Traffic Trace Info
DumpFile: 201203310715.dump
FileSize: 1792.91MB
Id: 201203310715
StartTime: Sat Mar 31 07:15:00 2012
EndTime: Sat Mar 31 07:30:00 2012
TotalTime: 900.11 seconds
TotalCapSize: 1411.90MB CapLen: 96 bytes
# of packets: 24969986 (17147.01MB)
AvgRate: 159.78Mbps stddev:36.57M
IP flow (unique src/dst pair) Information
# of flows: 1945852 (avg. 12.83 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.1% 6.1% 3.1% 3.0% 2.1% 2.1% 2.0% 1.8% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 1440402
Top 10 bandwidth usage (bytes/total in %):
19.9% 15.3% 6.7% 6.7% 6.1% 4.9% 4.8% 3.6% 3.4% 3.4%
# of IPv6 addresses: 4672
Top 10 bandwidth usage (bytes/total in %):
95.0% 94.3% 3.2% 3.2% 0.6% 0.6% 0.5% 0.3% 0.2% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310715.pktlen.png)
detailed numbers
[ 32- 63]: 6016243
[ 64- 127]: 5760230
[ 128- 255]: 1006776
[ 256- 511]: 445504
[ 512- 1023]: 541282
[ 1024- 2047]: 11199951
Protocol Breakdown
![[protocol breakdown chart]](201203310715.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24969986 (100.00%) 17979943095 (100.00%) 720.06
ip 23995562 ( 96.10%) 16624828339 ( 92.46%) 692.83
tcp 16353158 ( 65.49%) 13225833238 ( 73.56%) 808.76
http(s) 5795136 ( 23.21%) 7791255027 ( 43.33%) 1344.45
http(c) 2179070 ( 8.73%) 211135045 ( 1.17%) 96.89
squid 48990 ( 0.20%) 31689024 ( 0.18%) 646.85
smtp 29063 ( 0.12%) 5956538 ( 0.03%) 204.95
ftp 2291 ( 0.01%) 228935 ( 0.00%) 99.93
pop3 1514 ( 0.01%) 338615 ( 0.00%) 223.66
imap 926 ( 0.00%) 164822 ( 0.00%) 177.99
telnet 1214 ( 0.00%) 81884 ( 0.00%) 67.45
ssh 561709 ( 2.25%) 82338085 ( 0.46%) 146.58
dns 2406 ( 0.01%) 293890 ( 0.00%) 122.15
bgp 635 ( 0.00%) 113992 ( 0.00%) 179.51
napster 32 ( 0.00%) 2090 ( 0.00%) 65.31
realaud 32 ( 0.00%) 2260 ( 0.00%) 70.62
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 553 ( 0.00%) 66796 ( 0.00%) 120.79
hotline 25 ( 0.00%) 1556 ( 0.00%) 62.24
other 7729559 ( 30.96%) 5102164499 ( 28.38%) 660.08
udp 4128165 ( 16.53%) 2091632456 ( 11.63%) 506.67
dns 256354 ( 1.03%) 54365027 ( 0.30%) 212.07
realaud 16 ( 0.00%) 1665 ( 0.00%) 104.06
halflif 42 ( 0.00%) 6790 ( 0.00%) 161.67
starcra 17 ( 0.00%) 1923 ( 0.00%) 113.12
everque 254 ( 0.00%) 73736 ( 0.00%) 290.30
unreal 136 ( 0.00%) 48856 ( 0.00%) 359.24
quake 2 ( 0.00%) 203 ( 0.00%) 101.50
cuseeme 2 ( 0.00%) 463 ( 0.00%) 231.50
other 3265774 ( 13.08%) 2000398473 ( 11.13%) 612.53
icmp 1796958 ( 7.20%) 197753978 ( 1.10%) 110.05
ipip 186 ( 0.00%) 19380 ( 0.00%) 104.19
ipsec 12483 ( 0.05%) 7321778 ( 0.04%) 586.54
ip6 1686762 ( 6.76%) 1097604487 ( 6.10%) 650.72
pim 264 ( 0.00%) 15840 ( 0.00%) 60.00
other 17586 ( 0.07%) 4647182 ( 0.03%) 264.25
frag 1305252 ( 5.23%) 995889700 ( 5.54%) 762.99
ip6 974424 ( 3.90%) 1355114756 ( 7.54%) 1390.68
tcp6 909821 ( 3.64%) 1343366196 ( 7.47%) 1476.52
http(s) 3220 ( 0.01%) 2758985 ( 0.02%) 856.83
http(c) 14910 ( 0.06%) 1294375 ( 0.01%) 86.81
smtp 807 ( 0.00%) 292601 ( 0.00%) 362.58
dns 76 ( 0.00%) 9099 ( 0.00%) 119.72
bgp 87 ( 0.00%) 14464 ( 0.00%) 166.25
other 890721 ( 3.57%) 1338996672 ( 7.45%) 1503.27
udp6 38327 ( 0.15%) 8118260 ( 0.05%) 211.82
dns 36024 ( 0.14%) 7850566 ( 0.04%) 217.93
realaud 2 ( 0.00%) 220 ( 0.00%) 110.00
halflif 2 ( 0.00%) 234 ( 0.00%) 117.00
quake 1 ( 0.00%) 115 ( 0.00%) 115.00
other 2298 ( 0.01%) 267125 ( 0.00%) 116.24
icmp6 25954 ( 0.10%) 3410077 ( 0.02%) 131.39
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 206 ( 0.00%) 204427 ( 0.00%) 992.36
tcpdump file: 201203310715.dump.gz (557.28 MB)