Traffic Trace Info
DumpFile: 201203310745.dump
FileSize: 1779.21MB
Id: 201203310745
StartTime: Sat Mar 31 07:45:00 2012
EndTime: Sat Mar 31 08:00:01 2012
TotalTime: 900.19 seconds
TotalCapSize: 1404.69MB CapLen: 96 bytes
# of packets: 24544560 (17298.19MB)
AvgRate: 161.20Mbps stddev:34.57M
IP flow (unique src/dst pair) Information
# of flows: 1967251 (avg. 12.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 6.4% 3.1% 2.5% 2.3% 1.6% 1.6% 1.4% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 1477539
Top 10 bandwidth usage (bytes/total in %):
16.5% 10.2% 9.9% 8.6% 8.2% 7.0% 5.9% 5.2% 4.9% 3.4%
# of IPv6 addresses: 4599
Top 10 bandwidth usage (bytes/total in %):
97.9% 90.8% 6.2% 0.6% 0.5% 0.5% 0.4% 0.3% 0.3% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310745.pktlen.png)
detailed numbers
[ 32- 63]: 5390297
[ 64- 127]: 5776781
[ 128- 255]: 1015255
[ 256- 511]: 391838
[ 512- 1023]: 553026
[ 1024- 2047]: 11417363
Protocol Breakdown
![[protocol breakdown chart]](201203310745.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24544560 (100.00%) 18138461929 (100.00%) 739.00
ip 23626137 ( 96.26%) 16866682344 ( 92.99%) 713.90
tcp 16165409 ( 65.86%) 13218333942 ( 72.87%) 817.69
http(s) 6181713 ( 25.19%) 8296042025 ( 45.74%) 1342.03
http(c) 2653686 ( 10.81%) 241514031 ( 1.33%) 91.01
squid 22328 ( 0.09%) 9313490 ( 0.05%) 417.12
smtp 55104 ( 0.22%) 29830281 ( 0.16%) 541.35
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 3931 ( 0.02%) 381025 ( 0.00%) 96.93
pop3 1367 ( 0.01%) 296724 ( 0.00%) 217.06
imap 860 ( 0.00%) 84951 ( 0.00%) 98.78
telnet 604 ( 0.00%) 43058 ( 0.00%) 71.29
ssh 379395 ( 1.55%) 48608165 ( 0.27%) 128.12
dns 2059 ( 0.01%) 250951 ( 0.00%) 121.88
bgp 614 ( 0.00%) 102617 ( 0.00%) 167.13
napster 51 ( 0.00%) 3244 ( 0.00%) 63.61
realaud 11 ( 0.00%) 724 ( 0.00%) 65.82
rtsp 6 ( 0.00%) 360 ( 0.00%) 60.00
icecast 383 ( 0.00%) 68099 ( 0.00%) 177.80
hotline 14 ( 0.00%) 910 ( 0.00%) 65.00
other 6863275 ( 27.96%) 4591792793 ( 25.32%) 669.04
udp 3600397 ( 14.67%) 1941099306 ( 10.70%) 539.13
dns 233850 ( 0.95%) 51876665 ( 0.29%) 221.84
realaud 17 ( 0.00%) 1770 ( 0.00%) 104.12
halflif 16 ( 0.00%) 1825 ( 0.00%) 114.06
starcra 35 ( 0.00%) 4591 ( 0.00%) 131.17
everque 218 ( 0.00%) 49407 ( 0.00%) 226.64
unreal 60 ( 0.00%) 24727 ( 0.00%) 412.12
quake 33 ( 0.00%) 3448 ( 0.00%) 104.48
other 3214038 ( 13.09%) 1879229671 ( 10.36%) 584.69
icmp 1727657 ( 7.04%) 183990214 ( 1.01%) 106.50
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 9418 ( 0.04%) 5094796 ( 0.03%) 540.96
ip6 2106652 ( 8.58%) 1515434437 ( 8.35%) 719.36
pim 281 ( 0.00%) 16860 ( 0.00%) 60.00
other 16139 ( 0.07%) 2693629 ( 0.01%) 166.90
frag 467781 ( 1.91%) 356971660 ( 1.97%) 763.12
ip6 918423 ( 3.74%) 1271779585 ( 7.01%) 1384.74
tcp6 859193 ( 3.50%) 1260744616 ( 6.95%) 1467.36
http(s) 13580 ( 0.06%) 13335874 ( 0.07%) 982.02
http(c) 8394 ( 0.03%) 753636 ( 0.00%) 89.78
smtp 442 ( 0.00%) 154972 ( 0.00%) 350.62
dns 150 ( 0.00%) 25071 ( 0.00%) 167.14
bgp 89 ( 0.00%) 17265 ( 0.00%) 193.99
other 836538 ( 3.41%) 1246457798 ( 6.87%) 1490.02
udp6 34447 ( 0.14%) 7347950 ( 0.04%) 213.31
dns 32671 ( 0.13%) 7102150 ( 0.04%) 217.38
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 1775 ( 0.01%) 245692 ( 0.00%) 138.42
icmp6 24172 ( 0.10%) 3169815 ( 0.02%) 131.14
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 499 ( 0.00%) 501948 ( 0.00%) 1005.91
tcpdump file: 201203310745.dump.gz (547.42 MB)