Traffic Trace Info
DumpFile: 201203021400.dump
FileSize: 2889.49MB
Id: 201203021400
StartTime: Fri Mar 2 14:00:01 2012
EndTime: Fri Mar 2 14:15:01 2012
TotalTime: 899.77 seconds
TotalCapSize: -1817.41MB CapLen: 96 bytes
# of packets: 40035640 (30984.66MB)
AvgRate: 288.83Mbps stddev:44.33M
IP flow (unique src/dst pair) Information
# of flows: 839535 (avg. 47.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 3.1% 2.3% 2.2% 1.7% 1.6% 1.6% 1.5% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 514496
Top 10 bandwidth usage (bytes/total in %):
16.0% 13.7% 10.3% 8.0% 6.7% 3.9% 3.8% 3.2% 3.2% 2.4%
# of IPv6 addresses: 5574
Top 10 bandwidth usage (bytes/total in %):
82.9% 57.9% 21.4% 4.6% 2.5% 2.5% 2.3% 2.3% 2.0% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203021400.pktlen.png)
detailed numbers
[ 32- 63]: 7530798
[ 64- 127]: 9098435
[ 128- 255]: 1442804
[ 256- 511]: 836069
[ 512- 1023]: 808939
[ 1024- 2047]: 20318595
Protocol Breakdown
![[protocol breakdown chart]](201203021400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40035640 (100.00%) 32489773172 (100.00%) 811.52
ip 39580263 ( 98.86%) 32106707936 ( 98.82%) 811.18
tcp 32806531 ( 81.94%) 30432701658 ( 93.67%) 927.64
http(s) 15951851 ( 39.84%) 22000944628 ( 67.72%) 1379.21
http(c) 7871795 ( 19.66%) 1468469889 ( 4.52%) 186.55
squid 44195 ( 0.11%) 21949565 ( 0.07%) 496.65
smtp 69010 ( 0.17%) 28716963 ( 0.09%) 416.13
ftp 14749 ( 0.04%) 1314841 ( 0.00%) 89.15
pop3 4685 ( 0.01%) 1570377 ( 0.00%) 335.19
imap 5006 ( 0.01%) 2522964 ( 0.01%) 503.99
telnet 540 ( 0.00%) 69074 ( 0.00%) 127.91
ssh 239177 ( 0.60%) 177009645 ( 0.54%) 740.08
dns 17850 ( 0.04%) 4496137 ( 0.01%) 251.88
bgp 653 ( 0.00%) 123726 ( 0.00%) 189.47
napster 157 ( 0.00%) 12170 ( 0.00%) 77.52
realaud 64 ( 0.00%) 5296 ( 0.00%) 82.75
rtsp 10488 ( 0.03%) 12310329 ( 0.04%) 1173.75
icecast 25439 ( 0.06%) 15922630 ( 0.05%) 625.91
hotline 31 ( 0.00%) 3962 ( 0.00%) 127.81
other 8550840 ( 21.36%) 6697259402 ( 20.61%) 783.23
udp 3820730 ( 9.54%) 875976079 ( 2.70%) 229.27
dns 520483 ( 1.30%) 130505515 ( 0.40%) 250.74
rip 1 ( 0.00%) 72 ( 0.00%) 72.00
realaud 45 ( 0.00%) 3999 ( 0.00%) 88.87
halflif 33 ( 0.00%) 2748 ( 0.00%) 83.27
starcra 228 ( 0.00%) 17178 ( 0.00%) 75.34
everque 3934 ( 0.01%) 3648986 ( 0.01%) 927.55
unreal 16 ( 0.00%) 2253 ( 0.00%) 140.81
quake 13 ( 0.00%) 1052 ( 0.00%) 80.92
cuseeme 7 ( 0.00%) 814 ( 0.00%) 116.29
other 3295876 ( 8.23%) 741710350 ( 2.28%) 225.04
icmp 768791 ( 1.92%) 124067378 ( 0.38%) 161.38
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 945 ( 0.00%) 277606 ( 0.00%) 293.76
ip6 2176540 ( 5.44%) 672051285 ( 2.07%) 308.77
other 6541 ( 0.02%) 1614660 ( 0.00%) 246.85
frag 360 ( 0.00%) 416951 ( 0.00%) 1158.20
ip6 455377 ( 1.14%) 383065236 ( 1.18%) 841.20
tcp6 357890 ( 0.89%) 349564951 ( 1.08%) 976.74
http(s) 62812 ( 0.16%) 91366178 ( 0.28%) 1454.60
http(c) 77820 ( 0.19%) 6672841 ( 0.02%) 85.75
smtp 290 ( 0.00%) 113725 ( 0.00%) 392.16
ftp 29 ( 0.00%) 2336 ( 0.00%) 80.55
pop3 36 ( 0.00%) 14870 ( 0.00%) 413.06
dns 376 ( 0.00%) 66674 ( 0.00%) 177.32
bgp 88 ( 0.00%) 13746 ( 0.00%) 156.20
other 216439 ( 0.54%) 251314581 ( 0.77%) 1161.13
udp6 76132 ( 0.19%) 28217882 ( 0.09%) 370.64
dns 65002 ( 0.16%) 18196171 ( 0.06%) 279.93
realaud 1 ( 0.00%) 115 ( 0.00%) 115.00
quake 1 ( 0.00%) 111 ( 0.00%) 111.00
cuseeme 1 ( 0.00%) 106 ( 0.00%) 106.00
other 11127 ( 0.03%) 10021379 ( 0.03%) 900.64
icmp6 18255 ( 0.05%) 2867556 ( 0.01%) 157.08
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2984 ( 0.01%) 2399119 ( 0.01%) 803.99
tcpdump file: 201203021400.dump.gz (951.05 MB)