Traffic Trace Info
DumpFile: 201203271400.dump
FileSize: 2272.36MB
Id: 201203271400
StartTime: Tue Mar 27 14:00:00 2012
EndTime: Tue Mar 27 14:15:00 2012
TotalTime: 899.92 seconds
TotalCapSize: 1785.80MB CapLen: 96 bytes
# of packets: 31886112 (23969.48MB)
AvgRate: 223.40Mbps stddev:64.57M
IP flow (unique src/dst pair) Information
# of flows: 1912584 (avg. 16.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.0% 2.3% 2.2% 1.6% 1.4% 1.3% 1.2% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1425757
Top 10 bandwidth usage (bytes/total in %):
13.8% 12.5% 10.2% 8.4% 4.7% 4.7% 3.5% 3.5% 2.3% 2.3%
# of IPv6 addresses: 6009
Top 10 bandwidth usage (bytes/total in %):
35.2% 34.9% 22.8% 17.4% 16.7% 16.5% 6.9% 6.8% 6.6% 5.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203271400.pktlen.png)
detailed numbers
[ 32- 63]: 6772593
[ 64- 127]: 7055694
[ 128- 255]: 931524
[ 256- 511]: 689488
[ 512- 1023]: 658437
[ 1024- 2047]: 15778376
Protocol Breakdown
![[protocol breakdown chart]](201203271400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31886112 (100.00%) 25133817634 (100.00%) 788.24
ip 31546073 ( 98.93%) 24864432748 ( 98.93%) 788.19
tcp 25591664 ( 80.26%) 22603960568 ( 89.93%) 883.25
http(s) 12769916 ( 40.05%) 17789761291 ( 70.78%) 1393.10
http(c) 6396923 ( 20.06%) 770438073 ( 3.07%) 120.44
squid 677821 ( 2.13%) 849392137 ( 3.38%) 1253.12
smtp 54493 ( 0.17%) 13129417 ( 0.05%) 240.94
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 8205 ( 0.03%) 833153 ( 0.00%) 101.54
pop3 4909 ( 0.02%) 1654238 ( 0.01%) 336.98
imap 2861 ( 0.01%) 666073 ( 0.00%) 232.81
telnet 7776 ( 0.02%) 571647 ( 0.00%) 73.51
ssh 462822 ( 1.45%) 69090315 ( 0.27%) 149.28
dns 4976 ( 0.02%) 476900 ( 0.00%) 95.84
bgp 693 ( 0.00%) 165896 ( 0.00%) 239.39
napster 129 ( 0.00%) 8880 ( 0.00%) 68.84
realaud 36 ( 0.00%) 3022 ( 0.00%) 83.94
rtsp 1159 ( 0.00%) 74590 ( 0.00%) 64.36
icecast 591 ( 0.00%) 410023 ( 0.00%) 693.78
hotline 42 ( 0.00%) 2883 ( 0.00%) 68.64
other 5198306 ( 16.30%) 3107281656 ( 12.36%) 597.75
udp 2786803 ( 8.74%) 899830415 ( 3.58%) 322.89
dns 597376 ( 1.87%) 142594019 ( 0.57%) 238.70
realaud 13 ( 0.00%) 1152 ( 0.00%) 88.62
halflif 99 ( 0.00%) 20999 ( 0.00%) 212.11
starcra 5 ( 0.00%) 1067 ( 0.00%) 213.40
everque 2259 ( 0.01%) 1663248 ( 0.01%) 736.28
unreal 13 ( 0.00%) 1314 ( 0.00%) 101.08
quake 13 ( 0.00%) 1324 ( 0.00%) 101.85
cuseeme 3 ( 0.00%) 263 ( 0.00%) 87.67
other 2186966 ( 6.86%) 755501876 ( 3.01%) 345.46
icmp 1626928 ( 5.10%) 126929620 ( 0.51%) 78.02
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 16616 ( 0.05%) 4388336 ( 0.02%) 264.10
ip6 1504095 ( 4.72%) 1224600083 ( 4.87%) 814.18
pim 300 ( 0.00%) 18000 ( 0.00%) 60.00
other 19482 ( 0.06%) 4686456 ( 0.02%) 240.55
frag 296 ( 0.00%) 317480 ( 0.00%) 1072.57
ip6 340039 ( 1.07%) 269384886 ( 1.07%) 792.22
tcp6 174539 ( 0.55%) 169850901 ( 0.68%) 973.14
http(s) 103904 ( 0.33%) 152735634 ( 0.61%) 1469.97
http(c) 50103 ( 0.16%) 4403423 ( 0.02%) 87.89
smtp 243 ( 0.00%) 175609 ( 0.00%) 722.67
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 443 ( 0.00%) 82932 ( 0.00%) 187.21
bgp 95 ( 0.00%) 21134 ( 0.00%) 222.46
other 19734 ( 0.06%) 12430564 ( 0.05%) 629.91
udp6 107234 ( 0.34%) 79134057 ( 0.31%) 737.96
dns 54169 ( 0.17%) 13659515 ( 0.05%) 252.16
halflif 2 ( 0.00%) 213 ( 0.00%) 106.50
everque 1 ( 0.00%) 100 ( 0.00%) 100.00
other 53062 ( 0.17%) 65474229 ( 0.26%) 1233.92
icmp6 36478 ( 0.11%) 4913057 ( 0.02%) 134.69
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 21672 ( 0.07%) 15471075 ( 0.06%) 713.87
tcpdump file: 201203271400.dump.gz (731.47 MB)