Traffic Trace Info
DumpFile: 201203311200.dump
FileSize: 2020.16MB
Id: 201203311200
StartTime: Sat Mar 31 12:00:00 2012
EndTime: Sat Mar 31 12:15:01 2012
TotalTime: 900.71 seconds
TotalCapSize: 1590.54MB CapLen: 96 bytes
# of packets: 28155040 (22015.76MB)
AvgRate: 205.07Mbps stddev:45.11M
IP flow (unique src/dst pair) Information
# of flows: 1905635 (avg. 14.77 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.5% 2.3% 2.0% 1.6% 1.5% 1.5% 1.3% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 1429982
Top 10 bandwidth usage (bytes/total in %):
23.4% 17.2% 5.3% 5.2% 4.9% 3.7% 2.8% 2.6% 2.3% 2.3%
# of IPv6 addresses: 5128
Top 10 bandwidth usage (bytes/total in %):
33.9% 25.1% 11.6% 6.7% 6.2% 6.0% 5.2% 3.9% 3.7% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311200.pktlen.png)
detailed numbers
[ 32- 63]: 5561549
[ 64- 127]: 5865519
[ 128- 255]: 936287
[ 256- 511]: 517738
[ 512- 1023]: 844035
[ 1024- 2047]: 14429912
Protocol Breakdown
![[protocol breakdown chart]](201203311200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28155040 (100.00%) 23085193544 (100.00%) 819.93
ip 28031854 ( 99.56%) 23049536423 ( 99.85%) 822.26
tcp 21666242 ( 76.95%) 20283840494 ( 87.87%) 936.20
http(s) 11976389 ( 42.54%) 16484979623 ( 71.41%) 1376.46
http(c) 4353125 ( 15.46%) 555811437 ( 2.41%) 127.68
squid 127471 ( 0.45%) 94009333 ( 0.41%) 737.50
smtp 33765 ( 0.12%) 6683548 ( 0.03%) 197.94
ftp 8290 ( 0.03%) 1310600 ( 0.01%) 158.09
pop3 2560 ( 0.01%) 1179164 ( 0.01%) 460.61
imap 1989 ( 0.01%) 406253 ( 0.00%) 204.25
telnet 99 ( 0.00%) 6486 ( 0.00%) 65.52
ssh 256866 ( 0.91%) 71585692 ( 0.31%) 278.69
dns 5147 ( 0.02%) 501016 ( 0.00%) 97.34
bgp 688 ( 0.00%) 110036 ( 0.00%) 159.94
napster 234 ( 0.00%) 15350 ( 0.00%) 65.60
realaud 20 ( 0.00%) 2450 ( 0.00%) 122.50
rtsp 16322 ( 0.06%) 24312049 ( 0.11%) 1489.53
icecast 9409 ( 0.03%) 7874605 ( 0.03%) 836.92
hotline 90 ( 0.00%) 8921 ( 0.00%) 99.12
other 4873777 ( 17.31%) 3035043871 ( 13.15%) 622.73
udp 3131125 ( 11.12%) 1357680701 ( 5.88%) 433.61
dns 517709 ( 1.84%) 145923349 ( 0.63%) 281.86
realaud 7 ( 0.00%) 1181 ( 0.00%) 168.71
halflif 35 ( 0.00%) 4061 ( 0.00%) 116.03
starcra 40 ( 0.00%) 3590 ( 0.00%) 89.75
everque 316 ( 0.00%) 66489 ( 0.00%) 210.41
unreal 16 ( 0.00%) 2187 ( 0.00%) 136.69
quake 11 ( 0.00%) 1611 ( 0.00%) 146.45
other 2590800 ( 9.20%) 1210300313 ( 5.24%) 467.15
icmp 1760100 ( 6.25%) 142309119 ( 0.62%) 80.85
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 17416 ( 0.06%) 9130512 ( 0.04%) 524.26
ip6 1455474 ( 5.17%) 1256420915 ( 5.44%) 863.24
pim 364 ( 0.00%) 21840 ( 0.00%) 60.00
other 948 ( 0.00%) 113572 ( 0.00%) 119.80
frag 122789 ( 0.44%) 93771032 ( 0.41%) 763.68
ip6 123186 ( 0.44%) 35657121 ( 0.15%) 289.46
tcp6 51337 ( 0.18%) 20999325 ( 0.09%) 409.05
http(s) 7197 ( 0.03%) 7488673 ( 0.03%) 1040.53
http(c) 31869 ( 0.11%) 3074318 ( 0.01%) 96.47
smtp 421 ( 0.00%) 136024 ( 0.00%) 323.10
dns 223 ( 0.00%) 56494 ( 0.00%) 253.34
bgp 89 ( 0.00%) 12758 ( 0.00%) 143.35
other 11538 ( 0.04%) 10231058 ( 0.04%) 886.73
udp6 44481 ( 0.16%) 10554885 ( 0.05%) 237.29
dns 42710 ( 0.15%) 10316631 ( 0.04%) 241.55
realaud 1 ( 0.00%) 104 ( 0.00%) 104.00
starcra 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 1 ( 0.00%) 101 ( 0.00%) 101.00
unreal 1 ( 0.00%) 119 ( 0.00%) 119.00
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
other 1766 ( 0.01%) 237718 ( 0.00%) 134.61
icmp6 26833 ( 0.10%) 3694659 ( 0.02%) 137.69
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 419 ( 0.00%) 392456 ( 0.00%) 936.65
tcpdump file: 201203311200.dump.gz (636.89 MB)