Traffic Trace Info
DumpFile: 201203181400.dump
FileSize: 2483.00MB
Id: 201203181400
StartTime: Sun Mar 18 14:00:00 2012
EndTime: Sun Mar 18 14:15:01 2012
TotalTime: 900.89 seconds
TotalCapSize: 1955.46MB CapLen: 96 bytes
# of packets: 34571838 (24239.84MB)
AvgRate: 225.69Mbps stddev:53.12M
IP flow (unique src/dst pair) Information
# of flows: 730910 (avg. 47.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.3% 2.2% 2.1% 1.6% 1.2% 1.1% 1.1% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 437050
Top 10 bandwidth usage (bytes/total in %):
18.8% 15.2% 8.3% 4.7% 3.2% 3.1% 3.1% 2.7% 2.4% 2.3%
# of IPv6 addresses: 5200
Top 10 bandwidth usage (bytes/total in %):
33.9% 27.9% 24.9% 14.5% 9.5% 9.0% 8.7% 6.0% 3.7% 3.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203181400.pktlen.png)
detailed numbers
[ 32- 63]: 5594691
[ 64- 127]: 9725721
[ 128- 255]: 1872336
[ 256- 511]: 992988
[ 512- 1023]: 907362
[ 1024- 2047]: 15478740
Protocol Breakdown
![[protocol breakdown chart]](201203181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34571838 (100.00%) 25417316887 (100.00%) 735.20
ip 34379434 ( 99.44%) 25318043633 ( 99.61%) 736.43
tcp 25129091 ( 72.69%) 22610783954 ( 88.96%) 899.79
http(s) 12385341 ( 35.82%) 16895556574 ( 66.47%) 1364.16
http(c) 5078932 ( 14.69%) 711450301 ( 2.80%) 140.08
squid 550378 ( 1.59%) 560722663 ( 2.21%) 1018.80
smtp 51845 ( 0.15%) 6261703 ( 0.02%) 120.78
nntp 2 ( 0.00%) 120 ( 0.00%) 60.00
ftp 68366 ( 0.20%) 93303840 ( 0.37%) 1364.77
pop3 928378 ( 2.69%) 63118616 ( 0.25%) 67.99
imap 2091 ( 0.01%) 577644 ( 0.00%) 276.25
telnet 711 ( 0.00%) 44505 ( 0.00%) 62.59
ssh 77412 ( 0.22%) 14477692 ( 0.06%) 187.02
dns 11366 ( 0.03%) 2526205 ( 0.01%) 222.26
bgp 3661 ( 0.01%) 298064 ( 0.00%) 81.42
napster 1539 ( 0.00%) 102106 ( 0.00%) 66.35
realaud 37 ( 0.00%) 3324 ( 0.00%) 89.84
icecast 1088 ( 0.00%) 625341 ( 0.00%) 574.76
hotline 24 ( 0.00%) 1548 ( 0.00%) 64.50
other 5967920 ( 17.26%) 4261713708 ( 16.77%) 714.10
udp 4508405 ( 13.04%) 1254617099 ( 4.94%) 278.28
dns 451471 ( 1.31%) 93601154 ( 0.37%) 207.32
realaud 3 ( 0.00%) 241 ( 0.00%) 80.33
halflif 45 ( 0.00%) 6961 ( 0.00%) 154.69
starcra 37 ( 0.00%) 3710 ( 0.00%) 100.27
everque 5476 ( 0.02%) 5039210 ( 0.02%) 920.24
unreal 20 ( 0.00%) 2402 ( 0.00%) 120.10
quake 4 ( 0.00%) 386 ( 0.00%) 96.50
cuseeme 2 ( 0.00%) 187 ( 0.00%) 93.50
other 4051303 ( 11.72%) 1155931142 ( 4.55%) 285.32
icmp 486228 ( 1.41%) 59230759 ( 0.23%) 121.82
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1035647 ( 3.00%) 164080162 ( 0.65%) 158.43
ip6 3203852 ( 9.27%) 1226829102 ( 4.83%) 382.92
other 16026 ( 0.05%) 2483287 ( 0.01%) 154.95
frag 232 ( 0.00%) 236143 ( 0.00%) 1017.86
ip6 192404 ( 0.56%) 99273254 ( 0.39%) 515.96
tcp6 70361 ( 0.20%) 30592540 ( 0.12%) 434.79
http(s) 5826 ( 0.02%) 7396798 ( 0.03%) 1269.62
http(c) 34845 ( 0.10%) 2941324 ( 0.01%) 84.41
smtp 34 ( 0.00%) 4530 ( 0.00%) 133.24
ftp 44 ( 0.00%) 3744 ( 0.00%) 85.09
dns 558 ( 0.00%) 81953 ( 0.00%) 146.87
bgp 93 ( 0.00%) 21327 ( 0.00%) 229.32
other 28961 ( 0.08%) 20142864 ( 0.08%) 695.52
udp6 90009 ( 0.26%) 63415249 ( 0.25%) 704.54
dns 42789 ( 0.12%) 10611870 ( 0.04%) 248.00
other 47220 ( 0.14%) 52803379 ( 0.21%) 1118.24
icmp6 30991 ( 0.09%) 4229526 ( 0.02%) 136.48
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 927 ( 0.00%) 1020193 ( 0.00%) 1100.53
tcpdump file: 201203181400.dump.gz (842.80 MB)