Traffic Trace Info
DumpFile: 201203051400.dump
FileSize: 1916.86MB
Id: 201203051400
StartTime: Mon Mar 5 14:00:01 2012
EndTime: Mon Mar 5 14:15:00 2012
TotalTime: 899.70 seconds
TotalCapSize: 1514.59MB CapLen: 96 bytes
# of packets: 26362574 (18137.07MB)
AvgRate: 169.12Mbps stddev:35.15M
IP flow (unique src/dst pair) Information
# of flows: 901047 (avg. 29.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 1.3% 1.2% 1.2% 1.2% 1.1% 1.0% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 496834
Top 10 bandwidth usage (bytes/total in %):
17.2% 11.1% 5.9% 5.1% 4.2% 2.9% 2.8% 2.6% 2.1% 1.8%
# of IPv6 addresses: 5744
Top 10 bandwidth usage (bytes/total in %):
26.5% 24.4% 18.5% 8.0% 7.6% 6.8% 6.0% 4.5% 4.5% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203051400.pktlen.png)
detailed numbers
[ 32- 63]: 4920174
[ 64- 127]: 7072675
[ 128- 255]: 1182815
[ 256- 511]: 704051
[ 512- 1023]: 694065
[ 1024- 2047]: 11788794
Protocol Breakdown
![[protocol breakdown chart]](201203051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26362574 (100.00%) 19018099952 (100.00%) 721.41
ip 25866052 ( 98.12%) 18652566037 ( 98.08%) 721.12
tcp 21116023 ( 80.10%) 16977767925 ( 89.27%) 804.02
http(s) 8759161 ( 33.23%) 11712843786 ( 61.59%) 1337.21
http(c) 6558155 ( 24.88%) 867684289 ( 4.56%) 132.31
squid 473032 ( 1.79%) 500528497 ( 2.63%) 1058.13
smtp 145421 ( 0.55%) 24133943 ( 0.13%) 165.96
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 10817 ( 0.04%) 1034692 ( 0.01%) 95.65
pop3 3758 ( 0.01%) 1345079 ( 0.01%) 357.92
imap 2265 ( 0.01%) 1078399 ( 0.01%) 476.11
telnet 2035 ( 0.01%) 169102 ( 0.00%) 83.10
ssh 128017 ( 0.49%) 66038595 ( 0.35%) 515.86
dns 20207 ( 0.08%) 3538107 ( 0.02%) 175.09
bgp 644 ( 0.00%) 128133 ( 0.00%) 198.96
napster 483 ( 0.00%) 30577 ( 0.00%) 63.31
realaud 32 ( 0.00%) 3769 ( 0.00%) 117.78
rtsp 15504 ( 0.06%) 19331180 ( 0.10%) 1246.85
icecast 9249 ( 0.04%) 6005163 ( 0.03%) 649.28
hotline 105 ( 0.00%) 6741 ( 0.00%) 64.20
other 4987137 ( 18.92%) 3773867813 ( 19.84%) 756.72
udp 2436871 ( 9.24%) 896352831 ( 4.71%) 367.83
dns 652576 ( 2.48%) 152142751 ( 0.80%) 233.14
realaud 7 ( 0.00%) 648 ( 0.00%) 92.57
halflif 111 ( 0.00%) 11791 ( 0.00%) 106.23
starcra 36 ( 0.00%) 4691 ( 0.00%) 130.31
everque 4112 ( 0.02%) 3795791 ( 0.02%) 923.10
unreal 22 ( 0.00%) 3434 ( 0.00%) 156.09
quake 8 ( 0.00%) 770 ( 0.00%) 96.25
cuseeme 12 ( 0.00%) 1546 ( 0.00%) 128.83
other 1779918 ( 6.75%) 740344669 ( 3.89%) 415.94
icmp 654826 ( 2.48%) 109961443 ( 0.58%) 167.92
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2740 ( 0.01%) 657032 ( 0.00%) 239.79
ip6 1648112 ( 6.25%) 664967893 ( 3.50%) 403.47
other 7295 ( 0.03%) 2839643 ( 0.01%) 389.26
frag 1099 ( 0.00%) 940599 ( 0.00%) 855.87
ip6 496522 ( 1.88%) 365533915 ( 1.92%) 736.19
tcp6 345056 ( 1.31%) 303417229 ( 1.60%) 879.33
http(s) 19795 ( 0.08%) 25037421 ( 0.13%) 1264.84
http(c) 31166 ( 0.12%) 2723604 ( 0.01%) 87.39
smtp 95 ( 0.00%) 19316 ( 0.00%) 203.33
pop3 43 ( 0.00%) 19228 ( 0.00%) 447.16
ssh 304 ( 0.00%) 294954 ( 0.00%) 970.24
dns 359 ( 0.00%) 72516 ( 0.00%) 201.99
bgp 92 ( 0.00%) 18629 ( 0.00%) 202.49
other 293202 ( 1.11%) 275231561 ( 1.45%) 938.71
udp6 121803 ( 0.46%) 54885407 ( 0.29%) 450.61
dns 68023 ( 0.26%) 18964290 ( 0.10%) 278.79
realaud 3 ( 0.00%) 329 ( 0.00%) 109.67
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
other 53776 ( 0.20%) 35920682 ( 0.19%) 667.97
icmp6 24210 ( 0.09%) 3306321 ( 0.02%) 136.57
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5340 ( 0.02%) 3909584 ( 0.02%) 732.13
tcpdump file: 201203051400.dump.gz (631.48 MB)