Traffic Trace Info
DumpFile: 201203311015.dump
FileSize: 2646.95MB
Id: 201203311015
StartTime: Sat Mar 31 10:15:00 2012
EndTime: Sat Mar 31 10:30:00 2012
TotalTime: 899.84 seconds
TotalCapSize: -2024.02MB CapLen: 96 bytes
# of packets: 37680270 (28129.36MB)
AvgRate: 262.23Mbps stddev:54.72M
IP flow (unique src/dst pair) Information
# of flows: 1790061 (avg. 21.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.9% 6.6% 6.4% 1.3% 1.2% 1.1% 1.1% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 1381889
Top 10 bandwidth usage (bytes/total in %):
13.1% 13.1% 12.9% 12.0% 11.1% 9.7% 5.5% 5.4% 3.7% 3.5%
# of IPv6 addresses: 4677
Top 10 bandwidth usage (bytes/total in %):
46.1% 46.1% 34.6% 16.8% 8.5% 6.8% 4.1% 1.6% 1.3% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311015.pktlen.png)
detailed numbers
[ 32- 63]: 8963893
[ 64- 127]: 5895736
[ 128- 255]: 886035
[ 256- 511]: 480847
[ 512- 1023]: 3903208
[ 1024- 2047]: 17550551
Protocol Breakdown
![[protocol breakdown chart]](201203311015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37680270 (100.00%) 29495771251 (100.00%) 782.79
ip 37532475 ( 99.61%) 29401912666 ( 99.68%) 783.37
tcp 30687151 ( 81.44%) 25931977191 ( 87.92%) 845.04
http(s) 12135370 ( 32.21%) 17061794003 ( 57.84%) 1405.96
http(c) 5129473 ( 13.61%) 686507235 ( 2.33%) 133.84
squid 101847 ( 0.27%) 72226846 ( 0.24%) 709.17
smtp 45710 ( 0.12%) 8098963 ( 0.03%) 177.18
nntp 10 ( 0.00%) 622 ( 0.00%) 62.20
ftp 17864 ( 0.05%) 8682507 ( 0.03%) 486.03
pop3 2266 ( 0.01%) 834887 ( 0.00%) 368.44
imap 1915 ( 0.01%) 503377 ( 0.00%) 262.86
telnet 698 ( 0.00%) 48584 ( 0.00%) 69.60
ssh 170194 ( 0.45%) 19651729 ( 0.07%) 115.47
dns 4414 ( 0.01%) 448320 ( 0.00%) 101.57
bgp 672 ( 0.00%) 96467 ( 0.00%) 143.55
napster 33 ( 0.00%) 2956 ( 0.00%) 89.58
realaud 6 ( 0.00%) 366 ( 0.00%) 61.00
icecast 8488 ( 0.02%) 5977994 ( 0.02%) 704.29
hotline 106 ( 0.00%) 6800 ( 0.00%) 64.15
other 13068084 ( 34.68%) 8067095475 ( 27.35%) 617.31
udp 3402083 ( 9.03%) 1637027150 ( 5.55%) 481.18
dns 418453 ( 1.11%) 125170511 ( 0.42%) 299.13
realaud 6 ( 0.00%) 606 ( 0.00%) 101.00
halflif 196 ( 0.00%) 38456 ( 0.00%) 196.20
starcra 29 ( 0.00%) 3418 ( 0.00%) 117.86
everque 263 ( 0.00%) 73655 ( 0.00%) 280.06
unreal 97 ( 0.00%) 35352 ( 0.00%) 364.45
quake 9 ( 0.00%) 1041 ( 0.00%) 115.67
other 2868913 ( 7.61%) 1504828380 ( 5.10%) 524.53
icmp 1638191 ( 4.35%) 171729210 ( 0.58%) 104.83
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 35129 ( 0.09%) 21264118 ( 0.07%) 605.32
ip6 1768443 ( 4.69%) 1639757048 ( 5.56%) 927.23
pim 315 ( 0.00%) 18900 ( 0.00%) 60.00
other 978 ( 0.00%) 119779 ( 0.00%) 122.47
frag 299509 ( 0.79%) 228633916 ( 0.78%) 763.36
ip6 147795 ( 0.39%) 93858585 ( 0.32%) 635.06
tcp6 80034 ( 0.21%) 81147413 ( 0.28%) 1013.91
http(s) 15827 ( 0.04%) 21522422 ( 0.07%) 1359.85
http(c) 17046 ( 0.05%) 1445118 ( 0.00%) 84.78
smtp 22 ( 0.00%) 6579 ( 0.00%) 299.05
dns 98 ( 0.00%) 17380 ( 0.00%) 177.35
bgp 92 ( 0.00%) 14373 ( 0.00%) 156.23
other 46949 ( 0.12%) 58141541 ( 0.20%) 1238.40
udp6 41392 ( 0.11%) 8819372 ( 0.03%) 213.07
dns 38923 ( 0.10%) 8499115 ( 0.03%) 218.36
unreal 1 ( 0.00%) 109 ( 0.00%) 109.00
other 2468 ( 0.01%) 320148 ( 0.00%) 129.72
icmp6 25972 ( 0.07%) 3601735 ( 0.01%) 138.68
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 283 ( 0.00%) 274573 ( 0.00%) 970.22
tcpdump file: 201203311015.dump.gz (790.48 MB)