Traffic Trace Info
DumpFile: 201203310130.dump
FileSize: 2244.01MB
Id: 201203310130
StartTime: Sat Mar 31 01:30:00 2012
EndTime: Sat Mar 31 01:45:00 2012
TotalTime: 899.69 seconds
TotalCapSize: 1773.43MB CapLen: 96 bytes
# of packets: 30839566 (23527.29MB)
AvgRate: 219.36Mbps stddev:36.35M
IP flow (unique src/dst pair) Information
# of flows: 1953097 (avg. 15.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 4.5% 3.2% 2.9% 2.9% 2.4% 2.2% 1.4% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 1491872
Top 10 bandwidth usage (bytes/total in %):
23.4% 18.1% 8.6% 6.9% 5.0% 4.7% 3.9% 3.4% 3.4% 3.1%
# of IPv6 addresses: 6333
Top 10 bandwidth usage (bytes/total in %):
91.3% 90.0% 4.2% 4.2% 1.5% 1.0% 0.7% 0.6% 0.6% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310130.pktlen.png)
detailed numbers
[ 32- 63]: 6005831
[ 64- 127]: 7085973
[ 128- 255]: 1063198
[ 256- 511]: 529155
[ 512- 1023]: 715859
[ 1024- 2047]: 15439550
Protocol Breakdown
![[protocol breakdown chart]](201203310130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30839566 (100.00%) 24670154450 (100.00%) 799.95
ip 30299817 ( 98.25%) 24012746155 ( 97.34%) 792.50
tcp 23458132 ( 76.07%) 21675176081 ( 87.86%) 923.99
http(s) 11029366 ( 35.76%) 14997993122 ( 60.79%) 1359.82
http(c) 4605923 ( 14.94%) 500828961 ( 2.03%) 108.74
squid 65155 ( 0.21%) 48379394 ( 0.20%) 742.53
smtp 30247 ( 0.10%) 5841826 ( 0.02%) 193.14
ftp 19238 ( 0.06%) 1836863 ( 0.01%) 95.48
pop3 1443 ( 0.00%) 312356 ( 0.00%) 216.46
imap 2177 ( 0.01%) 229021 ( 0.00%) 105.20
telnet 2630 ( 0.01%) 269469 ( 0.00%) 102.46
ssh 29079 ( 0.09%) 11517849 ( 0.05%) 396.09
dns 2236 ( 0.01%) 262162 ( 0.00%) 117.25
bgp 604 ( 0.00%) 94956 ( 0.00%) 157.21
napster 42 ( 0.00%) 3180 ( 0.00%) 75.71
realaud 87 ( 0.00%) 12811 ( 0.00%) 147.25
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 496 ( 0.00%) 153253 ( 0.00%) 308.98
hotline 14 ( 0.00%) 870 ( 0.00%) 62.14
other 7669392 ( 24.87%) 6107439808 ( 24.76%) 796.34
udp 3133089 ( 10.16%) 1166758366 ( 4.73%) 372.40
dns 290517 ( 0.94%) 60568997 ( 0.25%) 208.49
realaud 20 ( 0.00%) 4371 ( 0.00%) 218.55
halflif 64 ( 0.00%) 9247 ( 0.00%) 144.48
starcra 41 ( 0.00%) 5516 ( 0.00%) 134.54
everque 219 ( 0.00%) 63408 ( 0.00%) 289.53
unreal 24 ( 0.00%) 3176 ( 0.00%) 132.33
quake 11 ( 0.00%) 1556 ( 0.00%) 141.45
cuseeme 2 ( 0.00%) 454 ( 0.00%) 227.00
other 2840701 ( 9.21%) 1105975722 ( 4.48%) 389.33
icmp 1783500 ( 5.78%) 182227078 ( 0.74%) 102.17
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2209 ( 0.01%) 771974 ( 0.00%) 349.47
ip6 1900638 ( 6.16%) 983986402 ( 3.99%) 517.71
pim 223 ( 0.00%) 13380 ( 0.00%) 60.00
other 21842 ( 0.07%) 3793714 ( 0.02%) 173.69
frag 3653 ( 0.01%) 2923458 ( 0.01%) 800.29
ip6 539749 ( 1.75%) 657408295 ( 2.66%) 1217.99
tcp6 458139 ( 1.49%) 641998153 ( 2.60%) 1401.32
http(s) 7559 ( 0.02%) 9739442 ( 0.04%) 1288.46
http(c) 24448 ( 0.08%) 2105943 ( 0.01%) 86.14
smtp 77 ( 0.00%) 46201 ( 0.00%) 600.01
dns 232 ( 0.00%) 54428 ( 0.00%) 234.60
bgp 89 ( 0.00%) 13127 ( 0.00%) 147.49
other 425734 ( 1.38%) 630039012 ( 2.55%) 1479.89
udp6 52135 ( 0.17%) 11113840 ( 0.05%) 213.17
dns 40097 ( 0.13%) 9103928 ( 0.04%) 227.05
realaud 1 ( 0.00%) 104 ( 0.00%) 104.00
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 12035 ( 0.04%) 2009596 ( 0.01%) 166.98
icmp6 28705 ( 0.09%) 3745194 ( 0.02%) 130.47
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 656 ( 0.00%) 535598 ( 0.00%) 816.46
tcpdump file: 201203310130.dump.gz (699.22 MB)