Traffic Trace Info
DumpFile: 201203291400.dump
FileSize: 2694.21MB
Id: 201203291400
StartTime: Thu Mar 29 14:00:00 2012
EndTime: Thu Mar 29 14:15:00 2012
TotalTime: 899.86 seconds
TotalCapSize: -1966.55MB CapLen: 96 bytes
# of packets: 37011721 (26139.63MB)
AvgRate: 243.74Mbps stddev:47.36M
IP flow (unique src/dst pair) Information
# of flows: 1828346 (avg. 20.24 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.3% 3.4% 2.6% 1.8% 1.4% 1.4% 1.3% 1.2% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1378909
Top 10 bandwidth usage (bytes/total in %):
10.5% 10.5% 10.0% 5.5% 5.3% 5.2% 3.9% 3.5% 3.4% 2.8%
# of IPv6 addresses: 6503
Top 10 bandwidth usage (bytes/total in %):
84.7% 81.1% 2.2% 2.1% 1.9% 1.9% 1.8% 1.6% 1.6% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203291400.pktlen.png)
detailed numbers
[ 32- 63]: 7290058
[ 64- 127]: 9581182
[ 128- 255]: 1374090
[ 256- 511]: 779963
[ 512- 1023]: 1002094
[ 1024- 2047]: 16984334
Protocol Breakdown
![[protocol breakdown chart]](201203291400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37011721 (100.00%) 27409391262 (100.00%) 740.56
ip 36515327 ( 98.66%) 26978762679 ( 98.43%) 738.83
tcp 30332312 ( 81.95%) 24333277439 ( 88.78%) 802.22
http(s) 13057190 ( 35.28%) 17776048670 ( 64.85%) 1361.40
http(c) 7336958 ( 19.82%) 1120377244 ( 4.09%) 152.70
squid 1094106 ( 2.96%) 1394703600 ( 5.09%) 1274.74
smtp 51212 ( 0.14%) 16907772 ( 0.06%) 330.15
ftp 113183 ( 0.31%) 9177072 ( 0.03%) 81.08
pop3 3343 ( 0.01%) 495634 ( 0.00%) 148.26
imap 4251 ( 0.01%) 3744561 ( 0.01%) 880.87
telnet 4295 ( 0.01%) 313512 ( 0.00%) 72.99
ssh 1696433 ( 4.58%) 327574777 ( 1.20%) 193.10
dns 5323 ( 0.01%) 2119132 ( 0.01%) 398.11
bgp 660 ( 0.00%) 123348 ( 0.00%) 186.89
napster 780 ( 0.00%) 49168 ( 0.00%) 63.04
realaud 63 ( 0.00%) 6601 ( 0.00%) 104.78
rtsp 14931 ( 0.04%) 12075267 ( 0.04%) 808.74
icecast 35499 ( 0.10%) 16984899 ( 0.06%) 478.46
hotline 70 ( 0.00%) 4992 ( 0.00%) 71.31
other 6914015 ( 18.68%) 3652571190 ( 13.33%) 528.29
udp 3226125 ( 8.72%) 1392506863 ( 5.08%) 431.63
dns 543737 ( 1.47%) 129379010 ( 0.47%) 237.94
rip 5 ( 0.00%) 429 ( 0.00%) 85.80
realaud 5 ( 0.00%) 448 ( 0.00%) 89.60
halflif 11 ( 0.00%) 2519 ( 0.00%) 229.00
starcra 34 ( 0.00%) 5441 ( 0.00%) 160.03
everque 560 ( 0.00%) 173864 ( 0.00%) 310.47
unreal 122 ( 0.00%) 28855 ( 0.00%) 236.52
quake 11 ( 0.00%) 1004 ( 0.00%) 91.27
other 2466912 ( 6.67%) 1249990493 ( 4.56%) 506.70
icmp 1568668 ( 4.24%) 123552465 ( 0.45%) 78.76
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 8683 ( 0.02%) 2503682 ( 0.01%) 288.34
ip6 1360968 ( 3.68%) 1121177079 ( 4.09%) 823.81
pim 277 ( 0.00%) 16620 ( 0.00%) 60.00
other 18109 ( 0.05%) 5709261 ( 0.02%) 315.27
frag 469599 ( 1.27%) 358321556 ( 1.31%) 763.04
ip6 496394 ( 1.34%) 430628583 ( 1.57%) 867.51
tcp6 384812 ( 1.04%) 400867951 ( 1.46%) 1041.72
http(s) 14517 ( 0.04%) 17993501 ( 0.07%) 1239.48
http(c) 58338 ( 0.16%) 5056750 ( 0.02%) 86.68
smtp 843 ( 0.00%) 1079654 ( 0.00%) 1280.73
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 379 ( 0.00%) 75020 ( 0.00%) 197.94
bgp 89 ( 0.00%) 15604 ( 0.00%) 175.33
other 310629 ( 0.84%) 376645817 ( 1.37%) 1212.53
udp6 63753 ( 0.17%) 17271788 ( 0.06%) 270.92
dns 60003 ( 0.16%) 16320077 ( 0.06%) 271.99
halflif 1 ( 0.00%) 104 ( 0.00%) 104.00
everque 2 ( 0.00%) 211 ( 0.00%) 105.50
unreal 2 ( 0.00%) 212 ( 0.00%) 106.00
quake 1 ( 0.00%) 109 ( 0.00%) 109.00
other 3744 ( 0.01%) 951075 ( 0.00%) 254.03
icmp6 37008 ( 0.10%) 4779133 ( 0.02%) 129.14
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 10706 ( 0.03%) 7694083 ( 0.03%) 718.67
tcpdump file: 201203291400.dump.gz (886.85 MB)