Traffic Trace Info
DumpFile: 201203310030.dump
FileSize: 2820.11MB
Id: 201203310030
StartTime: Sat Mar 31 00:30:00 2012
EndTime: Sat Mar 31 00:45:00 2012
TotalTime: 899.95 seconds
TotalCapSize: -1874.03MB CapLen: 96 bytes
# of packets: 39199207 (31305.78MB)
AvgRate: 291.83Mbps stddev:47.54M
IP flow (unique src/dst pair) Information
# of flows: 2013206 (avg. 19.47 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 4.9% 4.4% 3.4% 1.8% 1.7% 1.3% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 1466410
Top 10 bandwidth usage (bytes/total in %):
21.7% 21.2% 14.3% 6.7% 5.5% 5.0% 4.5% 3.5% 3.5% 2.8%
# of IPv6 addresses: 6196
Top 10 bandwidth usage (bytes/total in %):
82.8% 82.8% 2.3% 1.6% 1.6% 1.2% 1.0% 1.0% 1.0% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310030.pktlen.png)
detailed numbers
[ 32- 63]: 7615738
[ 64- 127]: 8253806
[ 128- 255]: 1122039
[ 256- 511]: 592253
[ 512- 1023]: 789851
[ 1024- 2047]: 20825520
Protocol Breakdown
![[protocol breakdown chart]](201203310030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39199207 (100.00%) 32826493922 (100.00%) 837.43
ip 38972423 ( 99.42%) 32641329193 ( 99.44%) 837.55
tcp 31176678 ( 79.53%) 28860454595 ( 87.92%) 925.71
http(s) 15476631 ( 39.48%) 21657464645 ( 65.98%) 1399.37
http(c) 7565305 ( 19.30%) 721295918 ( 2.20%) 95.34
squid 128508 ( 0.33%) 63898610 ( 0.19%) 497.23
smtp 42740 ( 0.11%) 10945959 ( 0.03%) 256.11
ftp 14705 ( 0.04%) 2858881 ( 0.01%) 194.42
pop3 1383 ( 0.00%) 296537 ( 0.00%) 214.42
imap 1828 ( 0.00%) 593583 ( 0.00%) 324.72
telnet 2541 ( 0.01%) 186604 ( 0.00%) 73.44
ssh 404825 ( 1.03%) 74891559 ( 0.23%) 185.00
dns 2300 ( 0.01%) 269416 ( 0.00%) 117.14
bgp 617 ( 0.00%) 114422 ( 0.00%) 185.45
napster 1511 ( 0.00%) 105242 ( 0.00%) 69.65
realaud 699 ( 0.00%) 676161 ( 0.00%) 967.33
icecast 631 ( 0.00%) 171057 ( 0.00%) 271.09
hotline 7 ( 0.00%) 815 ( 0.00%) 116.43
other 7532443 ( 19.22%) 6326684946 ( 19.27%) 839.92
udp 3723861 ( 9.50%) 1755933847 ( 5.35%) 471.54
dns 316754 ( 0.81%) 64257084 ( 0.20%) 202.86
realaud 6 ( 0.00%) 482 ( 0.00%) 80.33
halflif 57 ( 0.00%) 8481 ( 0.00%) 148.79
starcra 15 ( 0.00%) 2703 ( 0.00%) 180.20
everque 442 ( 0.00%) 64900 ( 0.00%) 146.83
unreal 9 ( 0.00%) 1323 ( 0.00%) 147.00
quake 4 ( 0.00%) 578 ( 0.00%) 144.50
cuseeme 2 ( 0.00%) 184 ( 0.00%) 92.00
other 3238294 ( 8.26%) 1681466415 ( 5.12%) 519.24
icmp 1700220 ( 4.34%) 178830132 ( 0.54%) 105.18
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1959 ( 0.00%) 634202 ( 0.00%) 323.74
ip6 2346288 ( 5.99%) 1840527337 ( 5.61%) 784.44
pim 275 ( 0.00%) 16500 ( 0.00%) 60.00
other 22957 ( 0.06%) 4913310 ( 0.01%) 214.02
frag 366411 ( 0.93%) 279617281 ( 0.85%) 763.12
ip6 226784 ( 0.58%) 185164729 ( 0.56%) 816.48
tcp6 144682 ( 0.37%) 169824473 ( 0.52%) 1173.78
http(s) 6552 ( 0.02%) 7853669 ( 0.02%) 1198.67
http(c) 20181 ( 0.05%) 1781613 ( 0.01%) 88.28
smtp 171 ( 0.00%) 86405 ( 0.00%) 505.29
dns 262 ( 0.00%) 53853 ( 0.00%) 205.55
bgp 90 ( 0.00%) 14423 ( 0.00%) 160.26
other 117426 ( 0.30%) 160034510 ( 0.49%) 1362.85
udp6 56314 ( 0.14%) 11577147 ( 0.04%) 205.58
dns 45121 ( 0.12%) 10025190 ( 0.03%) 222.18
starcra 2 ( 0.00%) 210 ( 0.00%) 105.00
everque 2 ( 0.00%) 205 ( 0.00%) 102.50
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 11188 ( 0.03%) 1551435 ( 0.00%) 138.67
icmp6 25360 ( 0.06%) 3438078 ( 0.01%) 135.57
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 314 ( 0.00%) 309539 ( 0.00%) 985.79
tcpdump file: 201203310030.dump.gz (865.49 MB)