 824 ( 0.00%) 282755 ( 0.00%) 343.15
dns 171 ( 0.00%) 38738 ( 0.00%) 226.54
bgp 91 ( 0.00%) 14998 ( 0.00%) 164.81
other 18119 ( 0.08%) 13686280 ( 0.08%) 755.36
udp6 36035 ( 0.15%) 7968935 ( 0.04%) 221.14
dns 34171 ( 0.15%) 7696456 ( 0.04%) 225.23
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 1 ( 0.00%) 102 ( 0.00%) 102.00
cuseeme 1 ( 0.00%) 101 ( 0.00%) 101.00
other 1860 ( 0.01%) 272060 ( 0.00%) 146.27
icmp6 23320 ( 0.10%) 2933332 ( 0.02%) 125.79
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 10840 ( 0.05%) 7724803 ( 0.04%) 712.62
tcpdump file: 201203310530.dump.gz (507.58 MB)