Traffic Trace Info
DumpFile: 201203231400.dump
FileSize: 2342.84MB
Id: 201203231400
StartTime: Fri Mar 23 14:00:01 2012
EndTime: Fri Mar 23 14:15:00 2012
TotalTime: 899.22 seconds
TotalCapSize: 1847.31MB CapLen: 96 bytes
# of packets: 32474693 (22564.11MB)
AvgRate: 210.48Mbps stddev:35.37M
IP flow (unique src/dst pair) Information
# of flows: 1768574 (avg. 18.36 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.1% 3.2% 2.2% 1.6% 1.4% 1.2% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 1340443
Top 10 bandwidth usage (bytes/total in %):
16.0% 13.0% 8.2% 7.3% 6.8% 6.1% 4.1% 3.3% 3.3% 2.6%
# of IPv6 addresses: 4875
Top 10 bandwidth usage (bytes/total in %):
63.9% 63.9% 14.3% 5.1% 4.9% 3.4% 2.8% 2.5% 2.1% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203231400.pktlen.png)
detailed numbers
[ 32- 63]: 7254095
[ 64- 127]: 7892834
[ 128- 255]: 1074914
[ 256- 511]: 704231
[ 512- 1023]: 993993
[ 1024- 2047]: 14554626
Protocol Breakdown
![[protocol breakdown chart]](201203231400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32474693 (100.00%) 23660179283 (100.00%) 728.57
ip 32189648 ( 99.12%) 23478768048 ( 99.23%) 729.39
tcp 26191158 ( 80.65%) 20914837526 ( 88.40%) 798.55
http(s) 10976178 ( 33.80%) 14800069557 ( 62.55%) 1348.38
http(c) 6453082 ( 19.87%) 813505449 ( 3.44%) 126.06
squid 1761916 ( 5.43%) 1836854410 ( 7.76%) 1042.53
smtp 60302 ( 0.19%) 13439888 ( 0.06%) 222.88
ftp 9659 ( 0.03%) 857672 ( 0.00%) 88.80
pop3 9745 ( 0.03%) 6518258 ( 0.03%) 668.88
imap 4243 ( 0.01%) 2123590 ( 0.01%) 500.49
telnet 6743 ( 0.02%) 495832 ( 0.00%) 73.53
ssh 46576 ( 0.14%) 15124198 ( 0.06%) 324.72
dns 10105 ( 0.03%) 2568685 ( 0.01%) 254.20
bgp 794 ( 0.00%) 271847 ( 0.00%) 342.38
napster 1609 ( 0.00%) 114621 ( 0.00%) 71.24
realaud 28 ( 0.00%) 1792 ( 0.00%) 64.00
rtsp 8891 ( 0.03%) 11605678 ( 0.05%) 1305.33
icecast 18001 ( 0.06%) 14631940 ( 0.06%) 812.84
hotline 40 ( 0.00%) 2544 ( 0.00%) 63.60
other 6823246 ( 21.01%) 3396651565 ( 14.36%) 497.81
udp 3155545 ( 9.72%) 1538854057 ( 6.50%) 487.67
dns 548177 ( 1.69%) 130043965 ( 0.55%) 237.23
rip 1 ( 0.00%) 68 ( 0.00%) 68.00
realaud 4 ( 0.00%) 347 ( 0.00%) 86.75
halflif 39 ( 0.00%) 10336 ( 0.00%) 265.03
starcra 19 ( 0.00%) 3133 ( 0.00%) 164.89
everque 601 ( 0.00%) 260162 ( 0.00%) 432.88
unreal 115 ( 0.00%) 16643 ( 0.00%) 144.72
quake 15 ( 0.00%) 1462 ( 0.00%) 97.47
cuseeme 11 ( 0.00%) 3907 ( 0.00%) 355.18
other 2606498 ( 8.03%) 1408479449 ( 5.95%) 540.37
icmp 1577381 ( 4.86%) 124412945 ( 0.53%) 78.87
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6251 ( 0.02%) 2795906 ( 0.01%) 447.27
ip6 1241984 ( 3.82%) 893498533 ( 3.78%) 719.41
pim 257 ( 0.00%) 15420 ( 0.00%) 60.00
other 16887 ( 0.05%) 4334391 ( 0.02%) 256.67
frag 913 ( 0.00%) 798033 ( 0.00%) 874.08
ip6 285045 ( 0.88%) 181411235 ( 0.77%) 636.43
tcp6 199785 ( 0.62%) 161963943 ( 0.68%) 810.69
http(s) 13077 ( 0.04%) 16554903 ( 0.07%) 1265.96
http(c) 39623 ( 0.12%) 3379995 ( 0.01%) 85.30
smtp 144 ( 0.00%) 130416 ( 0.00%) 905.67
ftp 45 ( 0.00%) 3848 ( 0.00%) 85.51
dns 335 ( 0.00%) 68546 ( 0.00%) 204.61
bgp 98 ( 0.00%) 20308 ( 0.00%) 207.22
other 146463 ( 0.45%) 141805927 ( 0.60%) 968.20
udp6 58684 ( 0.18%) 15071433 ( 0.06%) 256.82
dns 56660 ( 0.17%) 14845311 ( 0.06%) 262.01
halflif 1 ( 0.00%) 111 ( 0.00%) 111.00
everque 1 ( 0.00%) 103 ( 0.00%) 103.00
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
quake 3 ( 0.00%) 315 ( 0.00%) 105.00
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 2017 ( 0.01%) 225381 ( 0.00%) 111.74
icmp6 25978 ( 0.08%) 3891279 ( 0.02%) 149.79
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 485 ( 0.00%) 469188 ( 0.00%) 967.40
tcpdump file: 201203231400.dump.gz (765.49 MB)