Traffic Trace Info
DumpFile: 201203151400.dump
FileSize: 2765.24MB
Id: 201203151400
StartTime: Thu Mar 15 14:00:00 2012
EndTime: Thu Mar 15 14:15:00 2012
TotalTime: 899.95 seconds
TotalCapSize: -1913.42MB CapLen: 96 bytes
# of packets: 38184645 (27074.04MB)
AvgRate: 252.36Mbps stddev:41.16M
IP flow (unique src/dst pair) Information
# of flows: 1003988 (avg. 38.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 2.7% 1.8% 1.7% 1.6% 1.6% 1.2% 1.0% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 562311
Top 10 bandwidth usage (bytes/total in %):
9.6% 8.1% 5.6% 5.6% 5.4% 4.9% 4.9% 4.7% 3.3% 2.8%
# of IPv6 addresses: 5763
Top 10 bandwidth usage (bytes/total in %):
39.5% 33.1% 14.0% 12.9% 7.0% 6.2% 6.2% 5.7% 5.1% 4.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203151400.pktlen.png)
detailed numbers
[ 32- 63]: 6863260
[ 64- 127]: 9933925
[ 128- 255]: 1466506
[ 256- 511]: 1102908
[ 512- 1023]: 1283766
[ 1024- 2047]: 17534280
Protocol Breakdown
![[protocol breakdown chart]](201203151400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38184645 (100.00%) 28389191981 (100.00%) 743.47
ip 37857017 ( 99.14%) 28164210858 ( 99.21%) 743.96
tcp 29110285 ( 76.24%) 24780410099 ( 87.29%) 851.26
http(s) 12889112 ( 33.75%) 17064903159 ( 60.11%) 1323.98
http(c) 6688338 ( 17.52%) 1398819732 ( 4.93%) 209.14
squid 74269 ( 0.19%) 25862180 ( 0.09%) 348.22
smtp 82592 ( 0.22%) 28100335 ( 0.10%) 340.23
nntp 1 ( 0.00%) 62 ( 0.00%) 62.00
ftp 100791 ( 0.26%) 6969280 ( 0.02%) 69.15
pop3 5133 ( 0.01%) 2490408 ( 0.01%) 485.18
imap 2415 ( 0.01%) 1194075 ( 0.00%) 494.44
telnet 1000 ( 0.00%) 69118 ( 0.00%) 69.12
ssh 170826 ( 0.45%) 15712623 ( 0.06%) 91.98
dns 11041 ( 0.03%) 2508611 ( 0.01%) 227.21
bgp 667 ( 0.00%) 150444 ( 0.00%) 225.55
napster 122 ( 0.00%) 8619 ( 0.00%) 70.65
realaud 47 ( 0.00%) 3802 ( 0.00%) 80.89
icecast 922 ( 0.00%) 237787 ( 0.00%) 257.90
hotline 34 ( 0.00%) 2126 ( 0.00%) 62.53
other 9082973 ( 23.79%) 6233377618 ( 21.96%) 686.27
udp 4998526 ( 13.09%) 1695296397 ( 5.97%) 339.16
dns 638780 ( 1.67%) 141490825 ( 0.50%) 221.50
realaud 3 ( 0.00%) 241 ( 0.00%) 80.33
halflif 71 ( 0.00%) 11533 ( 0.00%) 162.44
starcra 55 ( 0.00%) 5730 ( 0.00%) 104.18
everque 1106 ( 0.00%) 693694 ( 0.00%) 627.21
unreal 8 ( 0.00%) 880 ( 0.00%) 110.00
quake 12 ( 0.00%) 1552 ( 0.00%) 129.33
cuseeme 2742 ( 0.01%) 555505 ( 0.00%) 202.59
other 4355649 ( 11.41%) 1552476166 ( 5.47%) 356.43
icmp 611249 ( 1.60%) 70002552 ( 0.25%) 114.52
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 22267 ( 0.06%) 6116178 ( 0.02%) 274.67
ip6 3095668 ( 8.11%) 1609391593 ( 5.67%) 519.89
other 18837 ( 0.05%) 2974769 ( 0.01%) 157.92
frag 1968 ( 0.01%) 2679388 ( 0.01%) 1361.48
ip6 327628 ( 0.86%) 224981123 ( 0.79%) 686.70
tcp6 156128 ( 0.41%) 128692068 ( 0.45%) 824.27
http(s) 6688 ( 0.02%) 7465570 ( 0.03%) 1116.26
http(c) 26162 ( 0.07%) 2358775 ( 0.01%) 90.16
squid 22 ( 0.00%) 4367 ( 0.00%) 198.50
smtp 258 ( 0.00%) 50885 ( 0.00%) 197.23
dns 357 ( 0.00%) 63382 ( 0.00%) 177.54
bgp 97 ( 0.00%) 25012 ( 0.00%) 257.86
other 122544 ( 0.32%) 118724077 ( 0.42%) 968.83
udp6 129887 ( 0.34%) 87563873 ( 0.31%) 674.15
dns 66047 ( 0.17%) 18455683 ( 0.07%) 279.43
everque 1 ( 0.00%) 100 ( 0.00%) 100.00
unreal 1 ( 0.00%) 96 ( 0.00%) 96.00
quake 1 ( 0.00%) 115 ( 0.00%) 115.00
cuseeme 2 ( 0.00%) 202 ( 0.00%) 101.00
other 63835 ( 0.17%) 69107677 ( 0.24%) 1082.60
icmp6 36629 ( 0.10%) 4846161 ( 0.02%) 132.30
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 4869 ( 0.01%) 3863393 ( 0.01%) 793.47
tcpdump file: 201203151400.dump.gz (936.41 MB)