Traffic Trace Info
DumpFile: 201203011400.dump
FileSize: 2848.74MB
Id: 201203011400
StartTime: Thu Mar 1 14:00:01 2012
EndTime: Thu Mar 1 14:15:00 2012
TotalTime: 899.24 seconds
TotalCapSize: -1845.55MB CapLen: 96 bytes
# of packets: 39209221 (28364.09MB)
AvgRate: 264.61Mbps stddev:39.58M
IP flow (unique src/dst pair) Information
# of flows: 840667 (avg. 46.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.1% 4.4% 3.9% 2.1% 1.8% 1.8% 1.5% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 509755
Top 10 bandwidth usage (bytes/total in %):
13.5% 13.0% 11.6% 7.4% 6.5% 6.4% 6.2% 4.7% 4.1% 4.1%
# of IPv6 addresses: 5327
Top 10 bandwidth usage (bytes/total in %):
89.2% 82.2% 3.1% 2.5% 2.2% 1.3% 1.2% 1.2% 0.9% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203011400.pktlen.png)
detailed numbers
[ 32- 63]: 7068251
[ 64- 127]: 9722184
[ 128- 255]: 1896948
[ 256- 511]: 1054440
[ 512- 1023]: 949981
[ 1024- 2047]: 18517417
Protocol Breakdown
![[protocol breakdown chart]](201203011400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39209221 (100.00%) 29741900765 (100.00%) 758.54
ip 38469826 ( 98.11%) 29077700185 ( 97.77%) 755.86
tcp 30106005 ( 76.78%) 26487672331 ( 89.06%) 879.81
http(s) 12188023 ( 31.08%) 16370182693 ( 55.04%) 1343.14
http(c) 5628260 ( 14.35%) 944350340 ( 3.18%) 167.79
squid 40275 ( 0.10%) 16908840 ( 0.06%) 419.83
smtp 73789 ( 0.19%) 18972875 ( 0.06%) 257.12
ftp 19791 ( 0.05%) 6629246 ( 0.02%) 334.96
pop3 3525 ( 0.01%) 1167082 ( 0.00%) 331.09
imap 2360 ( 0.01%) 759990 ( 0.00%) 322.03
telnet 6946 ( 0.02%) 539542 ( 0.00%) 77.68
ssh 117198 ( 0.30%) 70826953 ( 0.24%) 604.34
dns 17157 ( 0.04%) 1530345 ( 0.01%) 89.20
bgp 672 ( 0.00%) 156349 ( 0.00%) 232.66
napster 43 ( 0.00%) 3238 ( 0.00%) 75.30
realaud 356 ( 0.00%) 23245 ( 0.00%) 65.29
rtsp 14143 ( 0.04%) 15579498 ( 0.05%) 1101.57
icecast 14329 ( 0.04%) 12694715 ( 0.04%) 885.95
hotline 20 ( 0.00%) 2018 ( 0.00%) 100.90
other 11979118 ( 30.55%) 9027345362 ( 30.35%) 753.59
udp 4520245 ( 11.53%) 1280395210 ( 4.31%) 283.26
dns 633592 ( 1.62%) 139958560 ( 0.47%) 220.90
realaud 3 ( 0.00%) 296 ( 0.00%) 98.67
halflif 19 ( 0.00%) 1663 ( 0.00%) 87.53
starcra 12 ( 0.00%) 976 ( 0.00%) 81.33
everque 3564 ( 0.01%) 3130702 ( 0.01%) 878.42
unreal 8 ( 0.00%) 1704 ( 0.00%) 213.00
quake 38 ( 0.00%) 4396 ( 0.00%) 115.68
cuseeme 3 ( 0.00%) 255 ( 0.00%) 85.00
other 3882909 ( 9.90%) 1137225173 ( 3.82%) 292.88
icmp 738469 ( 1.88%) 103758430 ( 0.35%) 140.50
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 81718 ( 0.21%) 53151652 ( 0.18%) 650.43
ip6 3015848 ( 7.69%) 1149832348 ( 3.87%) 381.26
other 7356 ( 0.02%) 2870944 ( 0.01%) 390.29
frag 432 ( 0.00%) 485210 ( 0.00%) 1123.17
ip6 739395 ( 1.89%) 664200580 ( 2.23%) 898.30
tcp6 620343 ( 1.58%) 622143521 ( 2.09%) 1002.90
http(s) 24067 ( 0.06%) 33604411 ( 0.11%) 1396.29
http(c) 30761 ( 0.08%) 2685134 ( 0.01%) 87.29
smtp 275 ( 0.00%) 86443 ( 0.00%) 314.34
ftp 26 ( 0.00%) 2053 ( 0.00%) 78.96
pop3 108 ( 0.00%) 16567 ( 0.00%) 153.40
dns 2598 ( 0.01%) 2429243 ( 0.01%) 935.04
bgp 94 ( 0.00%) 19853 ( 0.00%) 211.20
other 562414 ( 1.43%) 583299817 ( 1.96%) 1037.14
udp6 82343 ( 0.21%) 27878133 ( 0.09%) 338.56
dns 69076 ( 0.18%) 19225005 ( 0.06%) 278.32
realaud 2 ( 0.00%) 222 ( 0.00%) 111.00
halflif 2 ( 0.00%) 216 ( 0.00%) 108.00
starcra 1 ( 0.00%) 104 ( 0.00%) 104.00
quake 2 ( 0.00%) 215 ( 0.00%) 107.50
other 13260 ( 0.03%) 8652371 ( 0.03%) 652.52
icmp6 22642 ( 0.06%) 3479814 ( 0.01%) 153.69
ip6 87 ( 0.00%) 11816 ( 0.00%) 135.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 13950 ( 0.04%) 10683216 ( 0.04%) 765.82
tcpdump file: 201203011400.dump.gz (951.07 MB)