Traffic Trace Info
DumpFile: 201203311000.dump
FileSize: 2079.57MB
Id: 201203311000
StartTime: Sat Mar 31 10:00:00 2012
EndTime: Sat Mar 31 10:15:00 2012
TotalTime: 900.26 seconds
TotalCapSize: 1624.41MB CapLen: 96 bytes
# of packets: 29828438 (22422.58MB)
AvgRate: 208.88Mbps stddev:44.12M
IP flow (unique src/dst pair) Information
# of flows: 1956680 (avg. 15.24 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.0% 3.1% 3.0% 1.9% 1.5% 1.4% 1.3% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 1494926
Top 10 bandwidth usage (bytes/total in %):
13.9% 11.8% 11.2% 11.0% 7.1% 6.4% 4.1% 3.8% 3.2% 3.1%
# of IPv6 addresses: 4743
Top 10 bandwidth usage (bytes/total in %):
37.3% 15.1% 10.8% 9.5% 9.4% 8.7% 8.4% 6.6% 5.9% 4.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311000.pktlen.png)
detailed numbers
[ 32- 63]: 7529027
[ 64- 127]: 5098628
[ 128- 255]: 893577
[ 256- 511]: 533904
[ 512- 1023]: 1006703
[ 1024- 2047]: 14766599
Protocol Breakdown
![[protocol breakdown chart]](201203311000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29828438 (100.00%) 23511777752 (100.00%) 788.23
ip 29682637 ( 99.51%) 23452495394 ( 99.75%) 790.11
tcp 21227527 ( 71.17%) 18848096823 ( 80.16%) 887.91
http(s) 10487439 ( 35.16%) 14629440727 ( 62.22%) 1394.95
http(c) 4297910 ( 14.41%) 567272582 ( 2.41%) 131.99
squid 103243 ( 0.35%) 70945309 ( 0.30%) 687.17
smtp 73857 ( 0.25%) 9095414 ( 0.04%) 123.15
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 22571 ( 0.08%) 13919801 ( 0.06%) 616.71
pop3 2269 ( 0.01%) 848740 ( 0.00%) 374.06
imap 3270 ( 0.01%) 691958 ( 0.00%) 211.61
telnet 1524 ( 0.01%) 104617 ( 0.00%) 68.65
ssh 50241 ( 0.17%) 6361715 ( 0.03%) 126.62
dns 4522 ( 0.02%) 458059 ( 0.00%) 101.30
bgp 681 ( 0.00%) 109507 ( 0.00%) 160.80
napster 36 ( 0.00%) 4806 ( 0.00%) 133.50
realaud 13 ( 0.00%) 1596 ( 0.00%) 122.77
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 4789 ( 0.02%) 2679567 ( 0.01%) 559.53
hotline 18 ( 0.00%) 1116 ( 0.00%) 62.00
other 6175129 ( 20.70%) 3546160381 ( 15.08%) 574.26
udp 4841641 ( 16.23%) 2709089486 ( 11.52%) 559.54
dns 410434 ( 1.38%) 123691616 ( 0.53%) 301.37
realaud 1 ( 0.00%) 87 ( 0.00%) 87.00
halflif 239 ( 0.00%) 47306 ( 0.00%) 197.93
starcra 35 ( 0.00%) 5197 ( 0.00%) 148.49
everque 251 ( 0.00%) 62395 ( 0.00%) 248.59
unreal 138 ( 0.00%) 35915 ( 0.00%) 260.25
quake 7 ( 0.00%) 767 ( 0.00%) 109.57
cuseeme 2 ( 0.00%) 190 ( 0.00%) 95.00
other 4164762 ( 13.96%) 2569245711 ( 10.93%) 616.90
icmp 1650463 ( 5.53%) 173692540 ( 0.74%) 105.24
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 34309 ( 0.12%) 18248926 ( 0.08%) 531.90
ip6 1927250 ( 6.46%) 1703206436 ( 7.24%) 883.75
pim 248 ( 0.00%) 14880 ( 0.00%) 60.00
other 1014 ( 0.00%) 127033 ( 0.00%) 125.28
frag 1314358 ( 4.41%) 1002776466 ( 4.26%) 762.94
ip6 145801 ( 0.49%) 59282358 ( 0.25%) 406.60
tcp6 74240 ( 0.25%) 44922543 ( 0.19%) 605.10
http(s) 16556 ( 0.06%) 18898834 ( 0.08%) 1141.51
http(c) 19537 ( 0.07%) 1962049 ( 0.01%) 100.43
smtp 51 ( 0.00%) 20406 ( 0.00%) 400.12
ftp 151 ( 0.00%) 18679 ( 0.00%) 123.70
dns 277 ( 0.00%) 63566 ( 0.00%) 229.48
bgp 94 ( 0.00%) 15410 ( 0.00%) 163.94
napster 3 ( 0.00%) 254 ( 0.00%) 84.67
other 37571 ( 0.13%) 23943345 ( 0.10%) 637.28
udp6 43165 ( 0.14%) 9391493 ( 0.04%) 217.57
dns 39774 ( 0.13%) 9002158 ( 0.04%) 226.33
realaud 1 ( 0.00%) 111 ( 0.00%) 111.00
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 125 ( 0.00%) 125.00
other 3388 ( 0.01%) 388993 ( 0.00%) 114.81
icmp6 26569 ( 0.09%) 3600804 ( 0.02%) 135.53
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1715 ( 0.01%) 1352262 ( 0.01%) 788.49
tcpdump file: 201203311000.dump.gz (638.02 MB)