Traffic Trace Info
DumpFile: 201203311100.dump
FileSize: 2005.52MB
Id: 201203311100
StartTime: Sat Mar 31 11:00:00 2012
EndTime: Sat Mar 31 11:15:00 2012
TotalTime: 900.03 seconds
TotalCapSize: 1575.25MB CapLen: 96 bytes
# of packets: 28197744 (21321.67MB)
AvgRate: 198.74Mbps stddev:46.77M
IP flow (unique src/dst pair) Information
# of flows: 1958501 (avg. 14.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.5% 5.4% 2.8% 2.2% 2.1% 1.9% 1.9% 1.1% 0.9% 0.9%
IP address Information
# of IPv4 addresses: 1471304
Top 10 bandwidth usage (bytes/total in %):
16.4% 11.5% 9.7% 9.1% 5.6% 5.5% 4.3% 4.2% 3.7% 3.2%
# of IPv6 addresses: 4924
Top 10 bandwidth usage (bytes/total in %):
31.3% 31.3% 24.7% 16.5% 7.4% 5.3% 2.9% 2.9% 2.4% 2.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311100.pktlen.png)
detailed numbers
[ 32- 63]: 6185808
[ 64- 127]: 5953177
[ 128- 255]: 847608
[ 256- 511]: 478652
[ 512- 1023]: 689251
[ 1024- 2047]: 14043248
Protocol Breakdown
![[protocol breakdown chart]](201203311100.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28197744 (100.00%) 22357396656 (100.00%) 792.88
ip 28054213 ( 99.49%) 22303292907 ( 99.76%) 795.01
tcp 21967565 ( 77.91%) 19852103018 ( 88.79%) 903.70
http(s) 11816743 ( 41.91%) 16171064601 ( 72.33%) 1368.49
http(c) 5324403 ( 18.88%) 562328371 ( 2.52%) 105.61
squid 107201 ( 0.38%) 73260553 ( 0.33%) 683.39
smtp 30619 ( 0.11%) 7484595 ( 0.03%) 244.44
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 7600 ( 0.03%) 682060 ( 0.00%) 89.74
pop3 45967 ( 0.16%) 49484251 ( 0.22%) 1076.52
imap 3270 ( 0.01%) 805672 ( 0.00%) 246.38
telnet 771 ( 0.00%) 56592 ( 0.00%) 73.40
ssh 19556 ( 0.07%) 3389308 ( 0.02%) 173.31
dns 4801 ( 0.02%) 469562 ( 0.00%) 97.81
bgp 700 ( 0.00%) 105159 ( 0.00%) 150.23
napster 32 ( 0.00%) 3366 ( 0.00%) 105.19
realaud 44 ( 0.00%) 4081 ( 0.00%) 92.75
rtsp 96 ( 0.00%) 7817 ( 0.00%) 81.43
icecast 453 ( 0.00%) 110418 ( 0.00%) 243.75
hotline 31 ( 0.00%) 2336 ( 0.00%) 75.35
other 4605263 ( 16.33%) 2982843348 ( 13.34%) 647.70
udp 3094734 ( 10.98%) 1286426425 ( 5.75%) 415.68
dns 433265 ( 1.54%) 128331172 ( 0.57%) 296.20
realaud 2 ( 0.00%) 454 ( 0.00%) 227.00
halflif 41 ( 0.00%) 4909 ( 0.00%) 119.73
starcra 27 ( 0.00%) 3448 ( 0.00%) 127.70
everque 305 ( 0.00%) 61689 ( 0.00%) 202.26
unreal 97 ( 0.00%) 34832 ( 0.00%) 359.09
quake 14 ( 0.00%) 1933 ( 0.00%) 138.07
other 2557170 ( 9.07%) 1151727233 ( 5.15%) 450.39
icmp 1618602 ( 5.74%) 141047041 ( 0.63%) 87.14
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 12146 ( 0.04%) 4947036 ( 0.02%) 407.30
ip6 1359749 ( 4.82%) 1018617884 ( 4.56%) 749.12
pim 289 ( 0.00%) 17340 ( 0.00%) 60.00
other 943 ( 0.00%) 114893 ( 0.00%) 121.84
frag 238177 ( 0.84%) 181821901 ( 0.81%) 763.39
ip6 143531 ( 0.51%) 54103749 ( 0.24%) 376.95
tcp6 72601 ( 0.26%) 39822239 ( 0.18%) 548.51
http(s) 7902 ( 0.03%) 8060673 ( 0.04%) 1020.08
http(c) 31899 ( 0.11%) 2885219 ( 0.01%) 90.45
smtp 118 ( 0.00%) 55744 ( 0.00%) 472.41
ftp 67 ( 0.00%) 8421 ( 0.00%) 125.69
dns 267 ( 0.00%) 51049 ( 0.00%) 191.19
bgp 93 ( 0.00%) 15691 ( 0.00%) 168.72
other 32255 ( 0.11%) 28745442 ( 0.13%) 891.19
udp6 43560 ( 0.15%) 9991907 ( 0.04%) 229.38
dns 41840 ( 0.15%) 9740310 ( 0.04%) 232.80
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
starcra 1 ( 0.00%) 119 ( 0.00%) 119.00
everque 1 ( 0.00%) 103 ( 0.00%) 103.00
unreal 1 ( 0.00%) 107 ( 0.00%) 107.00
other 1716 ( 0.01%) 251162 ( 0.00%) 146.36
icmp6 26698 ( 0.09%) 3718360 ( 0.02%) 139.27
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 558 ( 0.00%) 555751 ( 0.00%) 995.97
tcpdump file: 201203311100.dump.gz (625.43 MB)