Traffic Trace Info
DumpFile: 201203310630.dump
FileSize: 1363.89MB
Id: 201203310630
StartTime: Sat Mar 31 06:30:00 2012
EndTime: Sat Mar 31 06:45:00 2012
TotalTime: 899.96 seconds
TotalCapSize: 1067.21MB CapLen: 96 bytes
# of packets: 19442816 (14047.23MB)
AvgRate: 130.92Mbps stddev:23.85M
IP flow (unique src/dst pair) Information
# of flows: 1843581 (avg. 10.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 3.6% 3.5% 3.3% 3.3% 2.7% 2.6% 2.0% 2.0% 1.9%
IP address Information
# of IPv4 addresses: 1444222
Top 10 bandwidth usage (bytes/total in %):
17.8% 13.2% 7.3% 6.8% 6.4% 6.0% 4.0% 4.0% 3.6% 3.6%
# of IPv6 addresses: 4646
Top 10 bandwidth usage (bytes/total in %):
91.9% 87.1% 3.6% 2.9% 2.9% 1.0% 0.5% 0.5% 0.4% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203310630.pktlen.png)
detailed numbers
[ 32- 63]: 4389054
[ 64- 127]: 3899803
[ 128- 255]: 971815
[ 256- 511]: 483075
[ 512- 1023]: 484130
[ 1024- 2047]: 9214939
Protocol Breakdown
![[protocol breakdown chart]](201203310630.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 19442816 (100.00%) 14729584511 (100.00%) 757.58
ip 19146599 ( 98.48%) 14406617776 ( 97.81%) 752.44
tcp 12257951 ( 63.05%) 11292691075 ( 76.67%) 921.25
http(s) 5262107 ( 27.06%) 7055514048 ( 47.90%) 1340.82
http(c) 1890758 ( 9.72%) 217078617 ( 1.47%) 114.81
squid 42737 ( 0.22%) 27812129 ( 0.19%) 650.77
smtp 41233 ( 0.21%) 6629980 ( 0.05%) 160.79
nntp 13 ( 0.00%) 800 ( 0.00%) 61.54
ftp 7637 ( 0.04%) 676816 ( 0.00%) 88.62
pop3 1473 ( 0.01%) 289826 ( 0.00%) 196.76
imap 973 ( 0.01%) 88828 ( 0.00%) 91.29
telnet 2555 ( 0.01%) 171370 ( 0.00%) 67.07
ssh 60588 ( 0.31%) 10804881 ( 0.07%) 178.33
dns 2170 ( 0.01%) 263478 ( 0.00%) 121.42
bgp 620 ( 0.00%) 101945 ( 0.00%) 164.43
napster 32 ( 0.00%) 2206 ( 0.00%) 68.94
realaud 22 ( 0.00%) 3371 ( 0.00%) 153.23
rtsp 3 ( 0.00%) 180 ( 0.00%) 60.00
icecast 573 ( 0.00%) 124266 ( 0.00%) 216.87
hotline 14 ( 0.00%) 1148 ( 0.00%) 82.00
other 4944438 ( 25.43%) 3973126886 ( 26.97%) 803.55
udp 3719360 ( 19.13%) 1802945255 ( 12.24%) 484.75
dns 256706 ( 1.32%) 53469311 ( 0.36%) 208.29
realaud 11 ( 0.00%) 2689 ( 0.00%) 244.45
halflif 55 ( 0.00%) 7825 ( 0.00%) 142.27
starcra 12 ( 0.00%) 2772 ( 0.00%) 231.00
everque 204 ( 0.00%) 53383 ( 0.00%) 261.68
unreal 205 ( 0.00%) 94637 ( 0.00%) 461.64
quake 12 ( 0.00%) 3363 ( 0.00%) 280.25
cuseeme 2 ( 0.00%) 624 ( 0.00%) 312.00
other 3008444 ( 15.47%) 1721667897 ( 11.69%) 572.28
icmp 1767751 ( 9.09%) 200388524 ( 1.36%) 113.36
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6990 ( 0.04%) 2485540 ( 0.02%) 355.59
ip6 1373064 ( 7.06%) 1103709577 ( 7.49%) 803.83
pim 247 ( 0.00%) 14820 ( 0.00%) 60.00
other 21051 ( 0.11%) 4363715 ( 0.03%) 207.29
frag 1006948 ( 5.18%) 767749118 ( 5.21%) 762.45
ip6 296217 ( 1.52%) 322966735 ( 2.19%) 1090.30
tcp6 235568 ( 1.21%) 310554490 ( 2.11%) 1318.32
http(s) 11459 ( 0.06%) 16017260 ( 0.11%) 1397.79
http(c) 26237 ( 0.13%) 2225184 ( 0.02%) 84.81
smtp 734 ( 0.00%) 251275 ( 0.00%) 342.34
ftp 26 ( 0.00%) 2070 ( 0.00%) 79.62
dns 256 ( 0.00%) 49603 ( 0.00%) 193.76
bgp 90 ( 0.00%) 13421 ( 0.00%) 149.12
other 196766 ( 1.01%) 291995677 ( 1.98%) 1483.97
udp6 34895 ( 0.18%) 7540686 ( 0.05%) 216.10
dns 33051 ( 0.17%) 7280890 ( 0.05%) 220.29
halflif 2 ( 0.00%) 213 ( 0.00%) 106.50
everque 2 ( 0.00%) 224 ( 0.00%) 112.00
cuseeme 2 ( 0.00%) 227 ( 0.00%) 113.50
other 1838 ( 0.01%) 259132 ( 0.00%) 140.99
icmp6 23006 ( 0.12%) 2943783 ( 0.02%) 127.96
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2635 ( 0.01%) 1912384 ( 0.01%) 725.76
tcpdump file: 201203310630.dump.gz (424.76 MB)