Traffic Trace Info
DumpFile: 201203310830.dump
FileSize: 1885.07MB
Id: 201203310830
StartTime: Sat Mar 31 08:30:00 2012
EndTime: Sat Mar 31 08:45:00 2012
TotalTime: 900.22 seconds
TotalCapSize: 1489.52MB CapLen: 96 bytes
# of packets: 25922484 (18896.15MB)
AvgRate: 176.13Mbps stddev:42.43M
IP flow (unique src/dst pair) Information
# of flows: 2111062 (avg. 12.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.3% 7.1% 3.2% 3.0% 2.6% 2.2% 1.8% 1.6% 1.5% 1.5%
IP address Information
# of IPv4 addresses: 1486993
Top 10 bandwidth usage (bytes/total in %):
14.7% 13.7% 11.0% 9.0% 7.7% 5.8% 5.0% 4.6% 3.6% 3.4%
# of IPv6 addresses: 4527
Top 10 bandwidth usage (bytes/total in %):
95.7% 95.4% 2.1% 2.1% 0.6% 0.6% 0.4% 0.4% 0.2% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310830.pktlen.png)
detailed numbers
[ 32- 63]: 5574247
[ 64- 127]: 6021037
[ 128- 255]: 879004
[ 256- 511]: 402214
[ 512- 1023]: 602929
[ 1024- 2047]: 12443053
Protocol Breakdown
![[protocol breakdown chart]](201203310830.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25922484 (100.00%) 19814050252 (100.00%) 764.36
ip 24873228 ( 95.95%) 18341980697 ( 92.57%) 737.42
tcp 18611810 ( 71.80%) 15952744177 ( 80.51%) 857.13
http(s) 6917853 ( 26.69%) 9122116563 ( 46.04%) 1318.63
http(c) 3157828 ( 12.18%) 276578870 ( 1.40%) 87.59
squid 97402 ( 0.38%) 40660202 ( 0.21%) 417.45
smtp 27827 ( 0.11%) 4485534 ( 0.02%) 161.19
ftp 6766 ( 0.03%) 626272 ( 0.00%) 92.56
pop3 2099 ( 0.01%) 633709 ( 0.00%) 301.91
imap 7587 ( 0.03%) 7746736 ( 0.04%) 1021.05
telnet 1853 ( 0.01%) 130414 ( 0.00%) 70.38
ssh 605113 ( 2.33%) 89140272 ( 0.45%) 147.31
dns 2135 ( 0.01%) 258956 ( 0.00%) 121.29
bgp 616 ( 0.00%) 105143 ( 0.00%) 170.69
napster 23 ( 0.00%) 1466 ( 0.00%) 63.74
realaud 126 ( 0.00%) 10179 ( 0.00%) 80.79
rtsp 3 ( 0.00%) 180 ( 0.00%) 60.00
icecast 1647 ( 0.01%) 758177 ( 0.00%) 460.34
hotline 11 ( 0.00%) 682 ( 0.00%) 62.00
other 7782917 ( 30.02%) 6409490468 ( 32.35%) 823.53
udp 2890913 ( 11.15%) 1196665361 ( 6.04%) 413.94
dns 266328 ( 1.03%) 60687801 ( 0.31%) 227.87
halflif 233 ( 0.00%) 46027 ( 0.00%) 197.54
starcra 43 ( 0.00%) 3522 ( 0.00%) 81.91
everque 190 ( 0.00%) 44383 ( 0.00%) 233.59
unreal 81 ( 0.00%) 27859 ( 0.00%) 343.94
quake 13 ( 0.00%) 1420 ( 0.00%) 109.23
cuseeme 2 ( 0.00%) 167 ( 0.00%) 83.50
other 2517463 ( 9.71%) 1126575265 ( 5.69%) 447.50
icmp 1692016 ( 6.53%) 180718931 ( 0.91%) 106.81
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 13465 ( 0.05%) 7693926 ( 0.04%) 571.40
ip6 1646828 ( 6.35%) 1001240661 ( 5.05%) 607.98
pim 211 ( 0.00%) 12660 ( 0.00%) 60.00
other 17800 ( 0.07%) 2885711 ( 0.01%) 162.12
frag 226303 ( 0.87%) 172707980 ( 0.87%) 763.17
ip6 1049256 ( 4.05%) 1472069555 ( 7.43%) 1402.97
tcp6 986074 ( 3.80%) 1458612887 ( 7.36%) 1479.21
http(s) 10118 ( 0.04%) 13581182 ( 0.07%) 1342.28
http(c) 17526 ( 0.07%) 1564426 ( 0.01%) 89.26
smtp 830 ( 0.00%) 299128 ( 0.00%) 360.40
ftp 36 ( 0.00%) 3616 ( 0.00%) 100.44
dns 271 ( 0.00%) 62309 ( 0.00%) 229.92
bgp 91 ( 0.00%) 16286 ( 0.00%) 178.97
other 957202 ( 3.69%) 1443085940 ( 7.28%) 1507.61
udp6 39280 ( 0.15%) 9796907 ( 0.05%) 249.41
dns 36407 ( 0.14%) 8056242 ( 0.04%) 221.28
everque 1 ( 0.00%) 99 ( 0.00%) 99.00
unreal 1 ( 0.00%) 101 ( 0.00%) 101.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 2870 ( 0.01%) 1740359 ( 0.01%) 606.40
icmp6 23324 ( 0.09%) 3154555 ( 0.02%) 135.25
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 464 ( 0.00%) 489696 ( 0.00%) 1055.38
tcpdump file: 201203310830.dump.gz (584.34 MB)