Traffic Trace Info
DumpFile: 201203310000.dump
FileSize: 2280.35MB
Id: 201203310000
StartTime: Sat Mar 31 00:00:00 2012
EndTime: Sat Mar 31 00:15:01 2012
TotalTime: 900.28 seconds
TotalCapSize: 1793.55MB CapLen: 96 bytes
# of packets: 31902344 (24390.86MB)
AvgRate: 227.27Mbps stddev:38.69M
IP flow (unique src/dst pair) Information
# of flows: 2003423 (avg. 15.92 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 4.4% 2.9% 2.8% 2.6% 2.4% 1.9% 1.6% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 1526195
Top 10 bandwidth usage (bytes/total in %):
17.1% 16.7% 10.3% 5.8% 5.7% 4.9% 4.5% 4.5% 3.9% 3.8%
# of IPv6 addresses: 6396
Top 10 bandwidth usage (bytes/total in %):
68.9% 68.9% 9.1% 4.6% 4.2% 2.6% 2.5% 2.5% 2.3% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310000.pktlen.png)
detailed numbers
[ 32- 63]: 6363755
[ 64- 127]: 6818760
[ 128- 255]: 1112833
[ 256- 511]: 683823
[ 512- 1023]: 849033
[ 1024- 2047]: 16074140
Protocol Breakdown
![[protocol breakdown chart]](201203310000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31902344 (100.00%) 25575669551 (100.00%) 801.69
ip 31598204 ( 99.05%) 25363362078 ( 99.17%) 802.68
tcp 23192440 ( 72.70%) 21128383314 ( 82.61%) 911.00
http(s) 11212110 ( 35.15%) 15274423931 ( 59.72%) 1362.31
http(c) 5536500 ( 17.35%) 804249412 ( 3.14%) 145.26
squid 94327 ( 0.30%) 70911475 ( 0.28%) 751.76
smtp 54348 ( 0.17%) 19206857 ( 0.08%) 353.41
nntp 5 ( 0.00%) 300 ( 0.00%) 60.00
ftp 11345 ( 0.04%) 1949453 ( 0.01%) 171.83
pop3 1551 ( 0.00%) 361893 ( 0.00%) 233.33
imap 4297 ( 0.01%) 3639500 ( 0.01%) 846.99
telnet 2001 ( 0.01%) 147092 ( 0.00%) 73.51
ssh 36077 ( 0.11%) 12667464 ( 0.05%) 351.12
dns 2412 ( 0.01%) 305194 ( 0.00%) 126.53
bgp 639 ( 0.00%) 126059 ( 0.00%) 197.28
napster 6 ( 0.00%) 380 ( 0.00%) 63.33
realaud 67 ( 0.00%) 5276 ( 0.00%) 78.75
icecast 644 ( 0.00%) 139771 ( 0.00%) 217.04
hotline 8 ( 0.00%) 500 ( 0.00%) 62.50
other 6236103 ( 19.55%) 4940248757 ( 19.32%) 792.20
udp 4218574 ( 13.22%) 2383569496 ( 9.32%) 565.02
dns 420569 ( 1.32%) 84254758 ( 0.33%) 200.34
realaud 145 ( 0.00%) 30215 ( 0.00%) 208.38
halflif 27 ( 0.00%) 3285 ( 0.00%) 121.67
starcra 24 ( 0.00%) 2970 ( 0.00%) 123.75
everque 236 ( 0.00%) 50832 ( 0.00%) 215.39
unreal 24 ( 0.00%) 3425 ( 0.00%) 142.71
quake 78 ( 0.00%) 26609 ( 0.00%) 341.14
cuseeme 22 ( 0.00%) 9517 ( 0.00%) 432.59
other 3794005 ( 11.89%) 2298940699 ( 8.99%) 605.94
icmp 2080621 ( 6.52%) 212326058 ( 0.83%) 102.05
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 1921 ( 0.01%) 605270 ( 0.00%) 315.08
ip6 2079875 ( 6.52%) 1633006498 ( 6.38%) 785.15
pim 231 ( 0.00%) 13860 ( 0.00%) 60.00
other 24358 ( 0.08%) 5438422 ( 0.02%) 223.27
frag 8205 ( 0.03%) 6419841 ( 0.03%) 782.43
ip6 304140 ( 0.95%) 212307473 ( 0.83%) 698.06
tcp6 217134 ( 0.68%) 194689708 ( 0.76%) 896.63
http(s) 18226 ( 0.06%) 23861989 ( 0.09%) 1309.23
http(c) 14271 ( 0.04%) 1230654 ( 0.00%) 86.23
smtp 745 ( 0.00%) 363481 ( 0.00%) 487.89
ftp 2 ( 0.00%) 239 ( 0.00%) 119.50
dns 283 ( 0.00%) 49789 ( 0.00%) 175.93
bgp 92 ( 0.00%) 15221 ( 0.00%) 165.45
other 183515 ( 0.58%) 169168335 ( 0.66%) 921.82
udp6 58098 ( 0.18%) 13473797 ( 0.05%) 231.91
dns 51172 ( 0.16%) 11374098 ( 0.04%) 222.27
realaud 1 ( 0.00%) 119 ( 0.00%) 119.00
halflif 1 ( 0.00%) 104 ( 0.00%) 104.00
starcra 1 ( 0.00%) 100 ( 0.00%) 100.00
everque 1 ( 0.00%) 100 ( 0.00%) 100.00
other 6922 ( 0.02%) 2099276 ( 0.01%) 303.28
icmp6 28364 ( 0.09%) 3730974 ( 0.01%) 131.54
ip6 88 ( 0.00%) 11934 ( 0.00%) 135.61
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 425 ( 0.00%) 396844 ( 0.00%) 933.75
tcpdump file: 201203310000.dump.gz (724.45 MB)