Traffic Trace Info
DumpFile: 201203071400.dump
FileSize: 3095.41MB
Id: 201203071400
StartTime: Wed Mar 7 14:00:00 2012
EndTime: Wed Mar 7 14:15:00 2012
TotalTime: 900.17 seconds
TotalCapSize: -1651.95MB CapLen: 96 bytes
# of packets: 42686858 (35185.66MB)
AvgRate: 327.98Mbps stddev:60.36M
IP flow (unique src/dst pair) Information
# of flows: 777176 (avg. 54.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.9% 3.6% 3.5% 3.5% 2.3% 2.2% 1.9% 1.9% 1.8% 1.8%
IP address Information
# of IPv4 addresses: 444193
Top 10 bandwidth usage (bytes/total in %):
18.6% 14.5% 13.2% 9.3% 6.0% 4.5% 4.2% 3.6% 3.6% 3.5%
# of IPv6 addresses: 6083
Top 10 bandwidth usage (bytes/total in %):
19.6% 19.3% 10.1% 9.0% 8.8% 8.7% 7.4% 4.9% 4.6% 4.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203071400.pktlen.png)
detailed numbers
[ 32- 63]: 7524158
[ 64- 127]: 8249738
[ 128- 255]: 1004566
[ 256- 511]: 714221
[ 512- 1023]: 2166122
[ 1024- 2047]: 23028053
Protocol Breakdown
![[protocol breakdown chart]](201203071400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42686858 (100.00%) 36894836507 (100.00%) 864.31
ip 42415742 ( 99.36%) 36791194054 ( 99.72%) 867.39
tcp 38013647 ( 89.05%) 35426700269 ( 96.02%) 931.95
http(s) 17435214 ( 40.84%) 24210142829 ( 65.62%) 1388.58
http(c) 7232374 ( 16.94%) 803637878 ( 2.18%) 111.12
squid 728515 ( 1.71%) 709869188 ( 1.92%) 974.41
smtp 67412 ( 0.16%) 18488608 ( 0.05%) 274.26
ftp 8441 ( 0.02%) 758639 ( 0.00%) 89.88
pop3 5185 ( 0.01%) 1806887 ( 0.00%) 348.48
imap 2223 ( 0.01%) 773148 ( 0.00%) 347.79
telnet 1053 ( 0.00%) 100924 ( 0.00%) 95.84
ssh 26911 ( 0.06%) 7555522 ( 0.02%) 280.76
dns 15024 ( 0.04%) 3788174 ( 0.01%) 252.14
bgp 613 ( 0.00%) 108713 ( 0.00%) 177.35
napster 351 ( 0.00%) 22078 ( 0.00%) 62.90
icecast 29096 ( 0.07%) 18221697 ( 0.05%) 626.26
hotline 16 ( 0.00%) 1044 ( 0.00%) 65.25
other 12461219 ( 29.19%) 9651424940 ( 26.16%) 774.52
udp 2232713 ( 5.23%) 743942701 ( 2.02%) 333.20
dns 623854 ( 1.46%) 141304418 ( 0.38%) 226.50
rip 1 ( 0.00%) 70 ( 0.00%) 70.00
realaud 7 ( 0.00%) 620 ( 0.00%) 88.57
halflif 15 ( 0.00%) 1561 ( 0.00%) 104.07
starcra 11 ( 0.00%) 1159 ( 0.00%) 105.36
everque 2699 ( 0.01%) 2443971 ( 0.01%) 905.51
unreal 4 ( 0.00%) 418 ( 0.00%) 104.50
quake 13 ( 0.00%) 1378 ( 0.00%) 106.00
cuseeme 2 ( 0.00%) 217 ( 0.00%) 108.50
other 1606043 ( 3.76%) 600147038 ( 1.63%) 373.68
icmp 524314 ( 1.23%) 55092758 ( 0.15%) 105.08
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 22897 ( 0.05%) 9956086 ( 0.03%) 434.82
ip6 1613800 ( 3.78%) 554014041 ( 1.50%) 343.30
other 8186 ( 0.02%) 1468929 ( 0.00%) 179.44
frag 372 ( 0.00%) 398950 ( 0.00%) 1072.45
ip6 271116 ( 0.64%) 103642453 ( 0.28%) 382.28
tcp6 146116 ( 0.34%) 68779514 ( 0.19%) 470.72
http(s) 19308 ( 0.05%) 22319429 ( 0.06%) 1155.97
http(c) 37128 ( 0.09%) 3507989 ( 0.01%) 94.48
squid 734 ( 0.00%) 565507 ( 0.00%) 770.45
smtp 311 ( 0.00%) 126359 ( 0.00%) 406.30
pop3 33 ( 0.00%) 2943 ( 0.00%) 89.18
ssh 836 ( 0.00%) 215784 ( 0.00%) 258.11
dns 522 ( 0.00%) 84103 ( 0.00%) 161.12
bgp 87 ( 0.00%) 15976 ( 0.00%) 183.63
other 87157 ( 0.20%) 41941424 ( 0.11%) 481.22
udp6 91640 ( 0.21%) 29230996 ( 0.08%) 318.98
dns 74303 ( 0.17%) 20427072 ( 0.06%) 274.92
halflif 1 ( 0.00%) 110 ( 0.00%) 110.00
everque 2 ( 0.00%) 211 ( 0.00%) 105.50
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 17333 ( 0.04%) 8803499 ( 0.02%) 507.90
icmp6 31961 ( 0.07%) 4551134 ( 0.01%) 142.40
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1285 ( 0.00%) 1065317 ( 0.00%) 829.04
tcpdump file: 201203071400.dump.gz (942.57 MB)