Traffic Trace Info
DumpFile: 201203031400.dump
FileSize: 2519.85MB
Id: 201203031400
StartTime: Sat Mar 3 14:00:00 2012
EndTime: Sat Mar 3 14:15:00 2012
TotalTime: 899.81 seconds
TotalCapSize: 1982.85MB CapLen: 96 bytes
# of packets: 35192851 (25845.13MB)
AvgRate: 240.96Mbps stddev:46.80M
IP flow (unique src/dst pair) Information
# of flows: 871354 (avg. 40.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 3.8% 2.8% 2.1% 1.6% 1.5% 1.4% 1.3% 1.3% 0.9%
IP address Information
# of IPv4 addresses: 527459
Top 10 bandwidth usage (bytes/total in %):
26.3% 19.4% 5.9% 4.7% 4.3% 4.2% 3.8% 3.0% 2.8% 2.5%
# of IPv6 addresses: 5015
Top 10 bandwidth usage (bytes/total in %):
38.5% 38.5% 19.8% 11.3% 11.3% 6.5% 5.9% 5.7% 5.0% 4.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203031400.pktlen.png)
detailed numbers
[ 32- 63]: 6561207
[ 64- 127]: 8569063
[ 128- 255]: 1558098
[ 256- 511]: 842003
[ 512- 1023]: 897773
[ 1024- 2047]: 16764707
Protocol Breakdown
![[protocol breakdown chart]](201203031400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35192851 (100.00%) 27100586102 (100.00%) 770.06
ip 34924056 ( 99.24%) 26924328267 ( 99.35%) 770.94
tcp 26411122 ( 75.05%) 24340094502 ( 89.81%) 921.59
http(s) 13643680 ( 38.77%) 18884745792 ( 69.68%) 1384.14
http(c) 5277847 ( 15.00%) 655569586 ( 2.42%) 124.21
squid 28621 ( 0.08%) 13550670 ( 0.05%) 473.45
smtp 47422 ( 0.13%) 9409675 ( 0.03%) 198.42
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 17447 ( 0.05%) 1647066 ( 0.01%) 94.40
pop3 4676 ( 0.01%) 2986321 ( 0.01%) 638.65
imap 589148 ( 1.67%) 587749035 ( 2.17%) 997.63
telnet 1158 ( 0.00%) 113668 ( 0.00%) 98.16
ssh 88582 ( 0.25%) 61623902 ( 0.23%) 695.67
dns 13828 ( 0.04%) 1204665 ( 0.00%) 87.12
bgp 639 ( 0.00%) 110800 ( 0.00%) 173.40
napster 95 ( 0.00%) 7218 ( 0.00%) 75.98
realaud 36 ( 0.00%) 3737 ( 0.00%) 103.81
rtsp 8663 ( 0.02%) 8566001 ( 0.03%) 988.80
icecast 12466 ( 0.04%) 8176068 ( 0.03%) 655.87
hotline 14 ( 0.00%) 878 ( 0.00%) 62.71
other 6676795 ( 18.97%) 4104629118 ( 15.15%) 614.76
udp 5309401 ( 15.09%) 1574100783 ( 5.81%) 296.47
dns 343886 ( 0.98%) 79272654 ( 0.29%) 230.52
realaud 8 ( 0.00%) 1334 ( 0.00%) 166.75
halflif 73 ( 0.00%) 12396 ( 0.00%) 169.81
starcra 18 ( 0.00%) 2612 ( 0.00%) 145.11
everque 1925 ( 0.01%) 1326768 ( 0.00%) 689.23
unreal 36 ( 0.00%) 3629 ( 0.00%) 100.81
quake 10 ( 0.00%) 1114 ( 0.00%) 111.40
cuseeme 1 ( 0.00%) 82 ( 0.00%) 82.00
other 4963387 ( 14.10%) 1493441639 ( 5.51%) 300.89
icmp 676600 ( 1.92%) 96126481 ( 0.35%) 142.07
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1270 ( 0.00%) 397668 ( 0.00%) 313.12
ip6 2516573 ( 7.15%) 910573541 ( 3.36%) 361.83
other 8905 ( 0.03%) 3016022 ( 0.01%) 338.69
frag 370 ( 0.00%) 395807 ( 0.00%) 1069.75
ip6 268795 ( 0.76%) 176257835 ( 0.65%) 655.73
tcp6 188915 ( 0.54%) 153341377 ( 0.57%) 811.70
http(s) 21546 ( 0.06%) 29996378 ( 0.11%) 1392.20
http(c) 16692 ( 0.05%) 1452707 ( 0.01%) 87.03
smtp 97 ( 0.00%) 43987 ( 0.00%) 453.47
dns 486 ( 0.00%) 82735 ( 0.00%) 170.24
bgp 93 ( 0.00%) 16857 ( 0.00%) 181.26
other 150001 ( 0.43%) 121748713 ( 0.45%) 811.65
udp6 59716 ( 0.17%) 19355068 ( 0.07%) 324.12
dns 47586 ( 0.14%) 12138364 ( 0.04%) 255.08
realaud 1 ( 0.00%) 108 ( 0.00%) 108.00
everque 1 ( 0.00%) 105 ( 0.00%) 105.00
quake 2 ( 0.00%) 209 ( 0.00%) 104.50
other 12126 ( 0.03%) 7216282 ( 0.03%) 595.11
icmp6 19559 ( 0.06%) 3024094 ( 0.01%) 154.61
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 491 ( 0.00%) 521804 ( 0.00%) 1062.74
tcpdump file: 201203031400.dump.gz (869.79 MB)