Traffic Trace Info
DumpFile: 201203311115.dump
FileSize: 2071.00MB
Id: 201203311115
StartTime: Sat Mar 31 11:15:00 2012
EndTime: Sat Mar 31 11:30:00 2012
TotalTime: 899.63 seconds
TotalCapSize: 1625.66MB CapLen: 96 bytes
# of packets: 29185235 (22640.46MB)
AvgRate: 211.09Mbps stddev:60.00M
IP flow (unique src/dst pair) Information
# of flows: 1795495 (avg. 16.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.6% 2.5% 1.7% 1.5% 1.1% 1.1% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1400633
Top 10 bandwidth usage (bytes/total in %):
16.6% 12.2% 10.8% 10.8% 5.6% 4.8% 4.0% 3.5% 3.4% 2.7%
# of IPv6 addresses: 4810
Top 10 bandwidth usage (bytes/total in %):
55.8% 55.8% 10.5% 8.3% 5.1% 3.8% 3.8% 3.2% 3.0% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311115.pktlen.png)
detailed numbers
[ 32- 63]: 6374568
[ 64- 127]: 5798911
[ 128- 255]: 800236
[ 256- 511]: 493523
[ 512- 1023]: 707500
[ 1024- 2047]: 15010497
Protocol Breakdown
![[protocol breakdown chart]](201203311115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29185235 (100.00%) 23740243644 (100.00%) 813.43
ip 29043829 ( 99.52%) 23662753674 ( 99.67%) 814.73
tcp 22661071 ( 77.65%) 20748548967 ( 87.40%) 915.60
http(s) 11583451 ( 39.69%) 15973161536 ( 67.28%) 1378.96
http(c) 5177814 ( 17.74%) 481579625 ( 2.03%) 93.01
squid 249299 ( 0.85%) 210937356 ( 0.89%) 846.12
smtp 49954 ( 0.17%) 17965277 ( 0.08%) 359.64
nntp 24 ( 0.00%) 1496 ( 0.00%) 62.33
ftp 10607 ( 0.04%) 1065037 ( 0.00%) 100.41
pop3 4776 ( 0.02%) 2664579 ( 0.01%) 557.91
imap 2804 ( 0.01%) 744678 ( 0.00%) 265.58
telnet 506 ( 0.00%) 36933 ( 0.00%) 72.99
ssh 68461 ( 0.23%) 6249935 ( 0.03%) 91.29
dns 5025 ( 0.02%) 575961 ( 0.00%) 114.62
bgp 681 ( 0.00%) 103594 ( 0.00%) 152.12
napster 105 ( 0.00%) 9584 ( 0.00%) 91.28
realaud 108 ( 0.00%) 7125 ( 0.00%) 65.97
icecast 1625 ( 0.01%) 1026742 ( 0.00%) 631.84
hotline 29 ( 0.00%) 1974 ( 0.00%) 68.07
other 5505800 ( 18.87%) 4052417415 ( 17.07%) 736.03
udp 3249048 ( 11.13%) 1436234675 ( 6.05%) 442.05
dns 466363 ( 1.60%) 149148283 ( 0.63%) 319.81
realaud 7 ( 0.00%) 843 ( 0.00%) 120.43
halflif 38 ( 0.00%) 4780 ( 0.00%) 125.79
starcra 20 ( 0.00%) 2194 ( 0.00%) 109.70
everque 362 ( 0.00%) 75249 ( 0.00%) 207.87
unreal 39 ( 0.00%) 5276 ( 0.00%) 135.28
quake 12 ( 0.00%) 1448 ( 0.00%) 120.67
other 2688912 ( 9.21%) 1280844936 ( 5.40%) 476.34
icmp 1585361 ( 5.43%) 124525798 ( 0.52%) 78.55
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3470 ( 0.01%) 1179076 ( 0.00%) 339.79
ip6 1543439 ( 5.29%) 1352110525 ( 5.70%) 876.04
pim 342 ( 0.00%) 20520 ( 0.00%) 60.00
other 913 ( 0.00%) 114843 ( 0.00%) 125.79
frag 271080 ( 0.93%) 214125934 ( 0.90%) 789.90
ip6 141406 ( 0.48%) 77489970 ( 0.33%) 548.00
tcp6 68073 ( 0.23%) 61211497 ( 0.26%) 899.20
http(s) 3853 ( 0.01%) 3915373 ( 0.02%) 1016.19
http(c) 16311 ( 0.06%) 1438852 ( 0.01%) 88.21
smtp 40 ( 0.00%) 20918 ( 0.00%) 522.95
dns 109 ( 0.00%) 23220 ( 0.00%) 213.03
bgp 95 ( 0.00%) 23931 ( 0.00%) 251.91
other 47665 ( 0.16%) 55789203 ( 0.23%) 1170.44
udp6 43514 ( 0.15%) 9575305 ( 0.04%) 220.05
dns 40996 ( 0.14%) 9259436 ( 0.04%) 225.86
realaud 2 ( 0.00%) 211 ( 0.00%) 105.50
unreal 1 ( 0.00%) 102 ( 0.00%) 102.00
quake 2 ( 0.00%) 201 ( 0.00%) 100.50
other 2513 ( 0.01%) 315355 ( 0.00%) 125.49
icmp6 27066 ( 0.09%) 3698913 ( 0.02%) 136.66
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2638 ( 0.01%) 2988595 ( 0.01%) 1132.90
tcpdump file: 201203311115.dump.gz (642.73 MB)