Traffic Trace Info
DumpFile: 201203310800.dump
FileSize: 1725.77MB
Id: 201203310800
StartTime: Sat Mar 31 08:00:01 2012
EndTime: Sat Mar 31 08:15:00 2012
TotalTime: 899.17 seconds
TotalCapSize: 1353.53MB CapLen: 96 bytes
# of packets: 24394867 (17657.75MB)
AvgRate: 164.71Mbps stddev:30.36M
IP flow (unique src/dst pair) Information
# of flows: 1906509 (avg. 12.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.7% 4.3% 3.1% 2.7% 2.3% 2.2% 1.7% 1.7% 1.7% 1.3%
IP address Information
# of IPv4 addresses: 1417806
Top 10 bandwidth usage (bytes/total in %):
20.1% 16.7% 13.9% 8.8% 5.2% 4.9% 4.8% 4.4% 3.3% 3.2%
# of IPv6 addresses: 4627
Top 10 bandwidth usage (bytes/total in %):
82.6% 78.8% 7.4% 7.2% 3.6% 3.1% 2.9% 1.5% 1.4% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310800.pktlen.png)
detailed numbers
[ 32- 63]: 4909618
[ 64- 127]: 5841974
[ 128- 255]: 970360
[ 256- 511]: 414752
[ 512- 1023]: 623063
[ 1024- 2047]: 11635100
Protocol Breakdown
![[protocol breakdown chart]](201203310800.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24394867 (100.00%) 18515497195 (100.00%) 758.99
ip 24131111 ( 98.92%) 18236503319 ( 98.49%) 755.73
tcp 17610877 ( 72.19%) 15371224826 ( 83.02%) 872.83
http(s) 6121214 ( 25.09%) 8295025780 ( 44.80%) 1355.13
http(c) 2963641 ( 12.15%) 263551905 ( 1.42%) 88.93
squid 60018 ( 0.25%) 33254866 ( 0.18%) 554.08
smtp 47267 ( 0.19%) 23482711 ( 0.13%) 496.81
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 6317 ( 0.03%) 624434 ( 0.00%) 98.85
pop3 1427 ( 0.01%) 317371 ( 0.00%) 222.40
imap 1379 ( 0.01%) 207691 ( 0.00%) 150.61
telnet 10836 ( 0.04%) 800520 ( 0.00%) 73.88
ssh 675688 ( 2.77%) 109475335 ( 0.59%) 162.02
dns 2307 ( 0.01%) 287056 ( 0.00%) 124.43
bgp 654 ( 0.00%) 112128 ( 0.00%) 171.45
napster 88 ( 0.00%) 6525 ( 0.00%) 74.15
realaud 20 ( 0.00%) 2033 ( 0.00%) 101.65
icecast 465 ( 0.00%) 107725 ( 0.00%) 231.67
hotline 28 ( 0.00%) 2155 ( 0.00%) 76.96
other 7719521 ( 31.64%) 6643966157 ( 35.88%) 860.67
udp 3623576 ( 14.85%) 1694243827 ( 9.15%) 467.56
dns 270865 ( 1.11%) 57147542 ( 0.31%) 210.98
realaud 14 ( 0.00%) 1783 ( 0.00%) 127.36
halflif 42 ( 0.00%) 5426 ( 0.00%) 129.19
starcra 48 ( 0.00%) 6349 ( 0.00%) 132.27
everque 233 ( 0.00%) 67662 ( 0.00%) 290.39
unreal 35 ( 0.00%) 5253 ( 0.00%) 150.09
quake 24 ( 0.00%) 2934 ( 0.00%) 122.25
other 3040665 ( 12.46%) 1616129614 ( 8.73%) 531.51
icmp 1661595 ( 6.81%) 178990206 ( 0.97%) 107.72
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 12530 ( 0.05%) 6131996 ( 0.03%) 489.39
ip6 1205470 ( 4.94%) 983193215 ( 5.31%) 815.61
pim 267 ( 0.00%) 16020 ( 0.00%) 60.00
other 16611 ( 0.07%) 2683959 ( 0.01%) 161.58
frag 781531 ( 3.20%) 592965617 ( 3.20%) 758.72
ip6 263756 ( 1.08%) 278993876 ( 1.51%) 1057.77
tcp6 202755 ( 0.83%) 267122700 ( 1.44%) 1317.47
http(s) 4684 ( 0.02%) 5936137 ( 0.03%) 1267.32
http(c) 16765 ( 0.07%) 1510189 ( 0.01%) 90.08
smtp 452 ( 0.00%) 162488 ( 0.00%) 359.49
dns 281 ( 0.00%) 66374 ( 0.00%) 236.21
bgp 86 ( 0.00%) 15074 ( 0.00%) 175.28
other 180487 ( 0.74%) 259432438 ( 1.40%) 1437.40
udp6 37037 ( 0.15%) 8190925 ( 0.04%) 221.16
dns 35553 ( 0.15%) 7972416 ( 0.04%) 224.24
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
unreal 1 ( 0.00%) 94 ( 0.00%) 94.00
other 1482 ( 0.01%) 218309 ( 0.00%) 147.31
icmp6 23324 ( 0.10%) 3114925 ( 0.02%) 133.55
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 524 ( 0.00%) 549530 ( 0.00%) 1048.72
tcpdump file: 201203310800.dump.gz (549.55 MB)