Traffic Trace Info
DumpFile: 201203311300.dump
FileSize: 2768.72MB
Id: 201203311300
StartTime: Sat Mar 31 13:00:01 2012
EndTime: Sat Mar 31 13:15:00 2012
TotalTime: 899.08 seconds
TotalCapSize: -1885.30MB CapLen: 96 bytes
# of packets: 36570187 (28922.11MB)
AvgRate: 269.85Mbps stddev:54.54M
IP flow (unique src/dst pair) Information
# of flows: 1751600 (avg. 20.88 pkts/flow)
Top 10 big flow size (bytes/total in %):
16.5% 4.6% 2.2% 2.0% 1.9% 1.8% 1.7% 1.4% 1.3% 1.0%
IP address Information
# of IPv4 addresses: 1388363
Top 10 bandwidth usage (bytes/total in %):
21.0% 20.0% 5.7% 4.6% 4.1% 2.9% 2.6% 2.5% 2.4% 2.4%
# of IPv6 addresses: 5004
Top 10 bandwidth usage (bytes/total in %):
99.4% 77.5% 21.8% 0.1% 0.1% 0.1% 0.1% 0.1% 0.0% 0.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311300.pktlen.png)
detailed numbers
[ 32- 63]: 6153179
[ 64- 127]: 8577742
[ 128- 255]: 1045167
[ 256- 511]: 728095
[ 512- 1023]: 912028
[ 1024- 2047]: 19153976
Protocol Breakdown
![[protocol breakdown chart]](201203311300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36570187 (100.00%) 30327033495 (100.00%) 829.28
ip 32024084 ( 87.57%) 23874409000 ( 78.72%) 745.51
tcp 24048758 ( 65.76%) 21086816979 ( 69.53%) 876.84
http(s) 12524031 ( 34.25%) 17384464340 ( 57.32%) 1388.09
http(c) 5690444 ( 15.56%) 653987840 ( 2.16%) 114.93
squid 149094 ( 0.41%) 112786654 ( 0.37%) 756.48
smtp 32804 ( 0.09%) 6346713 ( 0.02%) 193.47
ftp 8110 ( 0.02%) 743352 ( 0.00%) 91.66
pop3 1830 ( 0.01%) 554184 ( 0.00%) 302.83
imap 473 ( 0.00%) 56378 ( 0.00%) 119.19
telnet 311 ( 0.00%) 22793 ( 0.00%) 73.29
ssh 945787 ( 2.59%) 158912199 ( 0.52%) 168.02
dns 13333 ( 0.04%) 1170460 ( 0.00%) 87.79
bgp 715 ( 0.00%) 123314 ( 0.00%) 172.47
napster 81 ( 0.00%) 5892 ( 0.00%) 72.74
realaud 76 ( 0.00%) 7885 ( 0.00%) 103.75
rtsp 39821 ( 0.11%) 52379487 ( 0.17%) 1315.37
icecast 5982 ( 0.02%) 4212269 ( 0.01%) 704.16
hotline 46 ( 0.00%) 3494 ( 0.00%) 75.96
other 4635820 ( 12.68%) 2711039725 ( 8.94%) 584.80
udp 3308692 ( 9.05%) 1416177625 ( 4.67%) 428.02
dns 544841 ( 1.49%) 150664576 ( 0.50%) 276.53
rip 1 ( 0.00%) 69 ( 0.00%) 69.00
realaud 11 ( 0.00%) 1157 ( 0.00%) 105.18
halflif 30 ( 0.00%) 3099 ( 0.00%) 103.30
starcra 47 ( 0.00%) 4723 ( 0.00%) 100.49
everque 226 ( 0.00%) 48367 ( 0.00%) 214.01
unreal 77 ( 0.00%) 20641 ( 0.00%) 268.06
quake 16 ( 0.00%) 1775 ( 0.00%) 110.94
cuseeme 12 ( 0.00%) 1535 ( 0.00%) 127.92
other 2644959 ( 7.23%) 1258159583 ( 4.15%) 475.68
icmp 1695840 ( 4.64%) 146064059 ( 0.48%) 86.13
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 8378 ( 0.02%) 3977228 ( 0.01%) 474.72
ip6 2936529 ( 8.03%) 1218212055 ( 4.02%) 414.85
pim 265 ( 0.00%) 15900 ( 0.00%) 60.00
other 25438 ( 0.07%) 3125994 ( 0.01%) 122.89
frag 422894 ( 1.16%) 322347637 ( 1.06%) 762.24
ip6 4546103 ( 12.43%) 6452624495 ( 21.28%) 1419.37
tcp6 4472725 ( 12.23%) 6435600510 ( 21.22%) 1438.85
http(s) 6792 ( 0.02%) 7364008 ( 0.02%) 1084.22
http(c) 26421 ( 0.07%) 2424491 ( 0.01%) 91.76
smtp 440 ( 0.00%) 67831 ( 0.00%) 154.16
ftp 74 ( 0.00%) 10388 ( 0.00%) 140.38
dns 215 ( 0.00%) 47119 ( 0.00%) 219.16
bgp 91 ( 0.00%) 14543 ( 0.00%) 159.81
other 4438692 ( 12.14%) 6425672130 ( 21.19%) 1447.65
udp6 46392 ( 0.13%) 12742947 ( 0.04%) 274.68
dns 42052 ( 0.11%) 10291399 ( 0.03%) 244.73
realaud 1 ( 0.00%) 116 ( 0.00%) 116.00
halflif 2 ( 0.00%) 203 ( 0.00%) 101.50
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
other 4336 ( 0.01%) 2451123 ( 0.01%) 565.30
icmp6 26263 ( 0.07%) 3684673 ( 0.01%) 140.30
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 611 ( 0.00%) 581109 ( 0.00%) 951.08
tcpdump file: 201203311300.dump.gz (807.85 MB)