Traffic Trace Info
DumpFile: 201203041400.dump
FileSize: 2713.97MB
Id: 201203041400
StartTime: Sun Mar 4 14:00:00 2012
EndTime: Sun Mar 4 14:15:01 2012
TotalTime: 900.74 seconds
TotalCapSize: -1953.51MB CapLen: 96 bytes
# of packets: 37451961 (26663.63MB)
AvgRate: 248.34Mbps stddev:62.03M
IP flow (unique src/dst pair) Information
# of flows: 1040706 (avg. 35.99 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 1.8% 1.8% 1.2% 1.2% 1.1% 1.0% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 585801
Top 10 bandwidth usage (bytes/total in %):
28.7% 10.5% 6.8% 6.1% 5.1% 3.5% 2.9% 2.6% 2.2% 2.0%
# of IPv6 addresses: 4400
Top 10 bandwidth usage (bytes/total in %):
31.9% 16.5% 14.0% 12.6% 12.3% 10.3% 6.5% 5.8% 3.4% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203041400.pktlen.png)
detailed numbers
[ 32- 63]: 5141346
[ 64- 127]: 11520609
[ 128- 255]: 1754657
[ 256- 511]: 968193
[ 512- 1023]: 812078
[ 1024- 2047]: 17255078
Protocol Breakdown
![[protocol breakdown chart]](201203041400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37451961 (100.00%) 27958841223 (100.00%) 746.53
ip 37296071 ( 99.58%) 27899582931 ( 99.79%) 748.06
tcp 27953520 ( 74.64%) 24933816085 ( 89.18%) 891.97
http(s) 13641159 ( 36.42%) 19088302897 ( 68.27%) 1399.32
http(c) 7591106 ( 20.27%) 874244041 ( 3.13%) 115.17
squid 236421 ( 0.63%) 207572613 ( 0.74%) 877.98
smtp 35627 ( 0.10%) 5784514 ( 0.02%) 162.36
ftp 11594 ( 0.03%) 991163 ( 0.00%) 85.49
pop3 4195 ( 0.01%) 2825616 ( 0.01%) 673.57
imap 1153 ( 0.00%) 419353 ( 0.00%) 363.71
telnet 945 ( 0.00%) 96295 ( 0.00%) 101.90
ssh 342154 ( 0.91%) 101007493 ( 0.36%) 295.21
dns 20502 ( 0.05%) 4398225 ( 0.02%) 214.53
bgp 618 ( 0.00%) 108378 ( 0.00%) 175.37
napster 352 ( 0.00%) 21851 ( 0.00%) 62.08
realaud 111 ( 0.00%) 7340 ( 0.00%) 66.13
rtsp 6532 ( 0.02%) 7705614 ( 0.03%) 1179.67
icecast 789 ( 0.00%) 222666 ( 0.00%) 282.21
hotline 93 ( 0.00%) 6713 ( 0.00%) 72.18
other 6060169 ( 16.18%) 4640101313 ( 16.60%) 765.67
udp 5620097 ( 15.01%) 1832791910 ( 6.56%) 326.11
dns 411528 ( 1.10%) 80564856 ( 0.29%) 195.77
realaud 8 ( 0.00%) 819 ( 0.00%) 102.38
halflif 36 ( 0.00%) 5809 ( 0.00%) 161.36
starcra 35 ( 0.00%) 3705 ( 0.00%) 105.86
everque 11641 ( 0.03%) 11287358 ( 0.04%) 969.62
unreal 5 ( 0.00%) 706 ( 0.00%) 141.20
quake 13 ( 0.00%) 1381 ( 0.00%) 106.23
cuseeme 22 ( 0.00%) 2987 ( 0.00%) 135.77
other 5196459 ( 13.87%) 1740880906 ( 6.23%) 335.01
icmp 630135 ( 1.68%) 92701037 ( 0.33%) 147.11
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 205 ( 0.00%) 77150 ( 0.00%) 376.34
ip6 3080910 ( 8.23%) 1036899219 ( 3.71%) 336.56
other 11019 ( 0.03%) 3278260 ( 0.01%) 297.51
frag 1405 ( 0.00%) 1108007 ( 0.00%) 788.62
ip6 155890 ( 0.42%) 59258292 ( 0.21%) 380.13
tcp6 73539 ( 0.20%) 39903777 ( 0.14%) 542.62
http(s) 9542 ( 0.03%) 10931037 ( 0.04%) 1145.57
http(c) 19509 ( 0.05%) 1836267 ( 0.01%) 94.12
squid 123 ( 0.00%) 10430 ( 0.00%) 84.80
smtp 170 ( 0.00%) 70331 ( 0.00%) 413.71
dns 331 ( 0.00%) 62414 ( 0.00%) 188.56
bgp 93 ( 0.00%) 16298 ( 0.00%) 175.25
other 43771 ( 0.12%) 26977000 ( 0.10%) 616.32
udp6 50750 ( 0.14%) 12753198 ( 0.05%) 251.29
dns 47982 ( 0.13%) 12442048 ( 0.04%) 259.31
halflif 1 ( 0.00%) 112 ( 0.00%) 112.00
unreal 1 ( 0.00%) 96 ( 0.00%) 96.00
other 2766 ( 0.01%) 310942 ( 0.00%) 112.42
icmp6 28117 ( 0.08%) 4061734 ( 0.01%) 144.46
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3370 ( 0.01%) 2524091 ( 0.01%) 748.99
tcpdump file: 201203041400.dump.gz (894.13 MB)