Traffic Trace Info
DumpFile: 201203191400.dump
FileSize: 2398.49MB
Id: 201203191400
StartTime: Mon Mar 19 14:00:01 2012
EndTime: Mon Mar 19 14:15:00 2012
TotalTime: 899.24 seconds
TotalCapSize: 1885.78MB CapLen: 96 bytes
# of packets: 33600254 (21615.21MB)
AvgRate: 201.63Mbps stddev:35.65M
IP flow (unique src/dst pair) Information
# of flows: 2422244 (avg. 13.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 1.1% 1.0% 1.0% 1.0% 1.0% 1.0% 1.0% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 1824142
Top 10 bandwidth usage (bytes/total in %):
8.7% 8.5% 8.0% 7.9% 7.4% 5.1% 3.8% 2.8% 2.6% 2.3%
# of IPv6 addresses: 5708
Top 10 bandwidth usage (bytes/total in %):
47.8% 25.0% 25.0% 13.0% 10.8% 5.9% 5.5% 4.3% 3.3% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203191400.pktlen.png)
detailed numbers
[ 32- 63]: 8256506
[ 64- 127]: 8856655
[ 128- 255]: 1009295
[ 256- 511]: 724850
[ 512- 1023]: 895506
[ 1024- 2047]: 13857442
Protocol Breakdown
![[protocol breakdown chart]](201203191400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33600254 (100.00%) 22665190163 (100.00%) 674.55
ip 33219494 ( 98.87%) 22528862090 ( 99.40%) 678.18
tcp 26355390 ( 78.44%) 20834598367 ( 91.92%) 790.53
http(s) 10919555 ( 32.50%) 14694593937 ( 64.83%) 1345.71
http(c) 7277314 ( 21.66%) 1162073575 ( 5.13%) 159.68
squid 854545 ( 2.54%) 845299668 ( 3.73%) 989.18
smtp 50843 ( 0.15%) 11496355 ( 0.05%) 226.11
nntp 2 ( 0.00%) 134 ( 0.00%) 67.00
ftp 8312 ( 0.02%) 810344 ( 0.00%) 97.49
pop3 9668 ( 0.03%) 1324264 ( 0.01%) 136.97
imap 2894 ( 0.01%) 1167316 ( 0.01%) 403.36
telnet 4668 ( 0.01%) 339024 ( 0.00%) 72.63
ssh 137919 ( 0.41%) 36385783 ( 0.16%) 263.82
dns 12600 ( 0.04%) 3747909 ( 0.02%) 297.45
bgp 597 ( 0.00%) 92697 ( 0.00%) 155.27
napster 197 ( 0.00%) 20861 ( 0.00%) 105.89
realaud 48 ( 0.00%) 4147 ( 0.00%) 86.40
rtsp 34406 ( 0.10%) 44815819 ( 0.20%) 1302.56
icecast 32447 ( 0.10%) 24950242 ( 0.11%) 768.95
hotline 31 ( 0.00%) 1884 ( 0.00%) 60.77
other 7009344 ( 20.86%) 4007474408 ( 17.68%) 571.73
udp 3592238 ( 10.69%) 1170633036 ( 5.16%) 325.88
dns 593724 ( 1.77%) 139031300 ( 0.61%) 234.17
realaud 10 ( 0.00%) 4383 ( 0.00%) 438.30
halflif 68 ( 0.00%) 10253 ( 0.00%) 150.78
starcra 33 ( 0.00%) 4249 ( 0.00%) 128.76
everque 424 ( 0.00%) 132016 ( 0.00%) 311.36
unreal 13 ( 0.00%) 1375 ( 0.00%) 105.77
quake 15 ( 0.00%) 2146 ( 0.00%) 143.07
cuseeme 3 ( 0.00%) 1015 ( 0.00%) 338.33
other 2987662 ( 8.89%) 1030746718 ( 4.55%) 345.00
icmp 2063736 ( 6.14%) 154180993 ( 0.68%) 74.71
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1269 ( 0.00%) 381646 ( 0.00%) 300.75
ip6 1165663 ( 3.47%) 353238963 ( 1.56%) 303.04
other 41013 ( 0.12%) 15809815 ( 0.07%) 385.48
frag 84750 ( 0.25%) 64804656 ( 0.29%) 764.66
ip6 380760 ( 1.13%) 136328073 ( 0.60%) 358.04
tcp6 283049 ( 0.84%) 111456762 ( 0.49%) 393.77
http(s) 27415 ( 0.08%) 37356721 ( 0.16%) 1362.64
http(c) 174515 ( 0.52%) 13603614 ( 0.06%) 77.95
smtp 68 ( 0.00%) 31767 ( 0.00%) 467.16
ftp 56 ( 0.00%) 5401 ( 0.00%) 96.45
dns 569 ( 0.00%) 90144 ( 0.00%) 158.43
bgp 103 ( 0.00%) 26584 ( 0.00%) 258.10
other 80323 ( 0.24%) 60342531 ( 0.27%) 751.25
udp6 67484 ( 0.20%) 19411651 ( 0.09%) 287.65
dns 65165 ( 0.19%) 18294558 ( 0.08%) 280.74
realaud 1 ( 0.00%) 116 ( 0.00%) 116.00
unreal 1 ( 0.00%) 99 ( 0.00%) 99.00
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 2316 ( 0.01%) 1116771 ( 0.00%) 482.20
icmp6 28990 ( 0.09%) 4238036 ( 0.02%) 146.19
ip6 87 ( 0.00%) 11816 ( 0.00%) 135.82
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1119 ( 0.00%) 1205592 ( 0.01%) 1077.38
tcpdump file: 201203191400.dump.gz (803.21 MB)