Traffic Trace Info
DumpFile: 201203310900.dump
FileSize: 1645.09MB
Id: 201203310900
StartTime: Sat Mar 31 09:00:00 2012
EndTime: Sat Mar 31 09:15:00 2012
TotalTime: 899.84 seconds
TotalCapSize: 1293.61MB CapLen: 96 bytes
# of packets: 23033512 (16332.70MB)
AvgRate: 152.25Mbps stddev:38.65M
IP flow (unique src/dst pair) Information
# of flows: 1829729 (avg. 12.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.0% 4.3% 4.2% 3.5% 2.4% 2.4% 2.1% 2.0% 1.5% 1.3%
IP address Information
# of IPv4 addresses: 1415559
Top 10 bandwidth usage (bytes/total in %):
13.3% 12.1% 8.7% 7.7% 6.2% 5.9% 5.8% 5.2% 4.5% 4.4%
# of IPv6 addresses: 4705
Top 10 bandwidth usage (bytes/total in %):
21.3% 20.5% 19.3% 18.3% 15.1% 10.4% 10.1% 9.1% 4.4% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310900.pktlen.png)
detailed numbers
[ 32- 63]: 5090416
[ 64- 127]: 5242276
[ 128- 255]: 926070
[ 256- 511]: 433880
[ 512- 1023]: 651693
[ 1024- 2047]: 10689177
Protocol Breakdown
![[protocol breakdown chart]](201203310900.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 23033512 (100.00%) 17126082326 (100.00%) 743.53
ip 22918527 ( 99.50%) 17081902752 ( 99.74%) 745.33
tcp 17053624 ( 74.04%) 14687926664 ( 85.76%) 861.28
http(s) 7822929 ( 33.96%) 10492808712 ( 61.27%) 1341.29
http(c) 3217329 ( 13.97%) 294235455 ( 1.72%) 91.45
squid 31149 ( 0.14%) 21902726 ( 0.13%) 703.16
smtp 31146 ( 0.14%) 6758358 ( 0.04%) 216.99
ftp 5240 ( 0.02%) 501731 ( 0.00%) 95.75
pop3 1582 ( 0.01%) 368840 ( 0.00%) 233.15
imap 1108 ( 0.00%) 107259 ( 0.00%) 96.80
telnet 1911 ( 0.01%) 129258 ( 0.00%) 67.64
ssh 117952 ( 0.51%) 20356025 ( 0.12%) 172.58
dns 2499 ( 0.01%) 301107 ( 0.00%) 120.49
bgp 637 ( 0.00%) 105861 ( 0.00%) 166.19
napster 51 ( 0.00%) 3334 ( 0.00%) 65.37
realaud 34 ( 0.00%) 2936 ( 0.00%) 86.35
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 5037 ( 0.02%) 3163665 ( 0.02%) 628.09
hotline 99 ( 0.00%) 7005 ( 0.00%) 70.76
other 5814919 ( 25.25%) 3847174272 ( 22.46%) 661.60
udp 2865848 ( 12.44%) 1114143468 ( 6.51%) 388.77
dns 359530 ( 1.56%) 95775550 ( 0.56%) 266.39
realaud 7 ( 0.00%) 630 ( 0.00%) 90.00
halflif 255 ( 0.00%) 58462 ( 0.00%) 229.26
starcra 27 ( 0.00%) 2764 ( 0.00%) 102.37
everque 278 ( 0.00%) 66302 ( 0.00%) 238.50
unreal 41 ( 0.00%) 5811 ( 0.00%) 141.73
quake 1 ( 0.00%) 90 ( 0.00%) 90.00
other 2422408 ( 10.52%) 1012978574 ( 5.91%) 418.17
icmp 1642554 ( 7.13%) 172829204 ( 1.01%) 105.22
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 1971 ( 0.01%) 575506 ( 0.00%) 291.99
ip6 1342512 ( 5.83%) 1104567664 ( 6.45%) 822.76
pim 216 ( 0.00%) 12960 ( 0.00%) 60.00
other 11618 ( 0.05%) 1828126 ( 0.01%) 157.35
frag 169280 ( 0.73%) 128523410 ( 0.75%) 759.24
ip6 114985 ( 0.50%) 44179574 ( 0.26%) 384.22
tcp6 38314 ( 0.17%) 24010241 ( 0.14%) 626.67
http(s) 3644 ( 0.02%) 3249911 ( 0.02%) 891.85
http(c) 12091 ( 0.05%) 1000890 ( 0.01%) 82.78
smtp 426 ( 0.00%) 156369 ( 0.00%) 367.06
dns 259 ( 0.00%) 50940 ( 0.00%) 196.68
bgp 89 ( 0.00%) 16756 ( 0.00%) 188.27
other 21805 ( 0.09%) 19535375 ( 0.11%) 895.91
udp6 52292 ( 0.23%) 16642176 ( 0.10%) 318.25
dns 41528 ( 0.18%) 9072611 ( 0.05%) 218.47
realaud 2 ( 0.00%) 214 ( 0.00%) 107.00
halflif 2 ( 0.00%) 230 ( 0.00%) 115.00
everque 2 ( 0.00%) 216 ( 0.00%) 108.00
unreal 1 ( 0.00%) 104 ( 0.00%) 104.00
quake 1 ( 0.00%) 118 ( 0.00%) 118.00
other 10756 ( 0.05%) 7568683 ( 0.04%) 703.67
icmp6 24012 ( 0.10%) 3257144 ( 0.02%) 135.65
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 253 ( 0.00%) 254503 ( 0.00%) 1005.94
tcpdump file: 201203310900.dump.gz (526.92 MB)