Traffic Trace Info
DumpFile: 201203101400.dump
FileSize: 2662.76MB
Id: 201203101400
StartTime: Sat Mar 10 14:00:01 2012
EndTime: Sat Mar 10 14:15:01 2012
TotalTime: 899.97 seconds
TotalCapSize: -2001.56MB CapLen: 96 bytes
# of packets: 37245108 (27028.16MB)
AvgRate: 251.84Mbps stddev:63.19M
IP flow (unique src/dst pair) Information
# of flows: 1827958 (avg. 20.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 5.4% 4.0% 2.6% 2.5% 1.9% 1.3% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1441310
Top 10 bandwidth usage (bytes/total in %):
15.1% 9.7% 9.4% 6.4% 5.8% 5.8% 5.5% 5.5% 4.7% 4.1%
# of IPv6 addresses: 5698
Top 10 bandwidth usage (bytes/total in %):
34.8% 26.8% 18.4% 8.5% 5.3% 5.1% 3.8% 3.7% 3.7% 2.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203101400.pktlen.png)
detailed numbers
[ 32- 63]: 7526878
[ 64- 127]: 8949183
[ 128- 255]: 1456000
[ 256- 511]: 831381
[ 512- 1023]: 740639
[ 1024- 2047]: 17741027
Protocol Breakdown
![[protocol breakdown chart]](201203101400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37245108 (100.00%) 28341076860 (100.00%) 760.93
ip 36621349 ( 98.33%) 28170069804 ( 99.40%) 769.23
tcp 27256279 ( 73.18%) 25449422529 ( 89.80%) 933.71
http(s) 13605373 ( 36.53%) 18816860611 ( 66.39%) 1383.05
http(c) 5814854 ( 15.61%) 577067402 ( 2.04%) 99.24
squid 936263 ( 2.51%) 919592447 ( 3.24%) 982.19
smtp 39369 ( 0.11%) 6907035 ( 0.02%) 175.44
ftp 16155 ( 0.04%) 1419814 ( 0.01%) 87.89
pop3 3620 ( 0.01%) 573927 ( 0.00%) 158.54
imap 3696 ( 0.01%) 573497 ( 0.00%) 155.17
telnet 1399 ( 0.00%) 129719 ( 0.00%) 92.72
ssh 58504 ( 0.16%) 10733842 ( 0.04%) 183.47
dns 14067 ( 0.04%) 1696176 ( 0.01%) 120.58
bgp 640 ( 0.00%) 119149 ( 0.00%) 186.17
napster 253 ( 0.00%) 17013 ( 0.00%) 67.25
realaud 4 ( 0.00%) 254 ( 0.00%) 63.50
icecast 12117 ( 0.03%) 6466221 ( 0.02%) 533.65
hotline 22 ( 0.00%) 1404 ( 0.00%) 63.82
other 6749917 ( 18.12%) 5107262458 ( 18.02%) 756.64
udp 4893830 ( 13.14%) 1506815076 ( 5.32%) 307.90
dns 498086 ( 1.34%) 101717902 ( 0.36%) 204.22
realaud 3 ( 0.00%) 296 ( 0.00%) 98.67
halflif 345 ( 0.00%) 28151 ( 0.00%) 81.60
starcra 6 ( 0.00%) 788 ( 0.00%) 131.33
everque 12281 ( 0.03%) 11878174 ( 0.04%) 967.20
unreal 29 ( 0.00%) 2123 ( 0.00%) 73.21
quake 8 ( 0.00%) 1279 ( 0.00%) 159.88
cuseeme 1 ( 0.00%) 87 ( 0.00%) 87.00
other 4383042 ( 11.77%) 1393165474 ( 4.92%) 317.85
icmp 1600448 ( 4.30%) 121183077 ( 0.43%) 75.72
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2440 ( 0.01%) 739040 ( 0.00%) 302.89
ip6 2853575 ( 7.66%) 1089445927 ( 3.84%) 381.78
other 14592 ( 0.04%) 2444885 ( 0.01%) 167.55
frag 1699 ( 0.00%) 1343504 ( 0.00%) 790.76
ip6 623759 ( 1.67%) 171007056 ( 0.60%) 274.16
tcp6 501365 ( 1.35%) 127877769 ( 0.45%) 255.06
http(s) 9437 ( 0.03%) 11710757 ( 0.04%) 1240.94
http(c) 21586 ( 0.06%) 1880939 ( 0.01%) 87.14
smtp 222 ( 0.00%) 139250 ( 0.00%) 627.25
ftp 68 ( 0.00%) 8299 ( 0.00%) 122.04
dns 379 ( 0.00%) 73107 ( 0.00%) 192.89
bgp 85 ( 0.00%) 13077 ( 0.00%) 153.85
other 469588 ( 1.26%) 114052340 ( 0.40%) 242.88
udp6 83238 ( 0.22%) 34155179 ( 0.12%) 410.33
dns 51747 ( 0.14%) 13693307 ( 0.05%) 264.62
starcra 1 ( 0.00%) 105 ( 0.00%) 105.00
quake 1 ( 0.00%) 112 ( 0.00%) 112.00
other 31489 ( 0.08%) 20461655 ( 0.07%) 649.80
icmp6 33161 ( 0.09%) 4464746 ( 0.02%) 134.64
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5883 ( 0.02%) 4494106 ( 0.02%) 763.91
tcpdump file: 201203101400.dump.gz (892.68 MB)