Traffic Trace Info
DumpFile: 201203121400.dump
FileSize: 2416.91MB
Id: 201203121400
StartTime: Mon Mar 12 14:00:00 2012
EndTime: Mon Mar 12 14:15:00 2012
TotalTime: 900.16 seconds
TotalCapSize: 1898.99MB CapLen: 96 bytes
# of packets: 33941661 (21130.36MB)
AvgRate: 196.88Mbps stddev:31.78M
IP flow (unique src/dst pair) Information
# of flows: 3113979 (avg. 10.90 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.6% 3.0% 1.9% 1.6% 1.5% 1.2% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1883671
Top 10 bandwidth usage (bytes/total in %):
7.3% 6.6% 5.9% 5.1% 4.9% 4.2% 3.9% 3.6% 3.6% 3.4%
# of IPv6 addresses: 5597
Top 10 bandwidth usage (bytes/total in %):
33.6% 33.6% 21.2% 9.5% 8.9% 8.7% 8.1% 4.4% 4.4% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203121400.pktlen.png)
detailed numbers
[ 32- 63]: 7277048
[ 64- 127]: 9804198
[ 128- 255]: 1651211
[ 256- 511]: 945376
[ 512- 1023]: 828727
[ 1024- 2047]: 13435101
Protocol Breakdown
![[protocol breakdown chart]](201203121400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33941661 (100.00%) 22156786932 (100.00%) 652.79
ip 33705351 ( 99.30%) 22043847448 ( 99.49%) 654.02
tcp 22885458 ( 67.43%) 19166438732 ( 86.50%) 837.49
http(s) 11312153 ( 33.33%) 15106033069 ( 68.18%) 1335.38
http(c) 6435568 ( 18.96%) 888022887 ( 4.01%) 137.99
squid 959620 ( 2.83%) 1041424260 ( 4.70%) 1085.25
smtp 61907 ( 0.18%) 22459773 ( 0.10%) 362.80
ftp 16602 ( 0.05%) 1379262 ( 0.01%) 83.08
pop3 4269 ( 0.01%) 1400770 ( 0.01%) 328.13
imap 5993 ( 0.02%) 2085312 ( 0.01%) 347.96
telnet 3644 ( 0.01%) 265364 ( 0.00%) 72.82
ssh 121900 ( 0.36%) 15092248 ( 0.07%) 123.81
dns 12275 ( 0.04%) 934062 ( 0.00%) 76.09
bgp 665 ( 0.00%) 137667 ( 0.00%) 207.02
napster 381 ( 0.00%) 23944 ( 0.00%) 62.85
realaud 10 ( 0.00%) 1077 ( 0.00%) 107.70
icecast 25064 ( 0.07%) 21561107 ( 0.10%) 860.24
hotline 15 ( 0.00%) 1387 ( 0.00%) 92.47
other 3925391 ( 11.57%) 2065616483 ( 9.32%) 526.22
udp 5020734 ( 14.79%) 1485385520 ( 6.70%) 295.85
dns 637244 ( 1.88%) 143534565 ( 0.65%) 225.24
realaud 4 ( 0.00%) 770 ( 0.00%) 192.50
halflif 89 ( 0.00%) 8321 ( 0.00%) 93.49
starcra 29 ( 0.00%) 3238 ( 0.00%) 111.66
everque 12126 ( 0.04%) 11628237 ( 0.05%) 958.95
unreal 1 ( 0.00%) 72 ( 0.00%) 72.00
quake 11 ( 0.00%) 942 ( 0.00%) 85.64
cuseeme 7 ( 0.00%) 630 ( 0.00%) 90.00
other 4371186 ( 12.88%) 1330184519 ( 6.00%) 304.31
icmp 2928583 ( 8.63%) 201050027 ( 0.91%) 68.65
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 22960 ( 0.07%) 4610576 ( 0.02%) 200.81
ip6 2833527 ( 8.35%) 1183910624 ( 5.34%) 417.82
other 13904 ( 0.04%) 2432699 ( 0.01%) 174.96
frag 206 ( 0.00%) 235002 ( 0.00%) 1140.79
ip6 236310 ( 0.70%) 112939484 ( 0.51%) 477.93
tcp6 137502 ( 0.41%) 87563064 ( 0.40%) 636.81
http(s) 27658 ( 0.08%) 33739976 ( 0.15%) 1219.90
http(c) 49996 ( 0.15%) 4277649 ( 0.02%) 85.56
smtp 106 ( 0.00%) 27970 ( 0.00%) 263.87
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 364 ( 0.00%) 69829 ( 0.00%) 191.84
bgp 85 ( 0.00%) 12133 ( 0.00%) 142.74
other 59276 ( 0.17%) 49433902 ( 0.22%) 833.96
udp6 71469 ( 0.21%) 20036940 ( 0.09%) 280.36
dns 69513 ( 0.20%) 19820324 ( 0.09%) 285.13
everque 1 ( 0.00%) 116 ( 0.00%) 116.00
unreal 1 ( 0.00%) 103 ( 0.00%) 103.00
quake 2 ( 0.00%) 221 ( 0.00%) 110.50
cuseeme 1 ( 0.00%) 116 ( 0.00%) 116.00
other 1951 ( 0.01%) 216060 ( 0.00%) 110.74
icmp6 25738 ( 0.08%) 3742503 ( 0.02%) 145.41
ip6 86 ( 0.00%) 11698 ( 0.00%) 136.02
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1485 ( 0.00%) 1581199 ( 0.01%) 1064.78
tcpdump file: 201203121400.dump.gz (835.65 MB)