Traffic Trace Info
DumpFile: 201203310645.dump
FileSize: 1396.33MB
Id: 201203310645
StartTime: Sat Mar 31 06:45:00 2012
EndTime: Sat Mar 31 07:00:00 2012
TotalTime: 899.98 seconds
TotalCapSize: 1095.26MB CapLen: 96 bytes
# of packets: 19730155 (13949.53MB)
AvgRate: 130.00Mbps stddev:20.23M
IP flow (unique src/dst pair) Information
# of flows: 1905753 (avg. 10.35 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.3% 7.0% 4.1% 3.3% 3.1% 3.0% 2.0% 1.7% 1.6% 1.6%
IP address Information
# of IPv4 addresses: 1436725
Top 10 bandwidth usage (bytes/total in %):
28.8% 11.8% 7.3% 7.0% 6.8% 6.5% 4.5% 4.4% 4.2% 3.3%
# of IPv6 addresses: 4542
Top 10 bandwidth usage (bytes/total in %):
28.7% 28.1% 28.1% 21.2% 11.1% 4.3% 2.5% 2.3% 1.7% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310645.pktlen.png)
detailed numbers
[ 32- 63]: 4552870
[ 64- 127]: 4073851
[ 128- 255]: 1026657
[ 256- 511]: 462318
[ 512- 1023]: 525187
[ 1024- 2047]: 9089272
Protocol Breakdown
![[protocol breakdown chart]](201203310645.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19730155 (100.00%) 14627146688 (100.00%) 741.36
ip 19647954 ( 99.58%) 14599141842 ( 99.81%) 743.04
tcp 13621721 ( 69.04%) 11848290927 ( 81.00%) 869.81
http(s) 6042785 ( 30.63%) 8162471478 ( 55.80%) 1350.78
http(c) 1947355 ( 9.87%) 191716079 ( 1.31%) 98.45
squid 29672 ( 0.15%) 18369729 ( 0.13%) 619.09
smtp 28096 ( 0.14%) 5864242 ( 0.04%) 208.72
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 5976 ( 0.03%) 504775 ( 0.00%) 84.47
pop3 1454 ( 0.01%) 322439 ( 0.00%) 221.76
imap 2713 ( 0.01%) 986718 ( 0.01%) 363.70
telnet 2209 ( 0.01%) 147876 ( 0.00%) 66.94
ssh 305541 ( 1.55%) 43277759 ( 0.30%) 141.64
dns 2631 ( 0.01%) 300785 ( 0.00%) 114.32
bgp 634 ( 0.00%) 106984 ( 0.00%) 168.74
napster 25 ( 0.00%) 1712 ( 0.00%) 68.48
realaud 13 ( 0.00%) 812 ( 0.00%) 62.46
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 1063 ( 0.01%) 578037 ( 0.00%) 543.78
hotline 17 ( 0.00%) 1066 ( 0.00%) 62.71
other 5251522 ( 26.62%) 3423639508 ( 23.41%) 651.93
udp 3103819 ( 15.73%) 1522883455 ( 10.41%) 490.65
dns 225343 ( 1.14%) 48882854 ( 0.33%) 216.93
realaud 6 ( 0.00%) 920 ( 0.00%) 153.33
halflif 31 ( 0.00%) 4141 ( 0.00%) 133.58
starcra 27 ( 0.00%) 4333 ( 0.00%) 160.48
everque 280 ( 0.00%) 64736 ( 0.00%) 231.20
unreal 149 ( 0.00%) 62372 ( 0.00%) 418.60
quake 7 ( 0.00%) 849 ( 0.00%) 121.29
cuseeme 3 ( 0.00%) 547 ( 0.00%) 182.33
other 2722300 ( 13.80%) 1464416826 ( 10.01%) 537.93
icmp 1760956 ( 8.93%) 201524206 ( 1.38%) 114.44
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 7498 ( 0.04%) 2940924 ( 0.02%) 392.23
ip6 1136869 ( 5.76%) 1020792668 ( 6.98%) 897.90
pim 203 ( 0.00%) 12180 ( 0.00%) 60.00
other 16703 ( 0.08%) 2678212 ( 0.02%) 160.34
frag 346190 ( 1.75%) 263995321 ( 1.80%) 762.57
ip6 82201 ( 0.42%) 28004846 ( 0.19%) 340.69
tcp6 27305 ( 0.14%) 17984640 ( 0.12%) 658.66
http(s) 2190 ( 0.01%) 2163054 ( 0.01%) 987.70
http(c) 9820 ( 0.05%) 899226 ( 0.01%) 91.57
smtp 1088 ( 0.01%) 398279 ( 0.00%) 366.07
dns 59 ( 0.00%) 12619 ( 0.00%) 213.88
bgp 93 ( 0.00%) 17230 ( 0.00%) 185.27
other 14055 ( 0.07%) 14494232 ( 0.10%) 1031.25
udp6 32031 ( 0.16%) 6798549 ( 0.05%) 212.25
dns 30612 ( 0.16%) 6601819 ( 0.05%) 215.66
halflif 1 ( 0.00%) 114 ( 0.00%) 114.00
other 1418 ( 0.01%) 196616 ( 0.00%) 138.66
icmp6 22456 ( 0.11%) 2909274 ( 0.02%) 129.55
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 297 ( 0.00%) 297127 ( 0.00%) 1000.43
tcpdump file: 201203310645.dump.gz (451.68 MB)