Traffic Trace Info
DumpFile: 201203111400.dump
FileSize: 2793.57MB
Id: 201203111400
StartTime: Sun Mar 11 14:00:00 2012
EndTime: Sun Mar 11 14:15:00 2012
TotalTime: 900.23 seconds
TotalCapSize: -1901.04MB CapLen: 96 bytes
# of packets: 39230406 (27701.58MB)
AvgRate: 258.13Mbps stddev:44.02M
IP flow (unique src/dst pair) Information
# of flows: 1732531 (avg. 22.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.3% 1.7% 1.5% 1.3% 1.1% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1388054
Top 10 bandwidth usage (bytes/total in %):
14.1% 12.4% 9.1% 7.1% 5.2% 4.6% 4.0% 3.9% 3.3% 2.9%
# of IPv6 addresses: 4750
Top 10 bandwidth usage (bytes/total in %):
22.0% 22.0% 14.1% 10.5% 9.5% 8.7% 6.9% 6.6% 5.7% 5.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203111400.pktlen.png)
detailed numbers
[ 32- 63]: 7632074
[ 64- 127]: 10001050
[ 128- 255]: 1642966
[ 256- 511]: 998557
[ 512- 1023]: 892231
[ 1024- 2047]: 18063528
Protocol Breakdown
![[protocol breakdown chart]](201203111400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39230406 (100.00%) 29047208087 (100.00%) 740.43
ip 38994357 ( 99.40%) 28919643287 ( 99.56%) 741.64
tcp 28290902 ( 72.11%) 25512591940 ( 87.83%) 901.79
http(s) 12197573 ( 31.09%) 16724364856 ( 57.58%) 1371.12
http(c) 5988515 ( 15.26%) 861104143 ( 2.96%) 143.79
squid 1716231 ( 4.37%) 1945544283 ( 6.70%) 1133.61
smtp 50854 ( 0.13%) 16987348 ( 0.06%) 334.04
ftp 10774 ( 0.03%) 932607 ( 0.00%) 86.56
pop3 1956 ( 0.00%) 425276 ( 0.00%) 217.42
imap 2004 ( 0.01%) 378166 ( 0.00%) 188.71
telnet 814 ( 0.00%) 87354 ( 0.00%) 107.31
ssh 579606 ( 1.48%) 89668173 ( 0.31%) 154.71
dns 11600 ( 0.03%) 902504 ( 0.00%) 77.80
bgp 642 ( 0.00%) 116439 ( 0.00%) 181.37
napster 35 ( 0.00%) 2854 ( 0.00%) 81.54
realaud 1 ( 0.00%) 74 ( 0.00%) 74.00
icecast 20930 ( 0.05%) 15999165 ( 0.06%) 764.41
hotline 19 ( 0.00%) 1736 ( 0.00%) 91.37
other 7709348 ( 19.65%) 5856076962 ( 20.16%) 759.61
udp 5854410 ( 14.92%) 2084568392 ( 7.18%) 356.07
dns 504377 ( 1.29%) 95051407 ( 0.33%) 188.45
rip 3 ( 0.00%) 292 ( 0.00%) 97.33
realaud 2 ( 0.00%) 186 ( 0.00%) 93.00
halflif 104 ( 0.00%) 19948 ( 0.00%) 191.81
starcra 10 ( 0.00%) 1183 ( 0.00%) 118.30
everque 6398 ( 0.02%) 5682231 ( 0.02%) 888.13
unreal 13 ( 0.00%) 1164 ( 0.00%) 89.54
quake 14 ( 0.00%) 1768 ( 0.00%) 126.29
cuseeme 407 ( 0.00%) 60504 ( 0.00%) 148.66
other 5343049 ( 13.62%) 1983727876 ( 6.83%) 371.27
icmp 1599469 ( 4.08%) 119799916 ( 0.41%) 74.90
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2445 ( 0.01%) 751246 ( 0.00%) 307.26
ip6 3232864 ( 8.24%) 1198323074 ( 4.13%) 370.67
other 14082 ( 0.04%) 3589449 ( 0.01%) 254.90
frag 266 ( 0.00%) 293471 ( 0.00%) 1103.27
ip6 236049 ( 0.60%) 127564800 ( 0.44%) 540.42
tcp6 124494 ( 0.32%) 76412876 ( 0.26%) 613.79
http(s) 7632 ( 0.02%) 8715759 ( 0.03%) 1142.00
http(c) 20830 ( 0.05%) 1846277 ( 0.01%) 88.64
smtp 48 ( 0.00%) 6528 ( 0.00%) 136.00
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 532 ( 0.00%) 96774 ( 0.00%) 181.91
bgp 83 ( 0.00%) 12349 ( 0.00%) 148.78
other 95352 ( 0.24%) 65733584 ( 0.23%) 689.38
udp6 78054 ( 0.20%) 45141283 ( 0.16%) 578.33
dns 47049 ( 0.12%) 11870076 ( 0.04%) 252.29
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 2 ( 0.00%) 229 ( 0.00%) 114.50
cuseeme 1 ( 0.00%) 122 ( 0.00%) 122.00
other 31001 ( 0.08%) 33270749 ( 0.11%) 1073.22
icmp6 31355 ( 0.08%) 4227918 ( 0.01%) 134.84
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2031 ( 0.01%) 1767113 ( 0.01%) 870.07
tcpdump file: 201203111400.dump.gz (967.97 MB)