Traffic Trace Info
DumpFile: 201203311145.dump
FileSize: 2003.62MB
Id: 201203311145
StartTime: Sat Mar 31 11:45:00 2012
EndTime: Sat Mar 31 12:00:00 2012
TotalTime: 899.46 seconds
TotalCapSize: 1579.01MB CapLen: 96 bytes
# of packets: 27826897 (20686.90MB)
AvgRate: 192.95Mbps stddev:40.09M
IP flow (unique src/dst pair) Information
# of flows: 1935022 (avg. 14.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 3.4% 2.5% 1.9% 1.7% 1.4% 1.1% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 1436417
Top 10 bandwidth usage (bytes/total in %):
16.3% 15.4% 6.5% 6.5% 6.4% 5.4% 4.8% 3.4% 3.1% 2.5%
# of IPv6 addresses: 4777
Top 10 bandwidth usage (bytes/total in %):
19.2% 16.8% 12.9% 12.9% 12.4% 10.7% 7.5% 7.2% 7.1% 7.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311145.pktlen.png)
detailed numbers
[ 32- 63]: 5792823
[ 64- 127]: 6246271
[ 128- 255]: 921253
[ 256- 511]: 545549
[ 512- 1023]: 754876
[ 1024- 2047]: 13566125
Protocol Breakdown
![[protocol breakdown chart]](201203311145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27826897 (100.00%) 21691782925 (100.00%) 779.53
ip 27696603 ( 99.53%) 21636640356 ( 99.75%) 781.20
tcp 20934057 ( 75.23%) 18845355361 ( 86.88%) 900.22
http(s) 11259446 ( 40.46%) 15222578066 ( 70.18%) 1351.98
http(c) 4580156 ( 16.46%) 537692636 ( 2.48%) 117.40
squid 127430 ( 0.46%) 89762693 ( 0.41%) 704.41
smtp 32849 ( 0.12%) 7690516 ( 0.04%) 234.12
ftp 7348 ( 0.03%) 677710 ( 0.00%) 92.23
pop3 3084 ( 0.01%) 1526013 ( 0.01%) 494.82
imap 2485 ( 0.01%) 428862 ( 0.00%) 172.58
telnet 4488 ( 0.02%) 411523 ( 0.00%) 91.69
ssh 273527 ( 0.98%) 62483734 ( 0.29%) 228.44
dns 5003 ( 0.02%) 485350 ( 0.00%) 97.01
bgp 693 ( 0.00%) 105058 ( 0.00%) 151.60
napster 41 ( 0.00%) 3041 ( 0.00%) 74.17
realaud 12 ( 0.00%) 750 ( 0.00%) 62.50
icecast 723 ( 0.00%) 68934 ( 0.00%) 95.34
hotline 17 ( 0.00%) 1034 ( 0.00%) 60.82
other 4636742 ( 16.66%) 2921438375 ( 13.47%) 630.06
udp 3102284 ( 11.15%) 1220856884 ( 5.63%) 393.53
dns 464770 ( 1.67%) 136449000 ( 0.63%) 293.58
realaud 3 ( 0.00%) 251 ( 0.00%) 83.67
halflif 25 ( 0.00%) 2469 ( 0.00%) 98.76
starcra 24 ( 0.00%) 3254 ( 0.00%) 135.58
everque 332 ( 0.00%) 62237 ( 0.00%) 187.46
unreal 58 ( 0.00%) 7799 ( 0.00%) 134.47
quake 9 ( 0.00%) 1148 ( 0.00%) 127.56
cuseeme 3 ( 0.00%) 251 ( 0.00%) 83.67
other 2574900 ( 9.25%) 1080557552 ( 4.98%) 419.65
icmp 1740454 ( 6.25%) 139673921 ( 0.64%) 80.25
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 6797 ( 0.02%) 2484446 ( 0.01%) 365.52
ip6 1911621 ( 6.87%) 1428117531 ( 6.58%) 747.07
pim 233 ( 0.00%) 13980 ( 0.00%) 60.00
other 973 ( 0.00%) 119073 ( 0.00%) 122.38
frag 168294 ( 0.60%) 128575606 ( 0.59%) 763.99
ip6 130294 ( 0.47%) 55142569 ( 0.25%) 423.22
tcp6 59131 ( 0.21%) 41165878 ( 0.19%) 696.18
http(s) 14147 ( 0.05%) 16237078 ( 0.07%) 1147.74
http(c) 12520 ( 0.04%) 1162680 ( 0.01%) 92.87
smtp 483 ( 0.00%) 206529 ( 0.00%) 427.60
ftp 83 ( 0.00%) 11106 ( 0.00%) 133.81
dns 142 ( 0.00%) 20341 ( 0.00%) 143.25
bgp 89 ( 0.00%) 17806 ( 0.00%) 200.07
other 31667 ( 0.11%) 23510338 ( 0.11%) 742.42
udp6 43972 ( 0.16%) 9928243 ( 0.05%) 225.79
dns 40256 ( 0.14%) 9526973 ( 0.04%) 236.66
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
halflif 1 ( 0.00%) 101 ( 0.00%) 101.00
starcra 1 ( 0.00%) 116 ( 0.00%) 116.00
everque 3 ( 0.00%) 313 ( 0.00%) 104.33
quake 3 ( 0.00%) 336 ( 0.00%) 112.00
other 3707 ( 0.01%) 400298 ( 0.00%) 107.98
icmp6 26776 ( 0.10%) 3719358 ( 0.02%) 138.91
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 303 ( 0.00%) 313834 ( 0.00%) 1035.76
tcpdump file: 201203311145.dump.gz (623.15 MB)