Traffic Trace Info
DumpFile: 201203311330.dump
FileSize: 2667.57MB
Id: 201203311330
StartTime: Sat Mar 31 13:30:01 2012
EndTime: Sat Mar 31 13:45:00 2012
TotalTime: 899.60 seconds
TotalCapSize: -1983.99MB CapLen: 96 bytes
# of packets: 36408447 (29377.00MB)
AvgRate: 273.90Mbps stddev:55.84M
IP flow (unique src/dst pair) Information
# of flows: 1819617 (avg. 20.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.2% 6.1% 4.7% 3.5% 1.7% 1.2% 1.2% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 1424616
Top 10 bandwidth usage (bytes/total in %):
22.4% 12.5% 8.5% 8.4% 6.9% 5.2% 4.9% 4.4% 4.3% 3.9%
# of IPv6 addresses: 5335
Top 10 bandwidth usage (bytes/total in %):
97.4% 95.2% 1.9% 1.6% 1.6% 0.2% 0.2% 0.1% 0.1% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311330.pktlen.png)
detailed numbers
[ 32- 63]: 6766470
[ 64- 127]: 7743575
[ 128- 255]: 909261
[ 256- 511]: 651985
[ 512- 1023]: 724003
[ 1024- 2047]: 19613153
Protocol Breakdown
![[protocol breakdown chart]](201203311330.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36408447 (100.00%) 30804018708 (100.00%) 846.07
ip 34221923 ( 93.99%) 27842762148 ( 90.39%) 813.59
tcp 27457145 ( 75.41%) 25087627514 ( 81.44%) 913.70
http(s) 13399092 ( 36.80%) 18766494728 ( 60.92%) 1400.58
http(c) 6294951 ( 17.29%) 568746453 ( 1.85%) 90.35
squid 136906 ( 0.38%) 98456829 ( 0.32%) 719.16
smtp 37061 ( 0.10%) 6537666 ( 0.02%) 176.40
nntp 13 ( 0.00%) 808 ( 0.00%) 62.15
ftp 21241 ( 0.06%) 11185760 ( 0.04%) 526.61
pop3 1785 ( 0.00%) 557217 ( 0.00%) 312.17
imap 802 ( 0.00%) 376888 ( 0.00%) 469.94
telnet 48393 ( 0.13%) 3391717 ( 0.01%) 70.09
ssh 91523 ( 0.25%) 15938313 ( 0.05%) 174.15
dns 2230 ( 0.01%) 258688 ( 0.00%) 116.00
bgp 653 ( 0.00%) 126081 ( 0.00%) 193.08
napster 90 ( 0.00%) 6219 ( 0.00%) 69.10
realaud 36 ( 0.00%) 3057 ( 0.00%) 84.92
rtsp 13937 ( 0.04%) 20685587 ( 0.07%) 1484.22
icecast 16093 ( 0.04%) 11952878 ( 0.04%) 742.74
hotline 31 ( 0.00%) 2002 ( 0.00%) 64.58
other 7392307 ( 20.30%) 5582906563 ( 18.12%) 755.23
udp 3100821 ( 8.52%) 1251236180 ( 4.06%) 403.52
dns 483158 ( 1.33%) 122919039 ( 0.40%) 254.41
realaud 7 ( 0.00%) 884 ( 0.00%) 126.29
halflif 31 ( 0.00%) 3527 ( 0.00%) 113.77
starcra 50 ( 0.00%) 4519 ( 0.00%) 90.38
everque 245 ( 0.00%) 64419 ( 0.00%) 262.93
unreal 74 ( 0.00%) 42053 ( 0.00%) 568.28
quake 8 ( 0.00%) 957 ( 0.00%) 119.62
cuseeme 4 ( 0.00%) 351 ( 0.00%) 87.75
other 2599044 ( 7.14%) 1127009135 ( 3.66%) 433.62
icmp 1731681 ( 4.76%) 148958397 ( 0.48%) 86.02
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2716 ( 0.01%) 913112 ( 0.00%) 336.20
ip6 1839231 ( 5.05%) 1313948603 ( 4.27%) 714.40
pim 328 ( 0.00%) 19680 ( 0.00%) 60.00
other 89816 ( 0.25%) 40039392 ( 0.13%) 445.79
frag 39624 ( 0.11%) 30138356 ( 0.10%) 760.61
ip6 2186524 ( 6.01%) 2961256560 ( 9.61%) 1354.32
tcp6 2110643 ( 5.80%) 2945936828 ( 9.56%) 1395.75
http(s) 7537 ( 0.02%) 8742848 ( 0.03%) 1159.99
http(c) 55093 ( 0.15%) 4850954 ( 0.02%) 88.05
smtp 70 ( 0.00%) 25399 ( 0.00%) 362.84
ftp 258 ( 0.00%) 34594 ( 0.00%) 134.09
dns 284 ( 0.00%) 63777 ( 0.00%) 224.57
bgp 93 ( 0.00%) 19118 ( 0.00%) 205.57
other 2047308 ( 5.62%) 2932200138 ( 9.52%) 1432.22
udp6 48186 ( 0.13%) 11194633 ( 0.04%) 232.32
dns 43339 ( 0.12%) 10556353 ( 0.03%) 243.58
halflif 2 ( 0.00%) 212 ( 0.00%) 106.00
unreal 1 ( 0.00%) 111 ( 0.00%) 111.00
cuseeme 1 ( 0.00%) 117 ( 0.00%) 117.00
other 4843 ( 0.01%) 637840 ( 0.00%) 131.70
icmp6 27159 ( 0.07%) 3719871 ( 0.01%) 136.97
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 423 ( 0.00%) 389836 ( 0.00%) 921.60
tcpdump file: 201203311330.dump.gz (815.14 MB)