Traffic Trace Info
DumpFile: 201203312345.dump
FileSize: 2584.49MB
Id: 201203312345
StartTime: Sat Mar 31 23:45:01 2012
EndTime: Sun Apr 1 00:00:01 2012
TotalTime: 900.06 seconds
TotalCapSize: 1994.20MB CapLen: 96 bytes
# of packets: 38685221 (27964.53MB)
AvgRate: 260.66Mbps stddev:35.16M
IP flow (unique src/dst pair) Information
# of flows: 1881496 (avg. 20.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 4.0% 1.8% 1.6% 1.2% 1.2% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1452661
Top 10 bandwidth usage (bytes/total in %):
14.1% 13.9% 11.4% 10.1% 7.4% 4.2% 4.2% 4.1% 3.2% 2.1%
# of IPv6 addresses: 6481
Top 10 bandwidth usage (bytes/total in %):
88.5% 85.8% 2.5% 2.2% 1.9% 1.5% 1.4% 1.3% 1.0% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203312345.pktlen.png)
detailed numbers
[ 32- 63]: 5244083
[ 64- 127]: 11100922
[ 128- 255]: 1317388
[ 256- 511]: 673335
[ 512- 1023]: 2164427
[ 1024- 2047]: 18185066
Protocol Breakdown
![[protocol breakdown chart]](201203312345.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38685221 (100.00%) 29322932126 (100.00%) 757.99
ip 38269472 ( 98.93%) 28926663905 ( 98.65%) 755.87
tcp 20376395 ( 52.67%) 18634730614 ( 63.55%) 914.53
http(s) 9893587 ( 25.57%) 13564001933 ( 46.26%) 1370.99
http(c) 3751275 ( 9.70%) 378678047 ( 1.29%) 100.95
squid 141961 ( 0.37%) 101952406 ( 0.35%) 718.17
smtp 40625 ( 0.11%) 8370191 ( 0.03%) 206.04
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 12607 ( 0.03%) 1240209 ( 0.00%) 98.37
pop3 5329 ( 0.01%) 651865 ( 0.00%) 122.32
imap 1820 ( 0.00%) 1307040 ( 0.00%) 718.15
telnet 4646 ( 0.01%) 356530 ( 0.00%) 76.74
ssh 964857 ( 2.49%) 535042229 ( 1.82%) 554.53
dns 3058 ( 0.01%) 313951 ( 0.00%) 102.67
bgp 633 ( 0.00%) 108173 ( 0.00%) 170.89
napster 18 ( 0.00%) 1512 ( 0.00%) 84.00
realaud 293 ( 0.00%) 34946 ( 0.00%) 119.27
rtsp 81 ( 0.00%) 41213 ( 0.00%) 508.80
icecast 807 ( 0.00%) 114699 ( 0.00%) 142.13
hotline 25 ( 0.00%) 1903 ( 0.00%) 76.12
other 5554767 ( 14.36%) 4042513393 ( 13.79%) 727.76
udp 14370821 ( 37.15%) 9071194820 ( 30.94%) 631.22
dns 360155 ( 0.93%) 74110434 ( 0.25%) 205.77
rip 2 ( 0.00%) 141 ( 0.00%) 70.50
realaud 394 ( 0.00%) 46967 ( 0.00%) 119.21
halflif 213 ( 0.00%) 33659 ( 0.00%) 158.02
starcra 122 ( 0.00%) 25441 ( 0.00%) 208.53
everque 247 ( 0.00%) 67553 ( 0.00%) 273.49
unreal 128 ( 0.00%) 55866 ( 0.00%) 436.45
quake 23 ( 0.00%) 1909 ( 0.00%) 83.00
cuseeme 5 ( 0.00%) 515 ( 0.00%) 103.00
other 14009196 ( 36.21%) 8996805415 ( 30.68%) 642.21
icmp 2123202 ( 5.49%) 227784888 ( 0.78%) 107.28
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2671 ( 0.01%) 910602 ( 0.00%) 340.92
ip6 1374802 ( 3.55%) 989258471 ( 3.37%) 719.56
pim 314 ( 0.00%) 18840 ( 0.00%) 60.00
other 21082 ( 0.05%) 2746400 ( 0.01%) 130.27
frag 1688 ( 0.00%) 1289557 ( 0.00%) 763.96
ip6 415749 ( 1.07%) 396268221 ( 1.35%) 953.14
tcp6 316539 ( 0.82%) 371387514 ( 1.27%) 1173.28
http(s) 4101 ( 0.01%) 4129162 ( 0.01%) 1006.87
http(c) 8663 ( 0.02%) 792640 ( 0.00%) 91.50
smtp 815 ( 0.00%) 296905 ( 0.00%) 364.30
ftp 23 ( 0.00%) 2058 ( 0.00%) 89.48
dns 181 ( 0.00%) 29054 ( 0.00%) 160.52
bgp 91 ( 0.00%) 17137 ( 0.00%) 188.32
other 302665 ( 0.78%) 366120558 ( 1.25%) 1209.66
udp6 53829 ( 0.14%) 12562734 ( 0.04%) 233.38
dns 43537 ( 0.11%) 9405608 ( 0.03%) 216.04
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 1 ( 0.00%) 105 ( 0.00%) 105.00
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
cuseeme 1 ( 0.00%) 99 ( 0.00%) 99.00
other 10288 ( 0.03%) 3156710 ( 0.01%) 306.83
icmp6 34177 ( 0.09%) 4415052 ( 0.02%) 129.18
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 11091 ( 0.03%) 7887547 ( 0.03%) 711.17
tcpdump file: 201203312345.dump.gz (843.39 MB)