Traffic Trace Info
DumpFile: 201203310700.dump
FileSize: 1695.18MB
Id: 201203310700
StartTime: Sat Mar 31 07:00:00 2012
EndTime: Sat Mar 31 07:15:00 2012
TotalTime: 899.81 seconds
TotalCapSize: 1331.91MB CapLen: 96 bytes
# of packets: 23806948 (16025.39MB)
AvgRate: 149.38Mbps stddev:32.90M
IP flow (unique src/dst pair) Information
# of flows: 2013496 (avg. 11.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 4.3% 3.9% 3.3% 2.8% 2.7% 2.1% 2.0% 2.0% 1.8%
IP address Information
# of IPv4 addresses: 1466638
Top 10 bandwidth usage (bytes/total in %):
21.7% 15.6% 8.4% 5.5% 5.1% 4.8% 4.3% 4.3% 4.1% 3.7%
# of IPv6 addresses: 4782
Top 10 bandwidth usage (bytes/total in %):
98.5% 97.7% 0.7% 0.3% 0.3% 0.3% 0.2% 0.2% 0.1% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310700.pktlen.png)
detailed numbers
[ 32- 63]: 6114605
[ 64- 127]: 5148671
[ 128- 255]: 1113094
[ 256- 511]: 476819
[ 512- 1023]: 556609
[ 1024- 2047]: 10397150
Protocol Breakdown
![[protocol breakdown chart]](201203310700.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23806948 (100.00%) 16803839840 (100.00%) 705.84
ip 22877618 ( 96.10%) 15504711631 ( 92.27%) 677.72
tcp 15320745 ( 64.35%) 12227643968 ( 72.77%) 798.11
http(s) 5854854 ( 24.59%) 7648380249 ( 45.52%) 1306.33
http(c) 2096291 ( 8.81%) 206469602 ( 1.23%) 98.49
squid 34244 ( 0.14%) 21642590 ( 0.13%) 632.01
smtp 30496 ( 0.13%) 5659352 ( 0.03%) 185.58
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 2170 ( 0.01%) 199331 ( 0.00%) 91.86
pop3 4588 ( 0.02%) 2680071 ( 0.02%) 584.15
imap 1269 ( 0.01%) 287732 ( 0.00%) 226.74
telnet 1386 ( 0.01%) 93694 ( 0.00%) 67.60
ssh 536279 ( 2.25%) 76858546 ( 0.46%) 143.32
dns 2415 ( 0.01%) 286542 ( 0.00%) 118.65
bgp 651 ( 0.00%) 133077 ( 0.00%) 204.42
napster 68 ( 0.00%) 5932 ( 0.00%) 87.24
realaud 35 ( 0.00%) 2969 ( 0.00%) 84.83
icecast 473 ( 0.00%) 112039 ( 0.00%) 236.87
hotline 57 ( 0.00%) 4327 ( 0.00%) 75.91
other 6755456 ( 28.38%) 4264827107 ( 25.38%) 631.32
udp 4363114 ( 18.33%) 2204722170 ( 13.12%) 505.31
dns 270753 ( 1.14%) 55745321 ( 0.33%) 205.89
realaud 14 ( 0.00%) 2378 ( 0.00%) 169.86
halflif 34 ( 0.00%) 5467 ( 0.00%) 160.79
starcra 41 ( 0.00%) 5549 ( 0.00%) 135.34
everque 209 ( 0.00%) 46262 ( 0.00%) 221.35
unreal 230 ( 0.00%) 73754 ( 0.00%) 320.67
quake 2 ( 0.00%) 378 ( 0.00%) 189.00
cuseeme 2 ( 0.00%) 163 ( 0.00%) 81.50
other 3423053 ( 14.38%) 2108672767 ( 12.55%) 616.02
icmp 1734995 ( 7.29%) 194145893 ( 1.16%) 111.90
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 22380 ( 0.09%) 12339800 ( 0.07%) 551.38
ip6 1418206 ( 5.96%) 861079452 ( 5.12%) 607.16
pim 250 ( 0.00%) 15000 ( 0.00%) 60.00
other 17744 ( 0.07%) 4746188 ( 0.03%) 267.48
frag 1471971 ( 6.18%) 1123209133 ( 6.68%) 763.06
ip6 929330 ( 3.90%) 1299128209 ( 7.73%) 1397.92
tcp6 867617 ( 3.64%) 1287172899 ( 7.66%) 1483.57
http(s) 1631 ( 0.01%) 1307751 ( 0.01%) 801.81
http(c) 9748 ( 0.04%) 898626 ( 0.01%) 92.19
smtp 2248 ( 0.01%) 916710 ( 0.01%) 407.79
dns 331 ( 0.00%) 134269 ( 0.00%) 405.65
bgp 93 ( 0.00%) 16824 ( 0.00%) 180.90
other 853566 ( 3.59%) 1283898719 ( 7.64%) 1504.16
udp6 36303 ( 0.15%) 8020173 ( 0.05%) 220.92
dns 34908 ( 0.15%) 7825770 ( 0.05%) 224.18
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 3 ( 0.00%) 328 ( 0.00%) 109.33
quake 2 ( 0.00%) 221 ( 0.00%) 110.50
other 1389 ( 0.01%) 193748 ( 0.00%) 139.49
icmp6 24614 ( 0.10%) 3202528 ( 0.02%) 130.11
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 680 ( 0.00%) 716881 ( 0.00%) 1054.24
tcpdump file: 201203310700.dump.gz (533.59 MB)