Traffic Trace Info
DumpFile: 201203310945.dump
FileSize: 1834.86MB
Id: 201203310945
StartTime: Sat Mar 31 09:45:01 2012
EndTime: Sat Mar 31 10:00:00 2012
TotalTime: 899.39 seconds
TotalCapSize: 1439.79MB CapLen: 96 bytes
# of packets: 25890372 (18847.72MB)
AvgRate: 175.77Mbps stddev:33.52M
IP flow (unique src/dst pair) Information
# of flows: 1924700 (avg. 13.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 1.9% 1.6% 1.3% 1.2% 1.2% 1.2% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 1455386
Top 10 bandwidth usage (bytes/total in %):
19.0% 15.6% 7.9% 5.0% 4.5% 3.3% 3.2% 3.2% 3.2% 3.2%
# of IPv6 addresses: 4614
Top 10 bandwidth usage (bytes/total in %):
37.5% 21.9% 14.7% 14.5% 13.2% 8.5% 7.2% 5.7% 3.7% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310945.pktlen.png)
detailed numbers
[ 32- 63]: 6369724
[ 64- 127]: 5027869
[ 128- 255]: 909768
[ 256- 511]: 498036
[ 512- 1023]: 683495
[ 1024- 2047]: 12401480
Protocol Breakdown
![[protocol breakdown chart]](201203310945.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25890372 (100.00%) 19763271593 (100.00%) 763.34
ip 25717114 ( 99.33%) 19693587784 ( 99.65%) 765.78
tcp 18319393 ( 70.76%) 15835922430 ( 80.13%) 864.43
http(s) 8987557 ( 34.71%) 12276421956 ( 62.12%) 1365.94
http(c) 3510146 ( 13.56%) 460553296 ( 2.33%) 131.21
squid 106011 ( 0.41%) 73531763 ( 0.37%) 693.62
smtp 35763 ( 0.14%) 7792302 ( 0.04%) 217.89
nntp 18 ( 0.00%) 1122 ( 0.00%) 62.33
ftp 8109 ( 0.03%) 754933 ( 0.00%) 93.10
pop3 2603 ( 0.01%) 1101686 ( 0.01%) 423.24
imap 1959 ( 0.01%) 312371 ( 0.00%) 159.45
telnet 2774 ( 0.01%) 197073 ( 0.00%) 71.04
ssh 453809 ( 1.75%) 73026444 ( 0.37%) 160.92
dns 4855 ( 0.02%) 481695 ( 0.00%) 99.22
bgp 676 ( 0.00%) 100625 ( 0.00%) 148.85
napster 37 ( 0.00%) 2440 ( 0.00%) 65.95
realaud 9 ( 0.00%) 608 ( 0.00%) 67.56
rtsp 200 ( 0.00%) 15019 ( 0.00%) 75.09
icecast 5848 ( 0.02%) 3176928 ( 0.02%) 543.25
hotline 18 ( 0.00%) 1118 ( 0.00%) 62.11
other 5199000 ( 20.08%) 2938450991 ( 14.87%) 565.20
udp 3681814 ( 14.22%) 2054592458 ( 10.40%) 558.04
dns 377395 ( 1.46%) 119405513 ( 0.60%) 316.39
rip 5 ( 0.00%) 320 ( 0.00%) 64.00
realaud 7 ( 0.00%) 870 ( 0.00%) 124.29
halflif 211 ( 0.00%) 42227 ( 0.00%) 200.13
starcra 28 ( 0.00%) 3265 ( 0.00%) 116.61
everque 251 ( 0.00%) 51847 ( 0.00%) 206.56
unreal 72 ( 0.00%) 29824 ( 0.00%) 414.22
quake 11 ( 0.00%) 1285 ( 0.00%) 116.82
cuseeme 6 ( 0.00%) 399 ( 0.00%) 66.50
other 3095987 ( 11.96%) 1922543831 ( 9.73%) 620.98
icmp 1696543 ( 6.55%) 177385884 ( 0.90%) 104.56
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9614 ( 0.04%) 4042644 ( 0.02%) 420.50
ip6 2008077 ( 7.76%) 1621444153 ( 8.20%) 807.46
pim 195 ( 0.00%) 11700 ( 0.00%) 60.00
other 1293 ( 0.00%) 169245 ( 0.00%) 130.89
frag 485075 ( 1.87%) 370171904 ( 1.87%) 763.12
ip6 173258 ( 0.67%) 69683809 ( 0.35%) 402.20
tcp6 106736 ( 0.41%) 56863415 ( 0.29%) 532.75
http(s) 20320 ( 0.08%) 24379111 ( 0.12%) 1199.76
http(c) 32732 ( 0.13%) 2759190 ( 0.01%) 84.30
smtp 378 ( 0.00%) 119216 ( 0.00%) 315.39
ftp 26 ( 0.00%) 5582 ( 0.00%) 214.69
ssh 168 ( 0.00%) 147754 ( 0.00%) 879.49
dns 97 ( 0.00%) 15839 ( 0.00%) 163.29
bgp 87 ( 0.00%) 13925 ( 0.00%) 160.06
other 52928 ( 0.20%) 29422798 ( 0.15%) 555.90
udp6 39478 ( 0.15%) 8881329 ( 0.04%) 224.97
dns 37543 ( 0.15%) 8616077 ( 0.04%) 229.50
realaud 1 ( 0.00%) 108 ( 0.00%) 108.00
halflif 3 ( 0.00%) 331 ( 0.00%) 110.33
starcra 7 ( 0.00%) 698 ( 0.00%) 99.71
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 1922 ( 0.01%) 263903 ( 0.00%) 137.31
icmp6 26616 ( 0.10%) 3600854 ( 0.02%) 135.29
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 312 ( 0.00%) 322415 ( 0.00%) 1033.38
tcpdump file: 201203310945.dump.gz (577.21 MB)