Traffic Trace Info
DumpFile: 201203310100.dump
FileSize: 2585.03MB
Id: 201203310100
StartTime: Sat Mar 31 01:00:01 2012
EndTime: Sat Mar 31 01:15:00 2012
TotalTime: 899.59 seconds
TotalCapSize: -2044.59MB CapLen: 96 bytes
# of packets: 34970444 (27342.97MB)
AvgRate: 255.02Mbps stddev:53.58M
IP flow (unique src/dst pair) Information
# of flows: 1924370 (avg. 18.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.1% 5.7% 4.7% 4.0% 4.0% 1.5% 1.2% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 1464403
Top 10 bandwidth usage (bytes/total in %):
20.8% 13.7% 13.6% 6.3% 5.2% 4.4% 4.4% 4.4% 4.4% 3.7%
# of IPv6 addresses: 6283
Top 10 bandwidth usage (bytes/total in %):
94.8% 94.3% 1.7% 1.7% 1.3% 0.9% 0.6% 0.6% 0.4% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310100.pktlen.png)
detailed numbers
[ 32- 63]: 5535348
[ 64- 127]: 8975719
[ 128- 255]: 1128382
[ 256- 511]: 586532
[ 512- 1023]: 714753
[ 1024- 2047]: 18029710
Protocol Breakdown
![[protocol breakdown chart]](201203310100.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34970444 (100.00%) 28671185005 (100.00%) 819.87
ip 33419102 ( 95.56%) 26510090223 ( 92.46%) 793.26
tcp 25728179 ( 73.57%) 23651450033 ( 82.49%) 919.28
http(s) 12027298 ( 34.39%) 16581100258 ( 57.83%) 1378.62
http(c) 5918937 ( 16.93%) 564878132 ( 1.97%) 95.44
squid 72460 ( 0.21%) 53211094 ( 0.19%) 734.35
smtp 31707 ( 0.09%) 6078378 ( 0.02%) 191.70
ftp 29770 ( 0.09%) 15950313 ( 0.06%) 535.78
pop3 1435 ( 0.00%) 325121 ( 0.00%) 226.57
imap 1728 ( 0.00%) 422902 ( 0.00%) 244.73
telnet 3022 ( 0.01%) 220093 ( 0.00%) 72.83
ssh 67950 ( 0.19%) 15239700 ( 0.05%) 224.28
dns 2523 ( 0.01%) 283747 ( 0.00%) 112.46
bgp 637 ( 0.00%) 121584 ( 0.00%) 190.87
napster 54 ( 0.00%) 4945 ( 0.00%) 91.57
realaud 46 ( 0.00%) 4525 ( 0.00%) 98.37
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 2043 ( 0.01%) 238740 ( 0.00%) 116.86
hotline 5 ( 0.00%) 799 ( 0.00%) 159.80
other 7568562 ( 21.64%) 6413369582 ( 22.37%) 847.37
udp 3699513 ( 10.58%) 1652107993 ( 5.76%) 446.57
dns 313160 ( 0.90%) 63482455 ( 0.22%) 202.72
realaud 7 ( 0.00%) 1257 ( 0.00%) 179.57
halflif 90 ( 0.00%) 14422 ( 0.00%) 160.24
starcra 27 ( 0.00%) 3934 ( 0.00%) 145.70
everque 484 ( 0.00%) 85396 ( 0.00%) 176.44
unreal 75 ( 0.00%) 13794 ( 0.00%) 183.92
quake 24 ( 0.00%) 3789 ( 0.00%) 157.88
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 3385196 ( 9.68%) 1588431008 ( 5.54%) 469.23
icmp 1723873 ( 4.93%) 180371347 ( 0.63%) 104.63
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1991 ( 0.01%) 640298 ( 0.00%) 321.60
ip6 2240762 ( 6.41%) 1019554656 ( 3.56%) 455.00
pim 235 ( 0.00%) 14100 ( 0.00%) 60.00
other 24364 ( 0.07%) 5932526 ( 0.02%) 243.50
frag 1652 ( 0.00%) 1342427 ( 0.00%) 812.61
ip6 1551342 ( 4.44%) 2161094782 ( 7.54%) 1393.05
tcp6 1468315 ( 4.20%) 2143551776 ( 7.48%) 1459.87
http(s) 11786 ( 0.03%) 15211795 ( 0.05%) 1290.67
http(c) 13469 ( 0.04%) 1317051 ( 0.00%) 97.78
smtp 360 ( 0.00%) 261288 ( 0.00%) 725.80
ftp 22 ( 0.00%) 2041 ( 0.00%) 92.77
dns 363 ( 0.00%) 73730 ( 0.00%) 203.11
bgp 88 ( 0.00%) 17487 ( 0.00%) 198.72
other 1442227 ( 4.12%) 2126668384 ( 7.42%) 1474.57
udp6 56144 ( 0.16%) 13560112 ( 0.05%) 241.52
dns 50267 ( 0.14%) 12570753 ( 0.04%) 250.08
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
unreal 2 ( 0.00%) 209 ( 0.00%) 104.50
quake 1 ( 0.00%) 109 ( 0.00%) 109.00
cuseeme 1 ( 0.00%) 118 ( 0.00%) 118.00
other 5872 ( 0.02%) 988813 ( 0.00%) 168.39
icmp6 26281 ( 0.08%) 3490966 ( 0.01%) 132.83
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 487 ( 0.00%) 476268 ( 0.00%) 977.96
tcpdump file: 201203310100.dump.gz (780.18 MB)