Traffic Trace Info
DumpFile: 201203311315.dump
FileSize: 2618.85MB
Id: 201203311315
StartTime: Sat Mar 31 13:15:00 2012
EndTime: Sat Mar 31 13:30:01 2012
TotalTime: 900.85 seconds
TotalCapSize: -2012.19MB CapLen: 96 bytes
# of packets: 35063954 (28136.44MB)
AvgRate: 261.99Mbps stddev:52.18M
IP flow (unique src/dst pair) Information
# of flows: 1765933 (avg. 19.86 pkts/flow)
Top 10 big flow size (bytes/total in %):
20.4% 2.2% 1.7% 1.5% 1.4% 1.0% 0.9% 0.8% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 1388755
Top 10 bandwidth usage (bytes/total in %):
28.8% 10.7% 8.1% 5.2% 4.0% 3.0% 2.8% 2.7% 2.2% 2.2%
# of IPv6 addresses: 5125
Top 10 bandwidth usage (bytes/total in %):
98.4% 95.7% 2.5% 1.1% 1.1% 0.1% 0.1% 0.1% 0.1% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311315.pktlen.png)
detailed numbers
[ 32- 63]: 6493511
[ 64- 127]: 7443161
[ 128- 255]: 938854
[ 256- 511]: 680853
[ 512- 1023]: 712907
[ 1024- 2047]: 18794668
Protocol Breakdown
![[protocol breakdown chart]](201203311315.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35063954 (100.00%) 29503197161 (100.00%) 841.41
ip 30580816 ( 87.21%) 23212174704 ( 78.68%) 759.04
tcp 23873421 ( 68.09%) 20918150586 ( 70.90%) 876.21
http(s) 11926016 ( 34.01%) 16647201043 ( 56.43%) 1395.87
http(c) 5717518 ( 16.31%) 535544345 ( 1.82%) 93.67
squid 147600 ( 0.42%) 111027367 ( 0.38%) 752.22
smtp 33813 ( 0.10%) 7037335 ( 0.02%) 208.13
ftp 8236 ( 0.02%) 701424 ( 0.00%) 85.17
pop3 1968 ( 0.01%) 694041 ( 0.00%) 352.66
imap 456 ( 0.00%) 50519 ( 0.00%) 110.79
telnet 5159 ( 0.01%) 4528414 ( 0.02%) 877.77
ssh 339064 ( 0.97%) 51725381 ( 0.18%) 152.55
dns 2876 ( 0.01%) 326184 ( 0.00%) 113.42
bgp 633 ( 0.00%) 101131 ( 0.00%) 159.76
napster 42 ( 0.00%) 3654 ( 0.00%) 87.00
realaud 9 ( 0.00%) 546 ( 0.00%) 60.67
rtsp 27052 ( 0.08%) 40308929 ( 0.14%) 1490.05
icecast 18806 ( 0.05%) 14510071 ( 0.05%) 771.57
hotline 6 ( 0.00%) 414 ( 0.00%) 69.00
other 5644167 ( 16.10%) 3504389788 ( 11.88%) 620.89
udp 2924880 ( 8.34%) 1099528246 ( 3.73%) 375.92
dns 449224 ( 1.28%) 114740502 ( 0.39%) 255.42
realaud 9 ( 0.00%) 1087 ( 0.00%) 120.78
halflif 18 ( 0.00%) 1708 ( 0.00%) 94.89
starcra 29 ( 0.00%) 3212 ( 0.00%) 110.76
everque 244 ( 0.00%) 66031 ( 0.00%) 270.62
unreal 63 ( 0.00%) 17784 ( 0.00%) 282.29
quake 14 ( 0.00%) 1516 ( 0.00%) 108.29
cuseeme 3 ( 0.00%) 278 ( 0.00%) 92.67
other 2455224 ( 7.00%) 983359139 ( 3.33%) 400.52
icmp 1745288 ( 4.98%) 149784150 ( 0.51%) 85.82
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 5147 ( 0.01%) 1921074 ( 0.01%) 373.24
ip6 1949448 ( 5.56%) 1008508075 ( 3.42%) 517.33
pim 351 ( 0.00%) 21060 ( 0.00%) 60.00
other 82096 ( 0.23%) 34242243 ( 0.12%) 417.10
frag 45450 ( 0.13%) 34549088 ( 0.12%) 760.16
ip6 4483138 ( 12.79%) 6291022457 ( 21.32%) 1403.26
tcp6 4412002 ( 12.58%) 6276508461 ( 21.27%) 1422.60
http(s) 6224 ( 0.02%) 6645869 ( 0.02%) 1067.78
http(c) 35103 ( 0.10%) 3202031 ( 0.01%) 91.22
smtp 33 ( 0.00%) 7690 ( 0.00%) 233.03
ftp 103 ( 0.00%) 13507 ( 0.00%) 131.14
dns 87 ( 0.00%) 13966 ( 0.00%) 160.53
bgp 84 ( 0.00%) 19535 ( 0.00%) 232.56
other 4370368 ( 12.46%) 6266605863 ( 21.24%) 1433.89
udp6 43936 ( 0.13%) 10352981 ( 0.04%) 235.64
dns 41998 ( 0.12%) 10005647 ( 0.03%) 238.24
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
everque 1 ( 0.00%) 115 ( 0.00%) 115.00
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
other 1934 ( 0.01%) 346893 ( 0.00%) 179.37
icmp6 26665 ( 0.08%) 3755261 ( 0.01%) 140.83
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 421 ( 0.00%) 390262 ( 0.00%) 926.99
tcpdump file: 201203311315.dump.gz (773.72 MB)