Traffic Trace Info
DumpFile: 201203310915.dump
FileSize: 1737.72MB
Id: 201203310915
StartTime: Sat Mar 31 09:15:00 2012
EndTime: Sat Mar 31 09:30:00 2012
TotalTime: 900.20 seconds
TotalCapSize: 1364.83MB CapLen: 96 bytes
# of packets: 24437457 (17527.28MB)
AvgRate: 163.32Mbps stddev:33.92M
IP flow (unique src/dst pair) Information
# of flows: 1722032 (avg. 14.19 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.6% 2.6% 2.0% 1.9% 1.8% 1.6% 1.4% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 1338429
Top 10 bandwidth usage (bytes/total in %):
13.1% 11.9% 7.4% 6.7% 6.1% 4.2% 3.7% 3.6% 3.3% 3.0%
# of IPv6 addresses: 4611
Top 10 bandwidth usage (bytes/total in %):
72.7% 72.7% 6.0% 4.3% 4.0% 3.7% 3.7% 3.6% 2.1% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310915.pktlen.png)
detailed numbers
[ 32- 63]: 5435231
[ 64- 127]: 5528858
[ 128- 255]: 875165
[ 256- 511]: 462217
[ 512- 1023]: 660653
[ 1024- 2047]: 11475333
Protocol Breakdown
![[protocol breakdown chart]](201203310915.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 24437457 (100.00%) 18378688773 (100.00%) 752.07
ip 24217063 ( 99.10%) 18191094418 ( 98.98%) 751.17
tcp 17336382 ( 70.94%) 15079056217 ( 82.05%) 869.79
http(s) 7629742 ( 31.22%) 10393241100 ( 56.55%) 1362.20
http(c) 3369777 ( 13.79%) 300662783 ( 1.64%) 89.22
squid 109370 ( 0.45%) 89301064 ( 0.49%) 816.50
smtp 29048 ( 0.12%) 5170681 ( 0.03%) 178.00
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 6314 ( 0.03%) 576236 ( 0.00%) 91.26
pop3 1622 ( 0.01%) 370632 ( 0.00%) 228.50
imap 2467 ( 0.01%) 803625 ( 0.00%) 325.75
telnet 958 ( 0.00%) 63820 ( 0.00%) 66.62
ssh 123987 ( 0.51%) 20910518 ( 0.11%) 168.65
dns 4564 ( 0.02%) 531307 ( 0.00%) 116.41
bgp 719 ( 0.00%) 131835 ( 0.00%) 183.36
napster 15 ( 0.00%) 1028 ( 0.00%) 68.53
realaud 2 ( 0.00%) 126 ( 0.00%) 63.00
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 2579 ( 0.01%) 1515867 ( 0.01%) 587.77
hotline 16 ( 0.00%) 996 ( 0.00%) 62.25
other 6055195 ( 24.78%) 4265774165 ( 23.21%) 704.48
udp 3407353 ( 13.94%) 1519388500 ( 8.27%) 445.91
dns 397935 ( 1.63%) 122669668 ( 0.67%) 308.27
realaud 1 ( 0.00%) 90 ( 0.00%) 90.00
halflif 226 ( 0.00%) 46286 ( 0.00%) 204.81
starcra 18 ( 0.00%) 2282 ( 0.00%) 126.78
everque 222 ( 0.00%) 61303 ( 0.00%) 276.14
unreal 19 ( 0.00%) 2838 ( 0.00%) 149.37
quake 18 ( 0.00%) 2276 ( 0.00%) 126.44
cuseeme 2 ( 0.00%) 152 ( 0.00%) 76.00
other 2669833 ( 10.93%) 1375575827 ( 7.48%) 515.23
icmp 1768451 ( 7.24%) 181328213 ( 0.99%) 102.54
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 5621 ( 0.02%) 3165230 ( 0.02%) 563.11
ip6 1697865 ( 6.95%) 1407995716 ( 7.66%) 829.27
pim 239 ( 0.00%) 14340 ( 0.00%) 60.00
other 967 ( 0.00%) 126932 ( 0.00%) 131.26
frag 726073 ( 2.97%) 552088102 ( 3.00%) 760.38
ip6 220394 ( 0.90%) 187594355 ( 1.02%) 851.18
tcp6 154271 ( 0.63%) 174499357 ( 0.95%) 1131.12
http(s) 8359 ( 0.03%) 10359551 ( 0.06%) 1239.33
http(c) 16292 ( 0.07%) 1474084 ( 0.01%) 90.48
ftp 19 ( 0.00%) 2167 ( 0.00%) 114.05
dns 75 ( 0.00%) 9325 ( 0.00%) 124.33
bgp 93 ( 0.00%) 18703 ( 0.00%) 201.11
other 129433 ( 0.53%) 162635527 ( 0.88%) 1256.52
udp6 41867 ( 0.17%) 9494625 ( 0.05%) 226.78
dns 37655 ( 0.15%) 7984937 ( 0.04%) 212.06
halflif 1 ( 0.00%) 100 ( 0.00%) 100.00
quake 3 ( 0.00%) 354 ( 0.00%) 118.00
other 4208 ( 0.02%) 1509234 ( 0.01%) 358.66
icmp6 23812 ( 0.10%) 3269232 ( 0.02%) 137.29
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 330 ( 0.00%) 315649 ( 0.00%) 956.51
tcpdump file: 201203310915.dump.gz (554.41 MB)