Traffic Trace Info
DumpFile: 201203310845.dump
FileSize: 1686.40MB
Id: 201203310845
StartTime: Sat Mar 31 08:45:00 2012
EndTime: Sat Mar 31 09:00:00 2012
TotalTime: 900.14 seconds
TotalCapSize: 1326.92MB CapLen: 96 bytes
# of packets: 23558525 (17053.25MB)
AvgRate: 158.96Mbps stddev:33.46M
IP flow (unique src/dst pair) Information
# of flows: 1820925 (avg. 12.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.8% 6.5% 4.4% 3.3% 2.5% 2.5% 2.0% 1.6% 1.5% 1.5%
IP address Information
# of IPv4 addresses: 1414665
Top 10 bandwidth usage (bytes/total in %):
13.8% 12.4% 8.0% 7.8% 7.8% 6.7% 6.7% 6.1% 5.5% 5.4%
# of IPv6 addresses: 4521
Top 10 bandwidth usage (bytes/total in %):
41.2% 26.1% 24.9% 21.8% 18.0% 7.3% 7.3% 4.6% 4.3% 2.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310845.pktlen.png)
detailed numbers
[ 32- 63]: 4815858
[ 64- 127]: 5577478
[ 128- 255]: 902264
[ 256- 511]: 414326
[ 512- 1023]: 613320
[ 1024- 2047]: 11235279
Protocol Breakdown
![[protocol breakdown chart]](201203310845.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23558525 (100.00%) 17881632463 (100.00%) 759.03
ip 23420434 ( 99.41%) 17807367621 ( 99.58%) 760.33
tcp 17381064 ( 73.78%) 15293740320 ( 85.53%) 879.91
http(s) 6597818 ( 28.01%) 8717455091 ( 48.75%) 1321.26
http(c) 2883606 ( 12.24%) 265545241 ( 1.49%) 92.09
squid 55862 ( 0.24%) 26592939 ( 0.15%) 476.05
smtp 33547 ( 0.14%) 4888666 ( 0.03%) 145.73
ftp 5707 ( 0.02%) 563263 ( 0.00%) 98.70
pop3 1658 ( 0.01%) 381999 ( 0.00%) 230.40
imap 2231 ( 0.01%) 570969 ( 0.00%) 255.93
telnet 2063 ( 0.01%) 141065 ( 0.00%) 68.38
ssh 225504 ( 0.96%) 39347198 ( 0.22%) 174.49
dns 2183 ( 0.01%) 272060 ( 0.00%) 124.63
bgp 632 ( 0.00%) 104725 ( 0.00%) 165.70
napster 27 ( 0.00%) 1864 ( 0.00%) 69.04
realaud 19 ( 0.00%) 1190 ( 0.00%) 62.63
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 4965 ( 0.02%) 3111756 ( 0.02%) 626.74
hotline 22 ( 0.00%) 1398 ( 0.00%) 63.55
other 7565216 ( 32.11%) 6234760618 ( 34.87%) 824.14
udp 3110968 ( 13.21%) 1346655570 ( 7.53%) 432.87
dns 273751 ( 1.16%) 70172952 ( 0.39%) 256.34
realaud 2 ( 0.00%) 186 ( 0.00%) 93.00
halflif 247 ( 0.00%) 51854 ( 0.00%) 209.94
starcra 32 ( 0.00%) 4301 ( 0.00%) 134.41
everque 229 ( 0.00%) 71354 ( 0.00%) 311.59
unreal 57 ( 0.00%) 27193 ( 0.00%) 477.07
quake 18 ( 0.00%) 4893 ( 0.00%) 271.83
other 2662224 ( 11.30%) 1263852328 ( 7.07%) 474.74
icmp 1671035 ( 7.09%) 177300651 ( 0.99%) 106.10
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2264 ( 0.01%) 754976 ( 0.00%) 333.47
ip6 1234639 ( 5.24%) 985886832 ( 5.51%) 798.52
pim 250 ( 0.00%) 15000 ( 0.00%) 60.00
other 20029 ( 0.09%) 2995002 ( 0.02%) 149.53
frag 377260 ( 1.60%) 289020799 ( 1.62%) 766.11
ip6 138091 ( 0.59%) 74264842 ( 0.42%) 537.80
tcp6 55972 ( 0.24%) 44112090 ( 0.25%) 788.11
http(s) 11820 ( 0.05%) 15899913 ( 0.09%) 1345.17
http(c) 16010 ( 0.07%) 1425829 ( 0.01%) 89.06
smtp 240 ( 0.00%) 181696 ( 0.00%) 757.07
dns 86 ( 0.00%) 21963 ( 0.00%) 255.38
bgp 98 ( 0.00%) 21796 ( 0.00%) 222.41
other 27718 ( 0.12%) 26560893 ( 0.15%) 958.25
udp6 57239 ( 0.24%) 26103806 ( 0.15%) 456.05
dns 35414 ( 0.15%) 7940134 ( 0.04%) 224.21
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 2 ( 0.00%) 205 ( 0.00%) 102.50
other 21822 ( 0.09%) 18163361 ( 0.10%) 832.34
icmp6 24020 ( 0.10%) 3225263 ( 0.02%) 134.27
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 745 ( 0.00%) 808023 ( 0.00%) 1084.59
tcpdump file: 201203310845.dump.gz (535.70 MB)