Traffic Trace Info
DumpFile: 201203141400.dump
FileSize: 2646.52MB
Id: 201203141400
StartTime: Wed Mar 14 14:00:01 2012
EndTime: Wed Mar 14 14:15:00 2012
TotalTime: 899.42 seconds
TotalCapSize: -2006.51MB CapLen: 96 bytes
# of packets: 36504878 (25800.37MB)
AvgRate: 240.56Mbps stddev:35.72M
IP flow (unique src/dst pair) Information
# of flows: 1064964 (avg. 34.28 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 4.2% 4.2% 2.8% 1.9% 1.7% 1.3% 1.2% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 494976
Top 10 bandwidth usage (bytes/total in %):
9.2% 7.2% 6.8% 6.3% 5.5% 5.3% 5.0% 4.9% 4.8% 4.4%
# of IPv6 addresses: 5133
Top 10 bandwidth usage (bytes/total in %):
22.8% 18.7% 13.8% 13.8% 11.5% 9.1% 5.9% 5.1% 5.0% 4.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203141400.pktlen.png)
detailed numbers
[ 32- 63]: 6132703
[ 64- 127]: 10329515
[ 128- 255]: 1477309
[ 256- 511]: 1006698
[ 512- 1023]: 861171
[ 1024- 2047]: 16697482
Protocol Breakdown
![[protocol breakdown chart]](201203141400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36504878 (100.00%) 27053645599 (100.00%) 741.10
ip 36164444 ( 99.07%) 26831248917 ( 99.18%) 741.92
tcp 27589364 ( 75.58%) 23674068694 ( 87.51%) 858.09
http(s) 14156839 ( 38.78%) 19142024046 ( 70.76%) 1352.14
http(c) 7362188 ( 20.17%) 1097269993 ( 4.06%) 149.04
squid 89903 ( 0.25%) 77618443 ( 0.29%) 863.36
smtp 54389 ( 0.15%) 15249712 ( 0.06%) 280.38
ftp 11153 ( 0.03%) 1045100 ( 0.00%) 93.71
pop3 7931 ( 0.02%) 1518893 ( 0.01%) 191.51
imap 2950 ( 0.01%) 775140 ( 0.00%) 262.76
telnet 7646 ( 0.02%) 563454 ( 0.00%) 73.69
ssh 22861 ( 0.06%) 4482230 ( 0.02%) 196.06
dns 8509 ( 0.02%) 691942 ( 0.00%) 81.32
bgp 679 ( 0.00%) 163381 ( 0.00%) 240.62
napster 116 ( 0.00%) 7930 ( 0.00%) 68.36
realaud 47 ( 0.00%) 3640 ( 0.00%) 77.45
rtsp 85 ( 0.00%) 5270 ( 0.00%) 62.00
icecast 1134 ( 0.00%) 481610 ( 0.00%) 424.70
hotline 162 ( 0.00%) 12042 ( 0.00%) 74.33
other 5862770 ( 16.06%) 3332155704 ( 12.32%) 568.36
udp 5052458 ( 13.84%) 1711630652 ( 6.33%) 338.77
dns 640682 ( 1.76%) 143752103 ( 0.53%) 224.37
realaud 12 ( 0.00%) 1395 ( 0.00%) 116.25
halflif 43 ( 0.00%) 7767 ( 0.00%) 180.63
starcra 97 ( 0.00%) 8940 ( 0.00%) 92.16
everque 1559 ( 0.00%) 1115647 ( 0.00%) 715.62
unreal 8 ( 0.00%) 1283 ( 0.00%) 160.38
quake 32 ( 0.00%) 2616 ( 0.00%) 81.75
cuseeme 3 ( 0.00%) 249 ( 0.00%) 83.00
other 4408127 ( 12.08%) 1566544880 ( 5.79%) 355.38
icmp 626553 ( 1.72%) 70436956 ( 0.26%) 112.42
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2199 ( 0.01%) 739002 ( 0.00%) 336.06
ip6 2876628 ( 7.88%) 1371819254 ( 5.07%) 476.88
other 17058 ( 0.05%) 2535199 ( 0.01%) 148.62
frag 4895 ( 0.01%) 4156422 ( 0.02%) 849.12
ip6 340432 ( 0.93%) 222396562 ( 0.82%) 653.28
tcp6 210985 ( 0.58%) 176289351 ( 0.65%) 835.55
http(s) 39932 ( 0.11%) 54322243 ( 0.20%) 1360.37
http(c) 34537 ( 0.09%) 5535677 ( 0.02%) 160.28
smtp 799 ( 0.00%) 280360 ( 0.00%) 350.89
ftp 38 ( 0.00%) 3309 ( 0.00%) 87.08
pop3 11 ( 0.00%) 981 ( 0.00%) 89.18
dns 353 ( 0.00%) 59986 ( 0.00%) 169.93
bgp 100 ( 0.00%) 27695 ( 0.00%) 276.95
other 135215 ( 0.37%) 116059100 ( 0.43%) 858.33
udp6 101911 ( 0.28%) 38436320 ( 0.14%) 377.16
dns 67378 ( 0.18%) 19549232 ( 0.07%) 290.14
realaud 1 ( 0.00%) 102 ( 0.00%) 102.00
halflif 3 ( 0.00%) 333 ( 0.00%) 111.00
everque 1 ( 0.00%) 123 ( 0.00%) 123.00
quake 2 ( 0.00%) 208 ( 0.00%) 104.00
other 34526 ( 0.09%) 18886322 ( 0.07%) 547.02
icmp6 22028 ( 0.06%) 3394221 ( 0.01%) 154.09
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5395 ( 0.01%) 4261246 ( 0.02%) 789.85
tcpdump file: 201203141400.dump.gz (899.80 MB)