Traffic Trace Info
DumpFile: 201203211400.dump
FileSize: 3047.38MB
Id: 201203211400
StartTime: Wed Mar 21 14:00:01 2012
EndTime: Wed Mar 21 14:15:00 2012
TotalTime: 899.31 seconds
TotalCapSize: -1690.18MB CapLen: 96 bytes
# of packets: 42044715 (29869.54MB)
AvgRate: 278.71Mbps stddev:44.97M
IP flow (unique src/dst pair) Information
# of flows: 1816915 (avg. 23.14 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.0% 3.7% 2.5% 2.5% 2.3% 1.8% 1.8% 1.7% 1.4% 1.2%
IP address Information
# of IPv4 addresses: 1399727
Top 10 bandwidth usage (bytes/total in %):
15.9% 11.7% 9.2% 8.4% 5.0% 4.6% 4.1% 3.7% 2.6% 2.6%
# of IPv6 addresses: 6121
Top 10 bandwidth usage (bytes/total in %):
46.4% 46.3% 17.6% 15.3% 15.3% 6.6% 4.5% 4.1% 3.7% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203211400.pktlen.png)
detailed numbers
[ 32- 63]: 7901268
[ 64- 127]: 11305694
[ 128- 255]: 1254604
[ 256- 511]: 1227980
[ 512- 1023]: 1006138
[ 1024- 2047]: 19349031
Protocol Breakdown
![[protocol breakdown chart]](201203211400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42044715 (100.00%) 31320486104 (100.00%) 744.93
ip 41669557 ( 99.11%) 31068851519 ( 99.20%) 745.60
tcp 32511921 ( 77.33%) 28086063209 ( 89.67%) 863.87
http(s) 15221213 ( 36.20%) 20768116508 ( 66.31%) 1364.42
http(c) 9251921 ( 22.00%) 1736422981 ( 5.54%) 187.68
squid 2132613 ( 5.07%) 2546276190 ( 8.13%) 1193.97
smtp 119615 ( 0.28%) 54830686 ( 0.18%) 458.39
ftp 6912 ( 0.02%) 659798 ( 0.00%) 95.46
pop3 3995 ( 0.01%) 1081743 ( 0.00%) 270.77
imap 24584 ( 0.06%) 19682603 ( 0.06%) 800.63
telnet 5549 ( 0.01%) 408794 ( 0.00%) 73.67
ssh 38539 ( 0.09%) 6693575 ( 0.02%) 173.68
dns 7797 ( 0.02%) 650940 ( 0.00%) 83.49
bgp 643 ( 0.00%) 112061 ( 0.00%) 174.28
napster 420 ( 0.00%) 34202 ( 0.00%) 81.43
realaud 49 ( 0.00%) 4888 ( 0.00%) 99.76
rtsp 240364 ( 0.57%) 119540350 ( 0.38%) 497.33
icecast 1108 ( 0.00%) 492753 ( 0.00%) 444.72
hotline 6 ( 0.00%) 773 ( 0.00%) 128.83
other 5456593 ( 12.98%) 2831054364 ( 9.04%) 518.83
udp 4512016 ( 10.73%) 1480631876 ( 4.73%) 328.15
dns 547745 ( 1.30%) 128761493 ( 0.41%) 235.08
rip 1 ( 0.00%) 70 ( 0.00%) 70.00
realaud 5 ( 0.00%) 616 ( 0.00%) 123.20
halflif 30 ( 0.00%) 4238 ( 0.00%) 141.27
starcra 26 ( 0.00%) 2168 ( 0.00%) 83.38
everque 9725 ( 0.02%) 8810721 ( 0.03%) 905.99
unreal 2 ( 0.00%) 179 ( 0.00%) 89.50
quake 45 ( 0.00%) 3817 ( 0.00%) 84.82
cuseeme 1 ( 0.00%) 68 ( 0.00%) 68.00
other 3954382 ( 9.41%) 1343019678 ( 4.29%) 339.63
icmp 1530976 ( 3.64%) 121888048 ( 0.39%) 79.61
ipip 183 ( 0.00%) 19062 ( 0.00%) 104.16
ipsec 23591 ( 0.06%) 6353770 ( 0.02%) 269.33
ip6 3074736 ( 7.31%) 1369648472 ( 4.37%) 445.45
other 16134 ( 0.04%) 4247082 ( 0.01%) 263.24
frag 372 ( 0.00%) 399399 ( 0.00%) 1073.65
ip6 375158 ( 0.89%) 251634585 ( 0.80%) 670.74
tcp6 217604 ( 0.52%) 175689340 ( 0.56%) 807.38
http(s) 28032 ( 0.07%) 39616023 ( 0.13%) 1413.24
http(c) 66360 ( 0.16%) 5588302 ( 0.02%) 84.21
smtp 626 ( 0.00%) 280850 ( 0.00%) 448.64
ftp 44 ( 0.00%) 3756 ( 0.00%) 85.36
pop3 66 ( 0.00%) 11883 ( 0.00%) 180.05
dns 401 ( 0.00%) 79454 ( 0.00%) 198.14
bgp 90 ( 0.00%) 15863 ( 0.00%) 176.26
other 121985 ( 0.29%) 130093209 ( 0.42%) 1066.47
udp6 120611 ( 0.29%) 65288534 ( 0.21%) 541.31
dns 70216 ( 0.17%) 20598341 ( 0.07%) 293.36
halflif 1 ( 0.00%) 114 ( 0.00%) 114.00
everque 1 ( 0.00%) 109 ( 0.00%) 109.00
other 50393 ( 0.12%) 44689970 ( 0.14%) 886.83
icmp6 27964 ( 0.07%) 4063511 ( 0.01%) 145.31
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8863 ( 0.02%) 6577472 ( 0.02%) 742.13
tcpdump file: 201203211400.dump.gz (1031.78 MB)