Traffic Trace Info
DumpFile: 201203261400.dump
FileSize: 2409.27MB
Id: 201203261400
StartTime: Mon Mar 26 14:00:00 2012
EndTime: Mon Mar 26 14:15:01 2012
TotalTime: 900.01 seconds
TotalCapSize: 1889.80MB CapLen: 96 bytes
# of packets: 34043836 (25883.73MB)
AvgRate: 241.25Mbps stddev:38.57M
IP flow (unique src/dst pair) Information
# of flows: 1874374 (avg. 18.16 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.2% 3.5% 2.8% 2.2% 1.8% 1.6% 1.3% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 1418413
Top 10 bandwidth usage (bytes/total in %):
11.2% 10.2% 10.1% 8.3% 6.4% 5.1% 4.7% 4.4% 4.2% 2.8%
# of IPv6 addresses: 6421
Top 10 bandwidth usage (bytes/total in %):
27.0% 20.1% 14.8% 13.3% 13.3% 8.8% 6.1% 6.1% 3.4% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203261400.pktlen.png)
detailed numbers
[ 32- 63]: 7075114
[ 64- 127]: 6819548
[ 128- 255]: 1236067
[ 256- 511]: 862305
[ 512- 1023]: 947145
[ 1024- 2047]: 17103657
Protocol Breakdown
![[protocol breakdown chart]](201203261400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34043836 (100.00%) 27141059938 (100.00%) 797.24
ip 33738972 ( 99.10%) 26994851575 ( 99.46%) 800.11
tcp 26930206 ( 79.10%) 23747308201 ( 87.50%) 881.81
http(s) 11316457 ( 33.24%) 14991358620 ( 55.23%) 1324.74
http(c) 5885814 ( 17.29%) 1594137786 ( 5.87%) 270.84
squid 561456 ( 1.65%) 635583586 ( 2.34%) 1132.03
smtp 58909 ( 0.17%) 20873940 ( 0.08%) 354.34
nntp 6 ( 0.00%) 366 ( 0.00%) 61.00
ftp 8487 ( 0.02%) 767324 ( 0.00%) 90.41
pop3 8471 ( 0.02%) 4193679 ( 0.02%) 495.06
imap 2490 ( 0.01%) 490726 ( 0.00%) 197.08
telnet 16780 ( 0.05%) 1235740 ( 0.00%) 73.64
ssh 416314 ( 1.22%) 75846377 ( 0.28%) 182.19
dns 3727 ( 0.01%) 352812 ( 0.00%) 94.66
bgp 645 ( 0.00%) 119564 ( 0.00%) 185.37
napster 97 ( 0.00%) 6587 ( 0.00%) 67.91
realaud 25 ( 0.00%) 1616 ( 0.00%) 64.64
rtsp 22343 ( 0.07%) 28370646 ( 0.10%) 1269.78
icecast 24650 ( 0.07%) 16093227 ( 0.06%) 652.87
hotline 21 ( 0.00%) 1348 ( 0.00%) 64.19
other 8603514 ( 25.27%) 6377874257 ( 23.50%) 741.31
udp 3846907 ( 11.30%) 1915608202 ( 7.06%) 497.96
dns 557002 ( 1.64%) 137114628 ( 0.51%) 246.17
realaud 8 ( 0.00%) 597 ( 0.00%) 74.62
halflif 57 ( 0.00%) 14679 ( 0.00%) 257.53
starcra 51 ( 0.00%) 6924 ( 0.00%) 135.76
everque 643 ( 0.00%) 257893 ( 0.00%) 401.08
unreal 48 ( 0.00%) 3943 ( 0.00%) 82.15
quake 14 ( 0.00%) 1615 ( 0.00%) 115.36
cuseeme 3 ( 0.00%) 258 ( 0.00%) 86.00
other 3054446 ( 8.97%) 1763861599 ( 6.50%) 577.47
icmp 1532254 ( 4.50%) 120348217 ( 0.44%) 78.54
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 8170 ( 0.02%) 2210572 ( 0.01%) 270.57
ip6 1400164 ( 4.11%) 1204606675 ( 4.44%) 860.33
pim 225 ( 0.00%) 13500 ( 0.00%) 60.00
other 20862 ( 0.06%) 4737048 ( 0.02%) 227.07
frag 497715 ( 1.46%) 379406764 ( 1.40%) 762.30
ip6 304864 ( 0.90%) 146208363 ( 0.54%) 479.59
tcp6 197669 ( 0.58%) 114499343 ( 0.42%) 579.25
http(s) 16016 ( 0.05%) 18038168 ( 0.07%) 1126.26
http(c) 60874 ( 0.18%) 5245681 ( 0.02%) 86.17
smtp 897 ( 0.00%) 203977 ( 0.00%) 227.40
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 636 ( 0.00%) 91745 ( 0.00%) 144.25
bgp 90 ( 0.00%) 17073 ( 0.00%) 189.70
other 119139 ( 0.35%) 90901094 ( 0.33%) 762.98
udp6 75448 ( 0.22%) 25916282 ( 0.10%) 343.50
dns 63759 ( 0.19%) 17180493 ( 0.06%) 269.46
realaud 1 ( 0.00%) 130 ( 0.00%) 130.00
starcra 1 ( 0.00%) 108 ( 0.00%) 108.00
everque 2 ( 0.00%) 211 ( 0.00%) 105.50
unreal 1 ( 0.00%) 104 ( 0.00%) 104.00
quake 4 ( 0.00%) 427 ( 0.00%) 106.75
cuseeme 1 ( 0.00%) 114 ( 0.00%) 114.00
other 11679 ( 0.03%) 8734695 ( 0.03%) 747.90
icmp6 29455 ( 0.09%) 4010719 ( 0.01%) 136.16
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2178 ( 0.01%) 1766527 ( 0.01%) 811.08
tcpdump file: 201203261400.dump.gz (789.75 MB)