Traffic Trace Info
DumpFile: 201203310545.dump
FileSize: 1446.15MB
Id: 201203310545
StartTime: Sat Mar 31 05:45:00 2012
EndTime: Sat Mar 31 06:00:00 2012
TotalTime: 900.05 seconds
TotalCapSize: 1124.28MB CapLen: 96 bytes
# of packets: 21093702 (14538.48MB)
AvgRate: 135.49Mbps stddev:22.69M
IP flow (unique src/dst pair) Information
# of flows: 2300440 (avg. 9.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 3.5% 2.8% 2.7% 2.0% 1.8% 1.7% 1.7% 1.6% 1.6%
IP address Information
# of IPv4 addresses: 1584366
Top 10 bandwidth usage (bytes/total in %):
13.1% 10.5% 10.4% 8.1% 7.2% 5.9% 4.1% 4.0% 3.5% 3.0%
# of IPv6 addresses: 4871
Top 10 bandwidth usage (bytes/total in %):
47.5% 28.0% 10.3% 10.3% 9.5% 8.0% 8.0% 5.5% 5.2% 5.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310545.pktlen.png)
detailed numbers
[ 32- 63]: 5562961
[ 64- 127]: 3958822
[ 128- 255]: 1021908
[ 256- 511]: 571625
[ 512- 1023]: 424130
[ 1024- 2047]: 9554256
Protocol Breakdown
![[protocol breakdown chart]](201203310545.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 21093702 (100.00%) 15244703004 (100.00%) 722.71
ip 20942935 ( 99.29%) 15181950321 ( 99.59%) 724.92
tcp 12831470 ( 60.83%) 10896315671 ( 71.48%) 849.19
http(s) 5277414 ( 25.02%) 6684827680 ( 43.85%) 1266.69
http(c) 2104954 ( 9.98%) 214334161 ( 1.41%) 101.82
squid 50539 ( 0.24%) 33438296 ( 0.22%) 661.63
smtp 98729 ( 0.47%) 9500842 ( 0.06%) 96.23
ftp 6906 ( 0.03%) 669382 ( 0.00%) 96.93
pop3 1485 ( 0.01%) 340695 ( 0.00%) 229.42
imap 1006 ( 0.00%) 145915 ( 0.00%) 145.04
telnet 6467 ( 0.03%) 458691 ( 0.00%) 70.93
ssh 20976 ( 0.10%) 4205490 ( 0.03%) 200.49
dns 2236 ( 0.01%) 283835 ( 0.00%) 126.94
bgp 605 ( 0.00%) 100870 ( 0.00%) 166.73
napster 39 ( 0.00%) 2882 ( 0.00%) 73.90
realaud 22 ( 0.00%) 1541 ( 0.00%) 70.05
rtsp 59 ( 0.00%) 21654 ( 0.00%) 367.02
icecast 539 ( 0.00%) 71594 ( 0.00%) 132.83
hotline 19 ( 0.00%) 1192 ( 0.00%) 62.74
other 5259473 ( 24.93%) 3947910831 ( 25.90%) 750.63
udp 4953138 ( 23.48%) 2740634523 ( 17.98%) 553.31
dns 235025 ( 1.11%) 50494051 ( 0.33%) 214.85
realaud 12 ( 0.00%) 1496 ( 0.00%) 124.67
halflif 36 ( 0.00%) 3871 ( 0.00%) 107.53
starcra 19 ( 0.00%) 2289 ( 0.00%) 120.47
everque 689 ( 0.00%) 83468 ( 0.00%) 121.14
unreal 153 ( 0.00%) 48761 ( 0.00%) 318.70
quake 9 ( 0.00%) 2810 ( 0.00%) 312.22
cuseeme 1 ( 0.00%) 98 ( 0.00%) 98.00
other 4119105 ( 19.53%) 2653572144 ( 17.41%) 644.21
icmp 1776962 ( 8.42%) 200204875 ( 1.31%) 112.67
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6484 ( 0.03%) 2282648 ( 0.01%) 352.04
ip6 1359265 ( 6.44%) 1339907817 ( 8.79%) 985.76
pim 227 ( 0.00%) 13620 ( 0.00%) 60.00
other 15204 ( 0.07%) 2571897 ( 0.02%) 169.16
frag 1634817 ( 7.75%) 1245863094 ( 8.17%) 762.08
ip6 150767 ( 0.71%) 62752683 ( 0.41%) 416.22
tcp6 81035 ( 0.38%) 43212089 ( 0.28%) 533.25
http(s) 16651 ( 0.08%) 23758274 ( 0.16%) 1426.84
http(c) 45429 ( 0.22%) 3570476 ( 0.02%) 78.59
smtp 2187 ( 0.01%) 692978 ( 0.00%) 316.86
ssh 1448 ( 0.01%) 244895 ( 0.00%) 169.13
dns 78 ( 0.00%) 11674 ( 0.00%) 149.67
bgp 88 ( 0.00%) 13883 ( 0.00%) 157.76
other 15154 ( 0.07%) 14919909 ( 0.10%) 984.55
udp6 34860 ( 0.17%) 7844884 ( 0.05%) 225.04
dns 33208 ( 0.16%) 7625305 ( 0.05%) 229.62
halflif 1 ( 0.00%) 104 ( 0.00%) 104.00
starcra 1 ( 0.00%) 109 ( 0.00%) 109.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 1649 ( 0.01%) 219259 ( 0.00%) 132.96
icmp6 22821 ( 0.11%) 2919931 ( 0.02%) 127.95
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 11936 ( 0.06%) 8760151 ( 0.06%) 733.93
tcpdump file: 201203310545.dump.gz (456.00 MB)