Traffic Trace Info
DumpFile: 201203311030.dump
FileSize: 1950.91MB
Id: 201203311030
StartTime: Sat Mar 31 10:30:00 2012
EndTime: Sat Mar 31 10:45:00 2012
TotalTime: 899.63 seconds
TotalCapSize: 1528.89MB CapLen: 96 bytes
# of packets: 27656716 (20835.70MB)
AvgRate: 194.28Mbps stddev:49.52M
IP flow (unique src/dst pair) Information
# of flows: 1908570 (avg. 14.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.9% 4.0% 3.0% 2.1% 1.8% 1.3% 1.3% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 1467744
Top 10 bandwidth usage (bytes/total in %):
14.2% 12.8% 12.0% 8.0% 7.2% 6.6% 4.9% 4.0% 4.0% 3.1%
# of IPv6 addresses: 4681
Top 10 bandwidth usage (bytes/total in %):
35.1% 30.7% 22.0% 22.0% 8.6% 2.6% 1.8% 1.8% 1.5% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311030.pktlen.png)
detailed numbers
[ 32- 63]: 6270787
[ 64- 127]: 5554121
[ 128- 255]: 908894
[ 256- 511]: 482476
[ 512- 1023]: 647012
[ 1024- 2047]: 13793426
Protocol Breakdown
![[protocol breakdown chart]](201203311030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27656716 (100.00%) 21847815057 (100.00%) 789.96
ip 27526618 ( 99.53%) 21801632448 ( 99.79%) 792.02
tcp 20846316 ( 75.38%) 18726483013 ( 85.71%) 898.31
http(s) 10635145 ( 38.45%) 14790822094 ( 67.70%) 1390.75
http(c) 4720995 ( 17.07%) 460382693 ( 2.11%) 97.52
squid 114430 ( 0.41%) 84279339 ( 0.39%) 736.51
smtp 41219 ( 0.15%) 11911721 ( 0.05%) 288.99
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 10900 ( 0.04%) 959642 ( 0.00%) 88.04
pop3 2603 ( 0.01%) 1241599 ( 0.01%) 476.99
imap 4003 ( 0.01%) 2677812 ( 0.01%) 668.95
telnet 1045 ( 0.00%) 74434 ( 0.00%) 71.23
ssh 19422 ( 0.07%) 3482635 ( 0.02%) 179.31
dns 4858 ( 0.02%) 487695 ( 0.00%) 100.39
bgp 665 ( 0.00%) 99221 ( 0.00%) 149.20
napster 48 ( 0.00%) 3178 ( 0.00%) 66.21
realaud 21 ( 0.00%) 2930 ( 0.00%) 139.52
icecast 3133 ( 0.01%) 2094724 ( 0.01%) 668.60
hotline 11 ( 0.00%) 1148 ( 0.00%) 104.36
other 5287810 ( 19.12%) 3367961654 ( 15.42%) 636.93
udp 3558249 ( 12.87%) 1786598851 ( 8.18%) 502.10
dns 420931 ( 1.52%) 125962686 ( 0.58%) 299.25
realaud 4 ( 0.00%) 622 ( 0.00%) 155.50
halflif 31 ( 0.00%) 3954 ( 0.00%) 127.55
starcra 16 ( 0.00%) 1383 ( 0.00%) 86.44
everque 265 ( 0.00%) 54300 ( 0.00%) 204.91
unreal 102 ( 0.00%) 42789 ( 0.00%) 419.50
quake 9 ( 0.00%) 1032 ( 0.00%) 114.67
cuseeme 1 ( 0.00%) 82 ( 0.00%) 82.00
other 3077509 ( 11.13%) 1656934459 ( 7.58%) 538.40
icmp 1661575 ( 6.01%) 164911470 ( 0.75%) 99.25
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4617 ( 0.02%) 1749206 ( 0.01%) 378.86
ip6 1454305 ( 5.26%) 1121715166 ( 5.13%) 771.31
pim 302 ( 0.00%) 18120 ( 0.00%) 60.00
other 1069 ( 0.00%) 137352 ( 0.00%) 128.49
frag 224753 ( 0.81%) 171588379 ( 0.79%) 763.45
ip6 130098 ( 0.47%) 46182609 ( 0.21%) 354.98
tcp6 61028 ( 0.22%) 32796601 ( 0.15%) 537.40
http(s) 11132 ( 0.04%) 14437921 ( 0.07%) 1296.97
http(c) 28222 ( 0.10%) 2461413 ( 0.01%) 87.22
smtp 793 ( 0.00%) 245278 ( 0.00%) 309.30
ftp 92 ( 0.00%) 10412 ( 0.00%) 113.17
dns 216 ( 0.00%) 48623 ( 0.00%) 225.11
bgp 88 ( 0.00%) 13884 ( 0.00%) 157.77
other 20485 ( 0.07%) 15579070 ( 0.07%) 760.51
udp6 42273 ( 0.15%) 9454699 ( 0.04%) 223.66
dns 39862 ( 0.14%) 9157279 ( 0.04%) 229.72
everque 1 ( 0.00%) 100 ( 0.00%) 100.00
unreal 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 2 ( 0.00%) 204 ( 0.00%) 102.00
cuseeme 2 ( 0.00%) 217 ( 0.00%) 108.50
other 2405 ( 0.01%) 296791 ( 0.00%) 123.41
icmp6 26369 ( 0.10%) 3600254 ( 0.02%) 136.53
ip6 84 ( 0.00%) 11462 ( 0.00%) 136.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 314 ( 0.00%) 315513 ( 0.00%) 1004.82
tcpdump file: 201203311030.dump.gz (610.30 MB)