Traffic Trace Info
DumpFile: 201203241400.dump
FileSize: 3126.29MB
Id: 201203241400
StartTime: Sat Mar 24 14:00:00 2012
EndTime: Sat Mar 24 14:15:01 2012
TotalTime: 900.32 seconds
TotalCapSize: -1641.98MB CapLen: 96 bytes
# of packets: 44057162 (34940.04MB)
AvgRate: 325.56Mbps stddev:59.09M
IP flow (unique src/dst pair) Information
# of flows: 1784611 (avg. 24.69 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 2.9% 2.4% 2.3% 2.0% 1.9% 1.4% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 1357429
Top 10 bandwidth usage (bytes/total in %):
15.8% 13.3% 8.9% 6.7% 6.6% 3.7% 3.7% 2.9% 2.8% 2.4%
# of IPv6 addresses: 5283
Top 10 bandwidth usage (bytes/total in %):
46.9% 46.9% 34.9% 27.5% 9.1% 4.0% 2.7% 2.4% 1.6% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203241400.pktlen.png)
detailed numbers
[ 32- 63]: 9397841
[ 64- 127]: 8721097
[ 128- 255]: 957671
[ 256- 511]: 683664
[ 512- 1023]: 1024160
[ 1024- 2047]: 23272729
Protocol Breakdown
![[protocol breakdown chart]](201203241400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 44057162 (100.00%) 36637289414 (100.00%) 831.59
ip 43675657 ( 99.13%) 36305022931 ( 99.09%) 831.24
tcp 35791471 ( 81.24%) 32408889621 ( 88.46%) 905.49
http(s) 15403835 ( 34.96%) 21403002302 ( 58.42%) 1389.46
http(c) 5408287 ( 12.28%) 660836320 ( 1.80%) 122.19
squid 638981 ( 1.45%) 616922969 ( 1.68%) 965.48
smtp 46030 ( 0.10%) 6489373 ( 0.02%) 140.98
ftp 6021 ( 0.01%) 584050 ( 0.00%) 97.00
pop3 8871 ( 0.02%) 2682952 ( 0.01%) 302.44
imap 1527 ( 0.00%) 292681 ( 0.00%) 191.67
telnet 442 ( 0.00%) 28534 ( 0.00%) 64.56
ssh 510293 ( 1.16%) 89567562 ( 0.24%) 175.52
dns 9613 ( 0.02%) 3538632 ( 0.01%) 368.11
bgp 628 ( 0.00%) 107443 ( 0.00%) 171.09
napster 753 ( 0.00%) 89927 ( 0.00%) 119.42
realaud 22 ( 0.00%) 1813 ( 0.00%) 82.41
icecast 41226 ( 0.09%) 31759536 ( 0.09%) 770.38
hotline 1605 ( 0.00%) 1306799 ( 0.00%) 814.20
other 13713337 ( 31.13%) 9591678728 ( 26.18%) 699.44
udp 4821247 ( 10.94%) 2633007649 ( 7.19%) 546.13
dns 424772 ( 0.96%) 98594859 ( 0.27%) 232.11
rip 1 ( 0.00%) 70 ( 0.00%) 70.00
realaud 824 ( 0.00%) 74753 ( 0.00%) 90.72
halflif 98 ( 0.00%) 18530 ( 0.00%) 189.08
starcra 63 ( 0.00%) 6079 ( 0.00%) 96.49
everque 496 ( 0.00%) 233792 ( 0.00%) 471.35
unreal 10 ( 0.00%) 1465 ( 0.00%) 146.50
quake 7 ( 0.00%) 838 ( 0.00%) 119.71
cuseeme 1 ( 0.00%) 94 ( 0.00%) 94.00
other 4246169 ( 9.64%) 2524948423 ( 6.89%) 594.64
icmp 1566173 ( 3.55%) 129242310 ( 0.35%) 82.52
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2152 ( 0.00%) 569232 ( 0.00%) 264.51
ip6 1479072 ( 3.36%) 1129480412 ( 3.08%) 763.64
pim 223 ( 0.00%) 13380 ( 0.00%) 60.00
other 15135 ( 0.03%) 3801167 ( 0.01%) 251.15
frag 774523 ( 1.76%) 590994254 ( 1.61%) 763.04
ip6 381505 ( 0.87%) 332266483 ( 0.91%) 870.94
tcp6 302634 ( 0.69%) 310117065 ( 0.85%) 1024.73
http(s) 13123 ( 0.03%) 17578582 ( 0.05%) 1339.52
http(c) 32490 ( 0.07%) 3168052 ( 0.01%) 97.51
smtp 451 ( 0.00%) 83928 ( 0.00%) 186.09
ftp 59 ( 0.00%) 5183 ( 0.00%) 87.85
pop3 78 ( 0.00%) 6941 ( 0.00%) 88.99
dns 294 ( 0.00%) 56783 ( 0.00%) 193.14
bgp 93 ( 0.00%) 15696 ( 0.00%) 168.77
other 256046 ( 0.58%) 289201900 ( 0.79%) 1129.49
udp6 56992 ( 0.13%) 18023136 ( 0.05%) 316.24
dns 45533 ( 0.10%) 10861639 ( 0.03%) 238.54
realaud 2 ( 0.00%) 205 ( 0.00%) 102.50
halflif 1 ( 0.00%) 109 ( 0.00%) 109.00
everque 1 ( 0.00%) 113 ( 0.00%) 113.00
cuseeme 1 ( 0.00%) 108 ( 0.00%) 108.00
other 11454 ( 0.03%) 7160962 ( 0.02%) 625.19
icmp6 20287 ( 0.05%) 2976903 ( 0.01%) 146.74
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1477 ( 0.00%) 1133719 ( 0.00%) 767.58
tcpdump file: 201203241400.dump.gz (987.84 MB)