Traffic Trace Info
DumpFile: 201203310815.dump
FileSize: 1817.98MB
Id: 201203310815
StartTime: Sat Mar 31 08:15:00 2012
EndTime: Sat Mar 31 08:30:00 2012
TotalTime: 900.16 seconds
TotalCapSize: 1431.99MB CapLen: 96 bytes
# of packets: 25295610 (19529.97MB)
AvgRate: 182.02Mbps stddev:39.09M
IP flow (unique src/dst pair) Information
# of flows: 1894090 (avg. 13.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.3% 4.0% 3.0% 2.7% 2.6% 2.4% 2.2% 1.9% 1.9% 1.7%
IP address Information
# of IPv4 addresses: 1419216
Top 10 bandwidth usage (bytes/total in %):
20.4% 19.9% 13.5% 6.2% 4.8% 4.7% 4.4% 4.0% 3.1% 3.0%
# of IPv6 addresses: 4500
Top 10 bandwidth usage (bytes/total in %):
73.2% 71.1% 11.2% 11.2% 10.7% 8.5% 2.2% 1.8% 0.9% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310815.pktlen.png)
detailed numbers
[ 32- 63]: 4664869
[ 64- 127]: 5684569
[ 128- 255]: 911668
[ 256- 511]: 439748
[ 512- 1023]: 664238
[ 1024- 2047]: 12930518
Protocol Breakdown
![[protocol breakdown chart]](201203310815.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25295610 (100.00%) 20478657604 (100.00%) 809.57
ip 24969760 ( 98.71%) 20092330057 ( 98.11%) 804.67
tcp 19308467 ( 76.33%) 17828426136 ( 87.06%) 923.35
http(s) 6851530 ( 27.09%) 9223955923 ( 45.04%) 1346.26
http(c) 2499220 ( 9.88%) 232315527 ( 1.13%) 92.96
squid 95809 ( 0.38%) 67549393 ( 0.33%) 705.04
smtp 27762 ( 0.11%) 4131589 ( 0.02%) 148.82
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 5577 ( 0.02%) 520352 ( 0.00%) 93.30
pop3 1992 ( 0.01%) 729386 ( 0.00%) 366.16
imap 825 ( 0.00%) 75217 ( 0.00%) 91.17
telnet 527 ( 0.00%) 37646 ( 0.00%) 71.43
ssh 602997 ( 2.38%) 102113694 ( 0.50%) 169.34
dns 2307 ( 0.01%) 272658 ( 0.00%) 118.19
bgp 632 ( 0.00%) 104971 ( 0.00%) 166.09
napster 113 ( 0.00%) 8433 ( 0.00%) 74.63
realaud 19 ( 0.00%) 1545 ( 0.00%) 81.32
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 466 ( 0.00%) 65861 ( 0.00%) 141.33
hotline 28 ( 0.00%) 1744 ( 0.00%) 62.29
other 9218649 ( 36.44%) 8196541329 ( 40.02%) 889.13
udp 2776221 ( 10.98%) 1147655681 ( 5.60%) 413.39
dns 256537 ( 1.01%) 55815816 ( 0.27%) 217.57
realaud 4 ( 0.00%) 344 ( 0.00%) 86.00
halflif 222 ( 0.00%) 43974 ( 0.00%) 198.08
starcra 54 ( 0.00%) 4988 ( 0.00%) 92.37
everque 229 ( 0.00%) 65981 ( 0.00%) 288.13
unreal 48 ( 0.00%) 12623 ( 0.00%) 262.98
quake 19 ( 0.00%) 2571 ( 0.00%) 135.32
other 2496596 ( 9.87%) 1090195589 ( 5.32%) 436.67
icmp 1692878 ( 6.69%) 180268658 ( 0.88%) 106.49
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3189 ( 0.01%) 1393870 ( 0.01%) 437.09
ip6 1171192 ( 4.63%) 929482370 ( 4.54%) 793.62
pim 237 ( 0.00%) 14220 ( 0.00%) 60.00
other 17391 ( 0.07%) 5069852 ( 0.02%) 291.52
frag 49908 ( 0.20%) 38316685 ( 0.19%) 767.75
ip6 325848 ( 1.29%) 386327427 ( 1.89%) 1185.61
tcp6 264743 ( 1.05%) 374319086 ( 1.83%) 1413.90
http(s) 4545 ( 0.02%) 5187975 ( 0.03%) 1141.47
http(c) 9077 ( 0.04%) 806483 ( 0.00%) 88.85
smtp 449 ( 0.00%) 199939 ( 0.00%) 445.30
dns 282 ( 0.00%) 168026 ( 0.00%) 595.84
bgp 90 ( 0.00%) 15757 ( 0.00%) 175.08
other 250300 ( 0.99%) 367940906 ( 1.80%) 1470.00
udp6 36534 ( 0.14%) 7747006 ( 0.04%) 212.05
dns 34862 ( 0.14%) 7514527 ( 0.04%) 215.55
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
halflif 1 ( 0.00%) 99 ( 0.00%) 99.00
starcra 1 ( 0.00%) 108 ( 0.00%) 108.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 2 ( 0.00%) 216 ( 0.00%) 108.00
cuseeme 1 ( 0.00%) 102 ( 0.00%) 102.00
other 1665 ( 0.01%) 231739 ( 0.00%) 139.18
icmp6 23512 ( 0.09%) 3211537 ( 0.02%) 136.59
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 945 ( 0.00%) 1034306 ( 0.01%) 1094.50
tcpdump file: 201203310815.dump.gz (573.18 MB)