Traffic Trace Info
DumpFile: 201203310200.dump
FileSize: 2247.08MB
Id: 201203310200
StartTime: Sat Mar 31 02:00:00 2012
EndTime: Sat Mar 31 02:15:01 2012
TotalTime: 900.32 seconds
TotalCapSize: 1764.65MB CapLen: 96 bytes
# of packets: 31616022 (24679.67MB)
AvgRate: 229.93Mbps stddev:61.24M
IP flow (unique src/dst pair) Information
# of flows: 1973834 (avg. 16.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.2% 6.4% 4.4% 3.4% 3.4% 2.7% 2.0% 1.6% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 1493901
Top 10 bandwidth usage (bytes/total in %):
16.3% 15.7% 14.5% 12.2% 10.0% 6.5% 4.5% 3.5% 3.5% 3.5%
# of IPv6 addresses: 6898
Top 10 bandwidth usage (bytes/total in %):
23.9% 23.9% 12.8% 12.6% 11.1% 8.6% 7.8% 7.8% 7.2% 6.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310200.pktlen.png)
detailed numbers
[ 32- 63]: 6274818
[ 64- 127]: 6715632
[ 128- 255]: 1085584
[ 256- 511]: 517564
[ 512- 1023]: 642212
[ 1024- 2047]: 16380212
Protocol Breakdown
![[protocol breakdown chart]](201203310200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31616022 (100.00%) 25878505413 (100.00%) 818.53
ip 31438178 ( 99.44%) 25774771900 ( 99.60%) 819.86
tcp 24711133 ( 78.16%) 22978132632 ( 88.79%) 929.87
http(s) 11308994 ( 35.77%) 15840521838 ( 61.21%) 1400.70
http(c) 4893751 ( 15.48%) 496984558 ( 1.92%) 101.55
squid 57496 ( 0.18%) 40514022 ( 0.16%) 704.64
smtp 38173 ( 0.12%) 9668132 ( 0.04%) 253.27
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 12519 ( 0.04%) 1142273 ( 0.00%) 91.24
pop3 1376 ( 0.00%) 321803 ( 0.00%) 233.87
imap 1231 ( 0.00%) 115925 ( 0.00%) 94.17
telnet 2909 ( 0.01%) 210304 ( 0.00%) 72.29
ssh 29828 ( 0.09%) 9230219 ( 0.04%) 309.45
dns 2477 ( 0.01%) 286805 ( 0.00%) 115.79
bgp 634 ( 0.00%) 118120 ( 0.00%) 186.31
napster 8319 ( 0.03%) 8080236 ( 0.03%) 971.30
realaud 127 ( 0.00%) 14766 ( 0.00%) 116.27
rtsp 11 ( 0.00%) 660 ( 0.00%) 60.00
icecast 1416 ( 0.00%) 954869 ( 0.00%) 674.34
hotline 3 ( 0.00%) 180 ( 0.00%) 60.00
other 8351857 ( 26.42%) 6569967188 ( 25.39%) 786.65
udp 3471599 ( 10.98%) 1458018483 ( 5.63%) 419.98
dns 293658 ( 0.93%) 59373129 ( 0.23%) 202.18
rip 1 ( 0.00%) 204 ( 0.00%) 204.00
realaud 9 ( 0.00%) 1287 ( 0.00%) 143.00
halflif 33 ( 0.00%) 4283 ( 0.00%) 129.79
starcra 21 ( 0.00%) 3142 ( 0.00%) 149.62
everque 260 ( 0.00%) 74290 ( 0.00%) 285.73
unreal 38 ( 0.00%) 5680 ( 0.00%) 149.47
quake 26 ( 0.00%) 4429 ( 0.00%) 170.35
cuseeme 1 ( 0.00%) 87 ( 0.00%) 87.00
other 3084314 ( 9.76%) 1392920078 ( 5.38%) 451.61
icmp 1696149 ( 5.36%) 176786928 ( 0.68%) 104.23
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 144968 ( 0.46%) 132625968 ( 0.51%) 914.86
ip6 1312516 ( 4.15%) 904412717 ( 3.49%) 689.07
pim 282 ( 0.00%) 16920 ( 0.00%) 60.00
other 101346 ( 0.32%) 124758982 ( 0.48%) 1231.02
frag 200894 ( 0.64%) 153345959 ( 0.59%) 763.32
ip6 177844 ( 0.56%) 103733513 ( 0.40%) 583.28
tcp6 80066 ( 0.25%) 75194828 ( 0.29%) 939.16
http(s) 11025 ( 0.03%) 14425625 ( 0.06%) 1308.45
http(c) 13630 ( 0.04%) 1308580 ( 0.01%) 96.01
smtp 196 ( 0.00%) 122589 ( 0.00%) 625.45
ftp 40 ( 0.00%) 7729 ( 0.00%) 193.22
dns 324 ( 0.00%) 68418 ( 0.00%) 211.17
bgp 89 ( 0.00%) 14966 ( 0.00%) 168.16
other 54762 ( 0.17%) 59246921 ( 0.23%) 1081.90
udp6 54947 ( 0.17%) 17831365 ( 0.07%) 324.52
dns 41802 ( 0.13%) 10225900 ( 0.04%) 244.63
realaud 1 ( 0.00%) 95 ( 0.00%) 95.00
halflif 1 ( 0.00%) 110 ( 0.00%) 110.00
everque 1 ( 0.00%) 89 ( 0.00%) 89.00
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
other 13141 ( 0.04%) 7605061 ( 0.03%) 578.73
icmp6 33644 ( 0.11%) 4184709 ( 0.02%) 124.38
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 9073 ( 0.03%) 6507101 ( 0.03%) 717.19
tcpdump file: 201203310200.dump.gz (698.93 MB)