Traffic Trace Info
DumpFile: 201203310015.dump
FileSize: 2475.82MB
Id: 201203310015
StartTime: Sat Mar 31 00:15:01 2012
EndTime: Sat Mar 31 00:30:00 2012
TotalTime: 899.59 seconds
TotalCapSize: 1945.73MB CapLen: 96 bytes
# of packets: 34739212 (27012.16MB)
AvgRate: 251.87Mbps stddev:54.81M
IP flow (unique src/dst pair) Information
# of flows: 1860254 (avg. 18.67 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.6% 5.0% 4.0% 3.1% 2.8% 2.0% 1.4% 1.4% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1448465
Top 10 bandwidth usage (bytes/total in %):
21.0% 15.5% 11.8% 7.8% 5.2% 5.2% 4.1% 4.1% 3.3% 3.2%
# of IPv6 addresses: 6161
Top 10 bandwidth usage (bytes/total in %):
58.3% 58.2% 26.9% 26.9% 3.7% 2.3% 2.0% 1.8% 1.6% 1.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310015.pktlen.png)
detailed numbers
[ 32- 63]: 6793734
[ 64- 127]: 7542825
[ 128- 255]: 1166687
[ 256- 511]: 610464
[ 512- 1023]: 726467
[ 1024- 2047]: 17899035
Protocol Breakdown
![[protocol breakdown chart]](201203310015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34739212 (100.00%) 28324303489 (100.00%) 815.34
ip 34435992 ( 99.13%) 28045370983 ( 99.02%) 814.42
tcp 25931150 ( 74.65%) 23727347286 ( 83.77%) 915.01
http(s) 11834788 ( 34.07%) 16145897671 ( 57.00%) 1364.27
http(c) 6375733 ( 18.35%) 996852963 ( 3.52%) 156.35
squid 91999 ( 0.26%) 60584994 ( 0.21%) 658.54
smtp 38331 ( 0.11%) 9184333 ( 0.03%) 239.61
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 14761 ( 0.04%) 3470791 ( 0.01%) 235.13
pop3 1496 ( 0.00%) 331731 ( 0.00%) 221.75
imap 3446 ( 0.01%) 1425309 ( 0.01%) 413.61
telnet 7121 ( 0.02%) 4670516 ( 0.02%) 655.88
ssh 34819 ( 0.10%) 15783959 ( 0.06%) 453.31
dns 2243 ( 0.01%) 276286 ( 0.00%) 123.18
bgp 636 ( 0.00%) 122368 ( 0.00%) 192.40
napster 126 ( 0.00%) 8520 ( 0.00%) 67.62
realaud 29 ( 0.00%) 2238 ( 0.00%) 77.17
icecast 561 ( 0.00%) 97371 ( 0.00%) 173.57
hotline 17 ( 0.00%) 1444 ( 0.00%) 84.94
other 7525034 ( 21.66%) 6488636178 ( 22.91%) 862.27
udp 4585997 ( 13.20%) 2574414211 ( 9.09%) 561.36
dns 311172 ( 0.90%) 63193885 ( 0.22%) 203.08
realaud 9 ( 0.00%) 1099 ( 0.00%) 122.11
halflif 29 ( 0.00%) 3212 ( 0.00%) 110.76
starcra 22 ( 0.00%) 2239 ( 0.00%) 101.77
everque 269 ( 0.00%) 49940 ( 0.00%) 185.65
unreal 20 ( 0.00%) 2327 ( 0.00%) 116.35
quake 16 ( 0.00%) 4167 ( 0.00%) 260.44
cuseeme 2 ( 0.00%) 186 ( 0.00%) 93.00
other 4040928 ( 11.63%) 2497088667 ( 8.82%) 617.95
icmp 1821805 ( 5.24%) 188287236 ( 0.66%) 103.35
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2012 ( 0.01%) 660920 ( 0.00%) 328.49
ip6 2073133 ( 5.97%) 1550541335 ( 5.47%) 747.92
pim 241 ( 0.00%) 14460 ( 0.00%) 60.00
other 21469 ( 0.06%) 4086265 ( 0.01%) 190.33
frag 506467 ( 1.46%) 386334825 ( 1.36%) 762.80
ip6 303218 ( 0.87%) 278932386 ( 0.98%) 919.91
tcp6 222517 ( 0.64%) 261727180 ( 0.92%) 1176.21
http(s) 6872 ( 0.02%) 7902031 ( 0.03%) 1149.89
http(c) 12271 ( 0.04%) 1058783 ( 0.00%) 86.28
smtp 174 ( 0.00%) 91396 ( 0.00%) 525.26
dns 103 ( 0.00%) 20542 ( 0.00%) 199.44
bgp 92 ( 0.00%) 16332 ( 0.00%) 177.52
other 203005 ( 0.58%) 252638096 ( 0.89%) 1244.49
udp6 54313 ( 0.16%) 13436916 ( 0.05%) 247.40
dns 46695 ( 0.13%) 10182512 ( 0.04%) 218.06
quake 2 ( 0.00%) 215 ( 0.00%) 107.50
cuseeme 1 ( 0.00%) 104 ( 0.00%) 104.00
other 7615 ( 0.02%) 3254085 ( 0.01%) 427.33
icmp6 25997 ( 0.07%) 3494553 ( 0.01%) 134.42
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 277 ( 0.00%) 258245 ( 0.00%) 932.29
tcpdump file: 201203310015.dump.gz (765.56 MB)