Traffic Trace Info
DumpFile: 201203310115.dump
FileSize: 2840.50MB
Id: 201203310115
StartTime: Sat Mar 31 01:15:00 2012
EndTime: Sat Mar 31 01:30:00 2012
TotalTime: 899.69 seconds
TotalCapSize: -1834.31MB CapLen: 96 bytes
# of packets: 37932571 (31861.11MB)
AvgRate: 297.14Mbps stddev:53.06M
IP flow (unique src/dst pair) Information
# of flows: 2120636 (avg. 17.89 pkts/flow)
Top 10 big flow size (bytes/total in %):
17.7% 4.8% 3.4% 3.3% 2.8% 2.5% 1.9% 1.9% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1552136
Top 10 bandwidth usage (bytes/total in %):
20.1% 16.3% 11.7% 6.3% 4.4% 4.2% 4.2% 3.6% 3.5% 3.2%
# of IPv6 addresses: 6157
Top 10 bandwidth usage (bytes/total in %):
98.3% 85.0% 13.3% 0.6% 0.6% 0.5% 0.3% 0.3% 0.3% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310115.pktlen.png)
detailed numbers
[ 32- 63]: 6423312
[ 64- 127]: 7642491
[ 128- 255]: 1201421
[ 256- 511]: 549304
[ 512- 1023]: 721080
[ 1024- 2047]: 21394963
Protocol Breakdown
![[protocol breakdown chart]](201203310115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37932571 (100.00%) 33408797941 (100.00%) 880.74
ip 32998344 ( 86.99%) 26436820575 ( 79.13%) 801.16
tcp 24876439 ( 65.58%) 22943305627 ( 68.67%) 922.29
http(s) 11492471 ( 30.30%) 15653386521 ( 46.85%) 1362.06
http(c) 5122966 ( 13.51%) 513612273 ( 1.54%) 100.26
squid 65830 ( 0.17%) 47073289 ( 0.14%) 715.07
smtp 36780 ( 0.10%) 7983911 ( 0.02%) 217.07
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 23989 ( 0.06%) 7421842 ( 0.02%) 309.39
pop3 1633 ( 0.00%) 381445 ( 0.00%) 233.59
imap 1488 ( 0.00%) 441245 ( 0.00%) 296.54
telnet 2914 ( 0.01%) 211801 ( 0.00%) 72.68
ssh 137243 ( 0.36%) 24263221 ( 0.07%) 176.79
dns 2380 ( 0.01%) 295103 ( 0.00%) 123.99
bgp 630 ( 0.00%) 119694 ( 0.00%) 189.99
napster 59 ( 0.00%) 4365 ( 0.00%) 73.98
realaud 38 ( 0.00%) 5082 ( 0.00%) 133.74
rtsp 3 ( 0.00%) 180 ( 0.00%) 60.00
icecast 376 ( 0.00%) 68091 ( 0.00%) 181.09
hotline 6 ( 0.00%) 374 ( 0.00%) 62.33
other 7987619 ( 21.06%) 6688036322 ( 20.02%) 837.30
udp 4381489 ( 11.55%) 2273905051 ( 6.81%) 518.98
dns 281310 ( 0.74%) 57489007 ( 0.17%) 204.36
realaud 18 ( 0.00%) 2919 ( 0.00%) 162.17
halflif 77 ( 0.00%) 11215 ( 0.00%) 145.65
starcra 23 ( 0.00%) 2711 ( 0.00%) 117.87
everque 228 ( 0.00%) 43118 ( 0.00%) 189.11
unreal 16 ( 0.00%) 2009 ( 0.00%) 125.56
quake 17 ( 0.00%) 1866 ( 0.00%) 109.76
cuseeme 1 ( 0.00%) 93 ( 0.00%) 93.00
other 4027735 ( 10.62%) 2211981870 ( 6.62%) 549.19
icmp 1807729 ( 4.77%) 186140769 ( 0.56%) 102.97
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2177 ( 0.01%) 729062 ( 0.00%) 334.89
ip6 1907168 ( 5.03%) 1027948650 ( 3.08%) 538.99
pim 291 ( 0.00%) 17460 ( 0.00%) 60.00
other 22867 ( 0.06%) 4754796 ( 0.01%) 207.93
frag 156536 ( 0.41%) 119550886 ( 0.36%) 763.73
ip6 4934227 ( 13.01%) 6971977366 ( 20.87%) 1412.98
tcp6 4857657 ( 12.81%) 6956850509 ( 20.82%) 1432.14
http(s) 2180 ( 0.01%) 1739561 ( 0.01%) 797.96
http(c) 23854 ( 0.06%) 2043506 ( 0.01%) 85.67
smtp 115 ( 0.00%) 65817 ( 0.00%) 572.32
dns 75 ( 0.00%) 11024 ( 0.00%) 146.99
bgp 93 ( 0.00%) 17291 ( 0.00%) 185.92
other 4831340 ( 12.74%) 6952973310 ( 20.81%) 1439.14
udp6 49776 ( 0.13%) 11282648 ( 0.03%) 226.67
dns 42326 ( 0.11%) 9704155 ( 0.03%) 229.27
starcra 1 ( 0.00%) 113 ( 0.00%) 113.00
quake 1 ( 0.00%) 97 ( 0.00%) 97.00
other 7448 ( 0.02%) 1578283 ( 0.00%) 211.91
icmp6 26328 ( 0.07%) 3463688 ( 0.01%) 131.56
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 352 ( 0.00%) 365029 ( 0.00%) 1037.01
tcpdump file: 201203310115.dump.gz (813.41 MB)