Traffic Trace Info
DumpFile: 201203311215.dump
FileSize: 2781.98MB
Id: 201203311215
StartTime: Sat Mar 31 12:15:01 2012
EndTime: Sat Mar 31 12:30:00 2012
TotalTime: 899.77 seconds
TotalCapSize: -1917.87MB CapLen: 96 bytes
# of packets: 39573702 (30425.80MB)
AvgRate: 283.75Mbps stddev:66.69M
IP flow (unique src/dst pair) Information
# of flows: 1861935 (avg. 21.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.7% 3.5% 3.3% 2.1% 1.5% 1.2% 1.2% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 1477256
Top 10 bandwidth usage (bytes/total in %):
19.3% 17.1% 17.1% 12.2% 7.4% 5.4% 4.6% 3.5% 3.4% 3.4%
# of IPv6 addresses: 4824
Top 10 bandwidth usage (bytes/total in %):
70.3% 70.3% 9.2% 6.2% 3.7% 1.6% 1.6% 1.4% 1.4% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311215.pktlen.png)
detailed numbers
[ 32- 63]: 9054587
[ 64- 127]: 7909863
[ 128- 255]: 1119782
[ 256- 511]: 559929
[ 512- 1023]: 969978
[ 1024- 2047]: 19959563
Protocol Breakdown
![[protocol breakdown chart]](201203311215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39573702 (100.00%) 31903766109 (100.00%) 806.19
ip 39409012 ( 99.58%) 31800076222 ( 99.67%) 806.92
tcp 28931468 ( 73.11%) 26211249416 ( 82.16%) 905.98
http(s) 15327377 ( 38.73%) 21685120910 ( 67.97%) 1414.80
http(c) 6266139 ( 15.83%) 563893892 ( 1.77%) 89.99
squid 140958 ( 0.36%) 105982427 ( 0.33%) 751.87
smtp 25014 ( 0.06%) 4460789 ( 0.01%) 178.33
nntp 13 ( 0.00%) 808 ( 0.00%) 62.15
ftp 70874 ( 0.18%) 95886093 ( 0.30%) 1352.91
pop3 1849 ( 0.00%) 614686 ( 0.00%) 332.44
imap 1505 ( 0.00%) 221618 ( 0.00%) 147.25
telnet 50 ( 0.00%) 3336 ( 0.00%) 66.72
ssh 1481207 ( 3.74%) 213628781 ( 0.67%) 144.23
dns 4792 ( 0.01%) 473810 ( 0.00%) 98.88
bgp 683 ( 0.00%) 103751 ( 0.00%) 151.90
napster 353 ( 0.00%) 23094 ( 0.00%) 65.42
realaud 33 ( 0.00%) 2300 ( 0.00%) 69.70
rtsp 27063 ( 0.07%) 40326550 ( 0.13%) 1490.10
icecast 4860 ( 0.01%) 3971146 ( 0.01%) 817.11
hotline 6 ( 0.00%) 378 ( 0.00%) 63.00
other 5578692 ( 14.10%) 3496535047 ( 10.96%) 626.77
udp 6697353 ( 16.92%) 3908449941 ( 12.25%) 583.58
dns 464861 ( 1.17%) 137064463 ( 0.43%) 294.85
realaud 6 ( 0.00%) 488 ( 0.00%) 81.33
halflif 77 ( 0.00%) 30942 ( 0.00%) 401.84
starcra 39 ( 0.00%) 3839 ( 0.00%) 98.44
everque 283 ( 0.00%) 64695 ( 0.00%) 228.60
unreal 55 ( 0.00%) 11445 ( 0.00%) 208.09
quake 16 ( 0.00%) 1496 ( 0.00%) 93.50
cuseeme 2 ( 0.00%) 165 ( 0.00%) 82.50
other 5688253 ( 14.37%) 3737841264 ( 11.72%) 657.12
icmp 1736223 ( 4.39%) 143936449 ( 0.45%) 82.90
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3159 ( 0.01%) 1113258 ( 0.00%) 352.41
ip6 2039475 ( 5.15%) 1535178682 ( 4.81%) 752.73
pim 257 ( 0.00%) 15420 ( 0.00%) 60.00
other 892 ( 0.00%) 113786 ( 0.00%) 127.56
frag 3008110 ( 7.60%) 2292531288 ( 7.19%) 762.12
ip6 164688 ( 0.42%) 103689767 ( 0.33%) 629.61
tcp6 94980 ( 0.24%) 89866248 ( 0.28%) 946.16
http(s) 4613 ( 0.01%) 4610760 ( 0.01%) 999.51
http(c) 28568 ( 0.07%) 2596050 ( 0.01%) 90.87
smtp 427 ( 0.00%) 214283 ( 0.00%) 501.83
dns 77 ( 0.00%) 12432 ( 0.00%) 161.45
bgp 86 ( 0.00%) 13962 ( 0.00%) 162.35
other 61209 ( 0.15%) 82418761 ( 0.26%) 1346.51
udp6 42451 ( 0.11%) 9829544 ( 0.03%) 231.55
dns 40684 ( 0.10%) 9595022 ( 0.03%) 235.84
starcra 1 ( 0.00%) 112 ( 0.00%) 112.00
everque 4 ( 0.00%) 426 ( 0.00%) 106.50
quake 2 ( 0.00%) 218 ( 0.00%) 109.00
other 1760 ( 0.00%) 233766 ( 0.00%) 132.82
icmp6 26911 ( 0.07%) 3749637 ( 0.01%) 139.33
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 234 ( 0.00%) 229082 ( 0.00%) 978.98
tcpdump file: 201203311215.dump.gz (852.38 MB)