Traffic Trace Info
DumpFile: 201203310600.dump
FileSize: 1409.46MB
Id: 201203310600
StartTime: Sat Mar 31 06:00:00 2012
EndTime: Sat Mar 31 06:15:00 2012
TotalTime: 900.45 seconds
TotalCapSize: 1099.78MB CapLen: 96 bytes
# of packets: 20295114 (14872.56MB)
AvgRate: 138.58Mbps stddev:25.28M
IP flow (unique src/dst pair) Information
# of flows: 2218039 (avg. 9.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.0% 3.5% 3.3% 2.7% 2.5% 2.2% 2.1% 1.8% 1.7% 1.6%
IP address Information
# of IPv4 addresses: 1648634
Top 10 bandwidth usage (bytes/total in %):
17.9% 12.2% 10.7% 7.9% 6.9% 4.4% 4.1% 3.9% 3.5% 3.3%
# of IPv6 addresses: 4959
Top 10 bandwidth usage (bytes/total in %):
47.8% 21.7% 20.7% 12.4% 12.4% 8.1% 7.2% 7.2% 2.9% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310600.pktlen.png)
detailed numbers
[ 32- 63]: 4674211
[ 64- 127]: 3878893
[ 128- 255]: 951695
[ 256- 511]: 503449
[ 512- 1023]: 492662
[ 1024- 2047]: 9794204
Protocol Breakdown
![[protocol breakdown chart]](201203310600.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 20295114 (100.00%) 15595014449 (100.00%) 768.41
ip 20187598 ( 99.47%) 15553763951 ( 99.74%) 770.46
tcp 12935059 ( 63.73%) 11844843627 ( 75.95%) 915.72
http(s) 5792039 ( 28.54%) 7763658123 ( 49.78%) 1340.40
http(c) 2016414 ( 9.94%) 191780673 ( 1.23%) 95.11
squid 56287 ( 0.28%) 34260351 ( 0.22%) 608.67
smtp 31913 ( 0.16%) 5520545 ( 0.04%) 172.99
nntp 7 ( 0.00%) 434 ( 0.00%) 62.00
ftp 7543 ( 0.04%) 892028 ( 0.01%) 118.26
pop3 1378 ( 0.01%) 293445 ( 0.00%) 212.95
imap 2524 ( 0.01%) 870130 ( 0.01%) 344.74
telnet 6174 ( 0.03%) 433927 ( 0.00%) 70.28
ssh 48379 ( 0.24%) 5986051 ( 0.04%) 123.73
dns 2169 ( 0.01%) 262429 ( 0.00%) 120.99
bgp 653 ( 0.00%) 138089 ( 0.00%) 211.47
napster 17 ( 0.00%) 1100 ( 0.00%) 64.71
realaud 16 ( 0.00%) 1840 ( 0.00%) 115.00
rtsp 119 ( 0.00%) 31734 ( 0.00%) 266.67
icecast 2845 ( 0.01%) 1725552 ( 0.01%) 606.52
hotline 6 ( 0.00%) 754 ( 0.00%) 125.67
other 4966575 ( 24.47%) 3838986362 ( 24.62%) 772.96
udp 4077763 ( 20.09%) 2090801425 ( 13.41%) 512.73
dns 275367 ( 1.36%) 55925626 ( 0.36%) 203.09
rip 2 ( 0.00%) 202 ( 0.00%) 101.00
realaud 344 ( 0.00%) 22997 ( 0.00%) 66.85
halflif 33 ( 0.00%) 4943 ( 0.00%) 149.79
starcra 18 ( 0.00%) 3644 ( 0.00%) 202.44
everque 260 ( 0.00%) 72160 ( 0.00%) 277.54
unreal 135 ( 0.00%) 34655 ( 0.00%) 256.70
quake 15 ( 0.00%) 2542 ( 0.00%) 169.47
cuseeme 4 ( 0.00%) 816 ( 0.00%) 204.00
other 3347614 ( 16.49%) 2007070361 ( 12.87%) 599.55
icmp 1776175 ( 8.75%) 203277449 ( 1.30%) 114.45
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 10327 ( 0.05%) 4491418 ( 0.03%) 434.92
ip6 1282460 ( 6.32%) 1279394132 ( 8.20%) 997.61
pim 331 ( 0.00%) 19860 ( 0.00%) 60.00
other 105299 ( 0.52%) 130916880 ( 0.84%) 1243.29
frag 1163135 ( 5.73%) 886414702 ( 5.68%) 762.09
ip6 107516 ( 0.53%) 41250498 ( 0.26%) 383.67
tcp6 39634 ( 0.20%) 24569391 ( 0.16%) 619.91
http(s) 7962 ( 0.04%) 10571895 ( 0.07%) 1327.79
http(c) 18343 ( 0.09%) 1633974 ( 0.01%) 89.08
smtp 414 ( 0.00%) 134280 ( 0.00%) 324.35
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 218 ( 0.00%) 52748 ( 0.00%) 241.96
bgp 90 ( 0.00%) 15796 ( 0.00%) 175.51
other 12590 ( 0.06%) 12159093 ( 0.08%) 965.77
udp6 37187 ( 0.18%) 8220900 ( 0.05%) 221.07
dns 35414 ( 0.17%) 7972018 ( 0.05%) 225.11
realaud 1 ( 0.00%) 105 ( 0.00%) 105.00
everque 1 ( 0.00%) 105 ( 0.00%) 105.00
unreal 2 ( 0.00%) 211 ( 0.00%) 105.50
quake 2 ( 0.00%) 200 ( 0.00%) 100.00
other 1767 ( 0.01%) 248261 ( 0.00%) 140.50
icmp6 22978 ( 0.11%) 2998435 ( 0.02%) 130.49
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 7601 ( 0.04%) 5446044 ( 0.03%) 716.49
tcpdump file: 201203310600.dump.gz (441.48 MB)