Traffic Trace Info
DumpFile: 201203091400.dump
FileSize: 3122.49MB
Id: 201203091400
StartTime: Fri Mar 9 14:00:00 2012
EndTime: Fri Mar 9 14:15:00 2012
TotalTime: 899.62 seconds
TotalCapSize: -1640.39MB CapLen: 96 bytes
# of packets: 43704319 (32118.33MB)
AvgRate: 299.47Mbps stddev:52.01M
IP flow (unique src/dst pair) Information
# of flows: 966567 (avg. 45.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 5.7% 4.4% 3.2% 2.5% 2.4% 1.8% 1.7% 1.6% 1.3%
IP address Information
# of IPv4 addresses: 526885
Top 10 bandwidth usage (bytes/total in %):
14.1% 9.9% 6.0% 6.0% 5.9% 5.8% 5.8% 4.7% 4.5% 4.1%
# of IPv6 addresses: 5417
Top 10 bandwidth usage (bytes/total in %):
30.3% 20.1% 15.7% 14.7% 5.6% 5.0% 5.0% 4.7% 4.1% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203091400.pktlen.png)
detailed numbers
[ 32- 63]: 9835661
[ 64- 127]: 9291464
[ 128- 255]: 1644263
[ 256- 511]: 912927
[ 512- 1023]: 968660
[ 1024- 2047]: 21051344
Protocol Breakdown
![[protocol breakdown chart]](201203091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 43704319 (100.00%) 33678506648 (100.00%) 770.60
ip 43350898 ( 99.19%) 33483816061 ( 99.42%) 772.39
tcp 36858329 ( 84.34%) 31636363964 ( 93.94%) 858.32
http(s) 12953074 ( 29.64%) 17370444753 ( 51.58%) 1341.03
http(c) 6475085 ( 14.82%) 1017648933 ( 3.02%) 157.16
squid 761414 ( 1.74%) 732501936 ( 2.17%) 962.03
smtp 97379 ( 0.22%) 47667391 ( 0.14%) 489.50
ftp 9088 ( 0.02%) 811299 ( 0.00%) 89.27
pop3 8457 ( 0.02%) 4820501 ( 0.01%) 570.00
imap 6610 ( 0.02%) 4841636 ( 0.01%) 732.47
telnet 694 ( 0.00%) 75606 ( 0.00%) 108.94
ssh 1236419 ( 2.83%) 244968236 ( 0.73%) 198.13
dns 13942 ( 0.03%) 1083601 ( 0.00%) 77.72
bgp 635 ( 0.00%) 113739 ( 0.00%) 179.12
napster 277 ( 0.00%) 19604 ( 0.00%) 70.77
realaud 83 ( 0.00%) 5419 ( 0.00%) 65.29
rtsp 7794 ( 0.02%) 7161355 ( 0.02%) 918.83
icecast 17083 ( 0.04%) 15610677 ( 0.05%) 913.81
hotline 32 ( 0.00%) 1934 ( 0.00%) 60.44
other 15270263 ( 34.94%) 12188587344 ( 36.19%) 798.19
udp 3789046 ( 8.67%) 986177522 ( 2.93%) 260.27
dns 603656 ( 1.38%) 133718751 ( 0.40%) 221.51
realaud 45 ( 0.00%) 7513 ( 0.00%) 166.96
halflif 17 ( 0.00%) 2090 ( 0.00%) 122.94
starcra 28 ( 0.00%) 3607 ( 0.00%) 128.82
everque 12119 ( 0.03%) 11504074 ( 0.03%) 949.26
unreal 7 ( 0.00%) 558 ( 0.00%) 79.71
quake 16 ( 0.00%) 2361 ( 0.00%) 147.56
cuseeme 11 ( 0.00%) 1213 ( 0.00%) 110.27
other 3173060 ( 7.26%) 840874231 ( 2.50%) 265.00
icmp 543696 ( 1.24%) 64543587 ( 0.19%) 118.71
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 12750 ( 0.03%) 4847892 ( 0.01%) 380.23
ip6 2130511 ( 4.87%) 785755083 ( 2.33%) 368.81
other 16381 ( 0.04%) 6108743 ( 0.02%) 372.92
frag 412 ( 0.00%) 449083 ( 0.00%) 1090.01
ip6 353421 ( 0.81%) 194690587 ( 0.58%) 550.87
tcp6 187841 ( 0.43%) 109513816 ( 0.33%) 583.01
http(s) 18837 ( 0.04%) 24824021 ( 0.07%) 1317.83
http(c) 44654 ( 0.10%) 4046799 ( 0.01%) 90.63
smtp 1018 ( 0.00%) 389608 ( 0.00%) 382.72
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 473 ( 0.00%) 86723 ( 0.00%) 183.35
bgp 84 ( 0.00%) 14858 ( 0.00%) 176.88
other 122758 ( 0.28%) 80150202 ( 0.24%) 652.91
udp6 127067 ( 0.29%) 73972801 ( 0.22%) 582.16
dns 69013 ( 0.16%) 18728297 ( 0.06%) 271.37
everque 2 ( 0.00%) 217 ( 0.00%) 108.50
quake 2 ( 0.00%) 214 ( 0.00%) 107.00
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 58049 ( 0.13%) 55243966 ( 0.16%) 951.68
icmp6 28685 ( 0.07%) 4163383 ( 0.01%) 145.14
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 9714 ( 0.02%) 7025095 ( 0.02%) 723.19
tcpdump file: 201203091400.dump.gz (1047.63 MB)