Traffic Trace Info
DumpFile: 201203221400.dump
FileSize: 1982.81MB
Id: 201203221400
StartTime: Thu Mar 22 14:00:00 2012
EndTime: Thu Mar 22 14:15:00 2012
TotalTime: 900.37 seconds
TotalCapSize: 1556.72MB CapLen: 96 bytes
# of packets: 27923448 (19023.11MB)
AvgRate: 177.16Mbps stddev:29.89M
IP flow (unique src/dst pair) Information
# of flows: 1810473 (avg. 15.42 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.2% 2.0% 1.9% 1.8% 1.6% 1.6% 1.4% 1.4% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 1355517
Top 10 bandwidth usage (bytes/total in %):
12.3% 11.0% 7.6% 4.2% 3.5% 3.4% 3.2% 3.1% 2.9% 2.3%
# of IPv6 addresses: 5145
Top 10 bandwidth usage (bytes/total in %):
91.0% 86.4% 2.0% 1.6% 1.2% 1.0% 0.9% 0.7% 0.6% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203221400.pktlen.png)
detailed numbers
[ 32- 63]: 6448985
[ 64- 127]: 6892594
[ 128- 255]: 892639
[ 256- 511]: 584081
[ 512- 1023]: 661770
[ 1024- 2047]: 12443379
Protocol Breakdown
![[protocol breakdown chart]](201203221400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27923448 (100.00%) 19947175606 (100.00%) 714.35
ip 27414166 ( 98.18%) 19474780847 ( 97.63%) 710.39
tcp 21067473 ( 75.45%) 16888184530 ( 84.66%) 801.62
http(s) 8384625 ( 30.03%) 11114716771 ( 55.72%) 1325.61
http(c) 4958417 ( 17.76%) 935116878 ( 4.69%) 188.59
squid 39133 ( 0.14%) 20985571 ( 0.11%) 536.26
smtp 54953 ( 0.20%) 14102594 ( 0.07%) 256.63
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 5383 ( 0.02%) 535495 ( 0.00%) 99.48
pop3 6795 ( 0.02%) 3037723 ( 0.02%) 447.05
imap 5978 ( 0.02%) 3731615 ( 0.02%) 624.22
telnet 8178 ( 0.03%) 602856 ( 0.00%) 73.72
ssh 34382 ( 0.12%) 16184946 ( 0.08%) 470.74
dns 10334 ( 0.04%) 3535562 ( 0.02%) 342.13
bgp 644 ( 0.00%) 130068 ( 0.00%) 201.97
napster 286 ( 0.00%) 18495 ( 0.00%) 64.67
realaud 96 ( 0.00%) 8662 ( 0.00%) 90.23
rtsp 10225 ( 0.04%) 12670862 ( 0.06%) 1239.20
icecast 41217 ( 0.15%) 34042659 ( 0.17%) 825.94
hotline 19 ( 0.00%) 1184 ( 0.00%) 62.32
other 7506799 ( 26.88%) 4728762035 ( 23.71%) 629.93
udp 3616330 ( 12.95%) 1674141294 ( 8.39%) 462.94
dns 547591 ( 1.96%) 129311087 ( 0.65%) 236.15
realaud 7 ( 0.00%) 932 ( 0.00%) 133.14
halflif 27 ( 0.00%) 2433 ( 0.00%) 90.11
starcra 31 ( 0.00%) 3286 ( 0.00%) 106.00
everque 800 ( 0.00%) 429789 ( 0.00%) 537.24
unreal 9 ( 0.00%) 1595 ( 0.00%) 177.22
quake 11 ( 0.00%) 1154 ( 0.00%) 104.91
cuseeme 1 ( 0.00%) 87 ( 0.00%) 87.00
other 3067318 ( 10.98%) 1544325442 ( 7.74%) 503.48
icmp 1546486 ( 5.54%) 122275356 ( 0.61%) 79.07
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 19815 ( 0.07%) 7260982 ( 0.04%) 366.44
ip6 1121191 ( 4.02%) 741676347 ( 3.72%) 661.51
pim 252 ( 0.00%) 15120 ( 0.00%) 60.00
other 42435 ( 0.15%) 41208058 ( 0.21%) 971.09
frag 10151 ( 0.04%) 7881859 ( 0.04%) 776.46
ip6 509282 ( 1.82%) 472394759 ( 2.37%) 927.57
tcp6 411561 ( 1.47%) 446378983 ( 2.24%) 1084.60
http(s) 11623 ( 0.04%) 12877033 ( 0.06%) 1107.89
http(c) 60735 ( 0.22%) 4968077 ( 0.02%) 81.80
smtp 201 ( 0.00%) 40640 ( 0.00%) 202.19
ftp 43 ( 0.00%) 3658 ( 0.00%) 85.07
dns 427 ( 0.00%) 74163 ( 0.00%) 173.68
bgp 86 ( 0.00%) 15156 ( 0.00%) 176.23
other 338446 ( 1.21%) 428400256 ( 2.15%) 1265.79
udp6 64903 ( 0.23%) 18016870 ( 0.09%) 277.60
dns 63469 ( 0.23%) 17792003 ( 0.09%) 280.33
everque 2 ( 0.00%) 213 ( 0.00%) 106.50
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
cuseeme 1 ( 0.00%) 109 ( 0.00%) 109.00
other 1430 ( 0.01%) 224437 ( 0.00%) 156.95
icmp6 27365 ( 0.10%) 4082147 ( 0.02%) 149.17
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 5337 ( 0.02%) 3900963 ( 0.02%) 730.93
tcpdump file: 201203221400.dump.gz (657.46 MB)