Traffic Trace Info
DumpFile: 201203171400.dump
FileSize: 2800.92MB
Id: 201203171400
StartTime: Sat Mar 17 14:00:01 2012
EndTime: Sat Mar 17 14:15:00 2012
TotalTime: 899.67 seconds
TotalCapSize: -1892.62MB CapLen: 96 bytes
# of packets: 39160054 (27906.55MB)
AvgRate: 279.52Mbps stddev:56.25M
IP flow (unique src/dst pair) Information
# of flows: 875438 (avg. 44.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 2.1% 2.1% 1.7% 1.6% 1.4% 1.4% 1.2% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 512411
Top 10 bandwidth usage (bytes/total in %):
23.5% 14.1% 12.7% 5.0% 3.1% 3.1% 2.9% 2.4% 2.2% 2.2%
# of IPv6 addresses: 5211
Top 10 bandwidth usage (bytes/total in %):
39.4% 39.4% 27.2% 10.8% 10.4% 7.7% 5.3% 4.1% 4.1% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203171400.pktlen.png)
detailed numbers
[ 32- 63]: 6648861
[ 64- 127]: 10960565
[ 128- 255]: 1749651
[ 256- 511]: 845924
[ 512- 1023]: 973185
[ 1024- 2047]: 17981868
Protocol Breakdown
![[protocol breakdown chart]](201203171400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39160054 (100.00%) 29262143716 (100.00%) 747.24
ip 38921836 ( 99.39%) 29086448176 ( 99.40%) 747.30
tcp 29953636 ( 76.49%) 26292525495 ( 89.85%) 877.77
http(s) 14252963 ( 36.40%) 19552283287 ( 66.82%) 1371.80
http(c) 6716644 ( 17.15%) 747975919 ( 2.56%) 111.36
squid 370296 ( 0.95%) 444894722 ( 1.52%) 1201.46
smtp 48395 ( 0.12%) 10076143 ( 0.03%) 208.21
ftp 17481 ( 0.04%) 1597880 ( 0.01%) 91.41
pop3 92796 ( 0.24%) 8652245 ( 0.03%) 93.24
imap 78722 ( 0.20%) 63425479 ( 0.22%) 805.69
telnet 4183 ( 0.01%) 308096 ( 0.00%) 73.65
ssh 50204 ( 0.13%) 7416333 ( 0.03%) 147.72
dns 8976 ( 0.02%) 713238 ( 0.00%) 79.46
bgp 583 ( 0.00%) 101297 ( 0.00%) 173.75
napster 136 ( 0.00%) 9280 ( 0.00%) 68.24
realaud 18 ( 0.00%) 1140 ( 0.00%) 63.33
rtsp 22086 ( 0.06%) 31204377 ( 0.11%) 1412.86
icecast 6525 ( 0.02%) 4258133 ( 0.01%) 652.59
hotline 20 ( 0.00%) 1701 ( 0.00%) 85.05
other 8283607 ( 21.15%) 5419606165 ( 18.52%) 654.26
udp 5060367 ( 12.92%) 1723212779 ( 5.89%) 340.53
dns 493614 ( 1.26%) 99714658 ( 0.34%) 202.01
rip 1 ( 0.00%) 68 ( 0.00%) 68.00
realaud 8 ( 0.00%) 682 ( 0.00%) 85.25
halflif 22 ( 0.00%) 2955 ( 0.00%) 134.32
starcra 85 ( 0.00%) 9279 ( 0.00%) 109.16
everque 2030 ( 0.01%) 1588555 ( 0.01%) 782.54
unreal 7 ( 0.00%) 1385 ( 0.00%) 197.86
quake 21 ( 0.00%) 1850 ( 0.00%) 88.10
cuseeme 1 ( 0.00%) 94 ( 0.00%) 94.00
other 4543569 ( 11.60%) 1612924058 ( 5.51%) 354.99
icmp 582085 ( 1.49%) 68503611 ( 0.23%) 117.69
ipip 171 ( 0.00%) 17814 ( 0.00%) 104.18
ipsec 858108 ( 2.19%) 134704336 ( 0.46%) 156.98
ip6 2453888 ( 6.27%) 865404604 ( 2.96%) 352.67
other 13581 ( 0.03%) 2079537 ( 0.01%) 153.12
frag 265698 ( 0.68%) 275859205 ( 0.94%) 1038.24
ip6 238218 ( 0.61%) 175695540 ( 0.60%) 737.54
tcp6 106796 ( 0.27%) 115035006 ( 0.39%) 1077.15
http(s) 56020 ( 0.14%) 80279198 ( 0.27%) 1433.05
http(c) 4220 ( 0.01%) 590450 ( 0.00%) 139.92
smtp 60 ( 0.00%) 13887 ( 0.00%) 231.45
ftp 7 ( 0.00%) 682 ( 0.00%) 97.43
dns 258 ( 0.00%) 49274 ( 0.00%) 190.98
bgp 101 ( 0.00%) 24744 ( 0.00%) 244.99
other 46130 ( 0.12%) 34076771 ( 0.12%) 738.71
udp6 64255 ( 0.16%) 28714701 ( 0.10%) 446.89
dns 46736 ( 0.12%) 12367664 ( 0.04%) 264.63
halflif 1 ( 0.00%) 112 ( 0.00%) 112.00
starcra 2 ( 0.00%) 230 ( 0.00%) 115.00
everque 1 ( 0.00%) 103 ( 0.00%) 103.00
cuseeme 2 ( 0.00%) 225 ( 0.00%) 112.50
other 17513 ( 0.04%) 16346367 ( 0.06%) 933.38
icmp6 27462 ( 0.07%) 3785718 ( 0.01%) 137.85
ip6 76 ( 0.00%) 10368 ( 0.00%) 136.42
pim6 28 ( 0.00%) 3808 ( 0.00%) 136.00
other6 39601 ( 0.10%) 28145939 ( 0.10%) 710.74
tcpdump file: 201203171400.dump.gz (932.88 MB)