Traffic Trace Info
DumpFile: 201203081400.dump
FileSize: 2533.19MB
Id: 201203081400
StartTime: Thu Mar 8 14:00:01 2012
EndTime: Thu Mar 8 14:15:01 2012
TotalTime: 900.05 seconds
TotalCapSize: 2001.45MB CapLen: 96 bytes
# of packets: 34847737 (27881.23MB)
AvgRate: 259.84Mbps stddev:48.87M
IP flow (unique src/dst pair) Information
# of flows: 659379 (avg. 52.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.4% 6.1% 2.9% 2.0% 1.8% 1.2% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 353502
Top 10 bandwidth usage (bytes/total in %):
14.7% 14.7% 9.6% 9.2% 7.8% 6.6% 6.4% 4.3% 3.1% 3.0%
# of IPv6 addresses: 5626
Top 10 bandwidth usage (bytes/total in %):
31.8% 17.7% 16.8% 13.2% 10.2% 10.1% 5.6% 5.3% 5.1% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203081400.pktlen.png)
detailed numbers
[ 32- 63]: 6020150
[ 64- 127]: 7499668
[ 128- 255]: 1233571
[ 256- 511]: 829274
[ 512- 1023]: 860870
[ 1024- 2047]: 18404204
Protocol Breakdown
![[protocol breakdown chart]](201203081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34847737 (100.00%) 29235586344 (100.00%) 838.95
ip 34399172 ( 98.71%) 28963530657 ( 99.07%) 841.98
tcp 30647831 ( 87.95%) 27541005254 ( 94.20%) 898.63
http(s) 12268337 ( 35.21%) 16703014259 ( 57.13%) 1361.47
http(c) 6715837 ( 19.27%) 1483821922 ( 5.08%) 220.94
squid 595178 ( 1.71%) 680406286 ( 2.33%) 1143.20
smtp 64247 ( 0.18%) 20621307 ( 0.07%) 320.97
ftp 34371 ( 0.10%) 2770524 ( 0.01%) 80.61
pop3 4641 ( 0.01%) 1752901 ( 0.01%) 377.70
imap 1686 ( 0.00%) 1235592 ( 0.00%) 732.85
telnet 1373 ( 0.00%) 123236 ( 0.00%) 89.76
ssh 17155 ( 0.05%) 3747248 ( 0.01%) 218.43
dns 16479 ( 0.05%) 4042542 ( 0.01%) 245.31
bgp 621 ( 0.00%) 105638 ( 0.00%) 170.11
napster 185 ( 0.00%) 13712 ( 0.00%) 74.12
realaud 2 ( 0.00%) 126 ( 0.00%) 63.00
rtsp 8910 ( 0.03%) 11630694 ( 0.04%) 1305.35
icecast 26075 ( 0.07%) 32029848 ( 0.11%) 1228.37
hotline 12 ( 0.00%) 1131 ( 0.00%) 94.25
other 10892722 ( 31.26%) 8595688288 ( 29.40%) 789.12
udp 2067214 ( 5.93%) 749258713 ( 2.56%) 362.45
dns 646430 ( 1.86%) 147009889 ( 0.50%) 227.42
realaud 5 ( 0.00%) 497 ( 0.00%) 99.40
halflif 195 ( 0.00%) 17205 ( 0.00%) 88.23
starcra 32 ( 0.00%) 5322 ( 0.00%) 166.31
everque 5632 ( 0.02%) 5345685 ( 0.02%) 949.16
unreal 5 ( 0.00%) 473 ( 0.00%) 94.60
quake 12 ( 0.00%) 1317 ( 0.00%) 109.75
cuseeme 3 ( 0.00%) 484 ( 0.00%) 161.33
other 1414844 ( 4.06%) 596846805 ( 2.04%) 421.85
icmp 495528 ( 1.42%) 52867858 ( 0.18%) 106.69
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 7805 ( 0.02%) 1595550 ( 0.01%) 204.43
ip6 1168894 ( 3.35%) 613162030 ( 2.10%) 524.57
other 11715 ( 0.03%) 5621982 ( 0.02%) 479.90
frag 6685 ( 0.02%) 5046754 ( 0.02%) 754.94
ip6 448565 ( 1.29%) 272055687 ( 0.93%) 606.50
tcp6 241306 ( 0.69%) 147527886 ( 0.50%) 611.37
http(s) 45042 ( 0.13%) 58404680 ( 0.20%) 1296.67
http(c) 70991 ( 0.20%) 6218433 ( 0.02%) 87.59
smtp 93 ( 0.00%) 28221 ( 0.00%) 303.45
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 544 ( 0.00%) 81811 ( 0.00%) 150.39
bgp 93 ( 0.00%) 15834 ( 0.00%) 170.26
other 124526 ( 0.36%) 82777302 ( 0.28%) 664.74
udp6 152790 ( 0.44%) 100428386 ( 0.34%) 657.30
dns 76704 ( 0.22%) 22887242 ( 0.08%) 298.38
realaud 1 ( 0.00%) 108 ( 0.00%) 108.00
halflif 2 ( 0.00%) 203 ( 0.00%) 101.50
unreal 1 ( 0.00%) 112 ( 0.00%) 112.00
quake 1 ( 0.00%) 97 ( 0.00%) 97.00
other 76081 ( 0.22%) 77540624 ( 0.27%) 1019.19
icmp6 26152 ( 0.08%) 3806838 ( 0.01%) 145.57
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 28202 ( 0.08%) 20276949 ( 0.07%) 718.99
tcpdump file: 201203081400.dump.gz (797.39 MB)