Traffic Trace Info
DumpFile: 201203131400.dump
FileSize: 2985.09MB
Id: 201203131400
StartTime: Tue Mar 13 14:00:00 2012
EndTime: Tue Mar 13 14:15:01 2012
TotalTime: 900.69 seconds
TotalCapSize: -1754.55MB CapLen: 96 bytes
# of packets: 42180784 (29806.83MB)
AvgRate: 277.64Mbps stddev:51.69M
IP flow (unique src/dst pair) Information
# of flows: 1964988 (avg. 21.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 3.3% 3.3% 2.8% 1.9% 1.8% 1.3% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1495305
Top 10 bandwidth usage (bytes/total in %):
8.7% 7.0% 6.7% 6.4% 4.6% 4.5% 3.8% 3.6% 3.5% 3.4%
# of IPv6 addresses: 5143
Top 10 bandwidth usage (bytes/total in %):
93.2% 89.4% 2.1% 1.4% 0.9% 0.9% 0.6% 0.6% 0.6% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203131400.pktlen.png)
detailed numbers
[ 32- 63]: 9577404
[ 64- 127]: 9547435
[ 128- 255]: 1701787
[ 256- 511]: 1016193
[ 512- 1023]: 956908
[ 1024- 2047]: 19381057
Protocol Breakdown
![[protocol breakdown chart]](201203131400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42180784 (100.00%) 31254729828 (100.00%) 740.97
ip 41463256 ( 98.30%) 30573329380 ( 97.82%) 737.36
tcp 29696517 ( 70.40%) 26082208243 ( 83.45%) 878.29
http(s) 14573353 ( 34.55%) 20037379174 ( 64.11%) 1374.93
http(c) 8329474 ( 19.75%) 1403266418 ( 4.49%) 168.47
squid 722127 ( 1.71%) 767530801 ( 2.46%) 1062.88
smtp 70946 ( 0.17%) 44281922 ( 0.14%) 624.16
ftp 7005 ( 0.02%) 774945 ( 0.00%) 110.63
pop3 5373 ( 0.01%) 2363617 ( 0.01%) 439.91
imap 3982 ( 0.01%) 881004 ( 0.00%) 221.25
telnet 6286 ( 0.01%) 461294 ( 0.00%) 73.38
ssh 26454 ( 0.06%) 4524546 ( 0.01%) 171.03
dns 13906 ( 0.03%) 1047898 ( 0.00%) 75.36
bgp 649 ( 0.00%) 131917 ( 0.00%) 203.26
napster 198 ( 0.00%) 12452 ( 0.00%) 62.89
realaud 44 ( 0.00%) 5118 ( 0.00%) 116.32
rtsp 34301 ( 0.08%) 20788376 ( 0.07%) 606.06
icecast 17348 ( 0.04%) 10348850 ( 0.03%) 596.54
hotline 98 ( 0.00%) 6468 ( 0.00%) 66.00
other 5884961 ( 13.95%) 3788402723 ( 12.12%) 643.74
udp 7219222 ( 17.11%) 3208802867 ( 10.27%) 444.48
dns 625328 ( 1.48%) 142264894 ( 0.46%) 227.50
realaud 4 ( 0.00%) 318 ( 0.00%) 79.50
halflif 80 ( 0.00%) 13279 ( 0.00%) 165.99
starcra 13 ( 0.00%) 1077 ( 0.00%) 82.85
everque 13674 ( 0.03%) 13880442 ( 0.04%) 1015.10
unreal 4 ( 0.00%) 372 ( 0.00%) 93.00
quake 14 ( 0.00%) 1914 ( 0.00%) 136.71
cuseeme 2 ( 0.00%) 164 ( 0.00%) 82.00
other 5736710 ( 13.60%) 3002013515 ( 9.60%) 523.30
icmp 1651825 ( 3.92%) 130142061 ( 0.42%) 78.79
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 10897 ( 0.03%) 3120230 ( 0.01%) 286.34
ip6 2869587 ( 6.80%) 1146672335 ( 3.67%) 399.59
other 15023 ( 0.04%) 2364374 ( 0.01%) 157.38
frag 1777870 ( 4.21%) 1356502661 ( 4.34%) 762.99
ip6 717526 ( 1.70%) 681400328 ( 2.18%) 949.65
tcp6 628201 ( 1.49%) 658786057 ( 2.11%) 1048.69
http(s) 20320 ( 0.05%) 27518171 ( 0.09%) 1354.24
http(c) 114412 ( 0.27%) 10322330 ( 0.03%) 90.22
smtp 324 ( 0.00%) 290901 ( 0.00%) 897.84
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 355 ( 0.00%) 66834 ( 0.00%) 188.26
bgp 93 ( 0.00%) 15124 ( 0.00%) 162.62
other 492680 ( 1.17%) 620571092 ( 1.99%) 1259.58
udp6 67144 ( 0.16%) 18205668 ( 0.06%) 271.14
dns 66030 ( 0.16%) 18066881 ( 0.06%) 273.62
halflif 1 ( 0.00%) 102 ( 0.00%) 102.00
unreal 1 ( 0.00%) 109 ( 0.00%) 109.00
other 1112 ( 0.00%) 138576 ( 0.00%) 124.62
icmp6 20886 ( 0.05%) 3140561 ( 0.01%) 150.37
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1181 ( 0.00%) 1252550 ( 0.00%) 1060.58
tcpdump file: 201203131400.dump.gz (1001.50 MB)