Traffic Trace Info
DumpFile: 201203311345.dump
FileSize: 2416.74MB
Id: 201203311345
StartTime: Sat Mar 31 13:45:00 2012
EndTime: Sat Mar 31 14:00:00 2012
TotalTime: 899.57 seconds
TotalCapSize: 1901.98MB CapLen: 96 bytes
# of packets: 33735250 (26064.14MB)
AvgRate: 243.04Mbps stddev:79.78M
IP flow (unique src/dst pair) Information
# of flows: 1751899 (avg. 19.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
15.9% 5.6% 3.7% 3.4% 2.8% 1.9% 1.3% 1.2% 1.0% 0.8%
IP address Information
# of IPv4 addresses: 1376434
Top 10 bandwidth usage (bytes/total in %):
16.7% 16.3% 10.2% 8.3% 6.3% 5.8% 5.7% 5.6% 4.9% 3.9%
# of IPv6 addresses: 5204
Top 10 bandwidth usage (bytes/total in %):
65.6% 62.0% 15.3% 15.2% 10.0% 10.0% 2.4% 1.8% 1.4% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311345.pktlen.png)
detailed numbers
[ 32- 63]: 6995213
[ 64- 127]: 7111710
[ 128- 255]: 896418
[ 256- 511]: 666749
[ 512- 1023]: 712357
[ 1024- 2047]: 17352803
Protocol Breakdown
![[protocol breakdown chart]](201203311345.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33735250 (100.00%) 27330235114 (100.00%) 810.14
ip 33382455 ( 98.95%) 26992819457 ( 98.77%) 808.59
tcp 26653105 ( 79.01%) 24116796374 ( 88.24%) 904.84
http(s) 12912947 ( 38.28%) 17668107243 ( 64.65%) 1368.25
http(c) 6130202 ( 18.17%) 1039925921 ( 3.81%) 169.64
squid 127833 ( 0.38%) 89230287 ( 0.33%) 698.02
smtp 34055 ( 0.10%) 5661888 ( 0.02%) 166.26
ftp 7043 ( 0.02%) 663576 ( 0.00%) 94.22
pop3 1807 ( 0.01%) 600128 ( 0.00%) 332.11
imap 659 ( 0.00%) 98859 ( 0.00%) 150.01
telnet 20758 ( 0.06%) 1454867 ( 0.01%) 70.09
ssh 106221 ( 0.31%) 31037858 ( 0.11%) 292.20
dns 2193 ( 0.01%) 267020 ( 0.00%) 121.76
bgp 633 ( 0.00%) 113688 ( 0.00%) 179.60
napster 60 ( 0.00%) 8604 ( 0.00%) 143.40
realaud 107 ( 0.00%) 9879 ( 0.00%) 92.33
rtsp 46864 ( 0.14%) 58613867 ( 0.21%) 1250.72
icecast 24353 ( 0.07%) 12403562 ( 0.05%) 509.32
hotline 40 ( 0.00%) 3411 ( 0.00%) 85.28
other 7237329 ( 21.45%) 5208595656 ( 19.06%) 719.68
udp 3388221 ( 10.04%) 1575501252 ( 5.76%) 464.99
dns 442063 ( 1.31%) 109892650 ( 0.40%) 248.59
rip 1 ( 0.00%) 70 ( 0.00%) 70.00
realaud 5 ( 0.00%) 800 ( 0.00%) 160.00
halflif 20 ( 0.00%) 1602 ( 0.00%) 80.10
starcra 39 ( 0.00%) 3598 ( 0.00%) 92.26
everque 222 ( 0.00%) 47912 ( 0.00%) 215.82
unreal 102 ( 0.00%) 25531 ( 0.00%) 250.30
quake 9 ( 0.00%) 1196 ( 0.00%) 132.89
cuseeme 2 ( 0.00%) 171 ( 0.00%) 85.50
other 2832361 ( 8.40%) 1458670022 ( 5.34%) 515.00
icmp 1701639 ( 5.04%) 147491829 ( 0.54%) 86.68
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 3156 ( 0.01%) 1060168 ( 0.00%) 335.92
ip6 1546448 ( 4.58%) 1115925765 ( 4.08%) 721.61
pim 423 ( 0.00%) 25380 ( 0.00%) 60.00
other 89279 ( 0.26%) 35999529 ( 0.13%) 403.23
frag 336539 ( 1.00%) 256480158 ( 0.94%) 762.11
ip6 352795 ( 1.05%) 337415657 ( 1.23%) 956.41
tcp6 275999 ( 0.82%) 321859831 ( 1.18%) 1166.16
http(s) 30849 ( 0.09%) 44229705 ( 0.16%) 1433.75
http(c) 30084 ( 0.09%) 2706055 ( 0.01%) 89.95
smtp 766 ( 0.00%) 248868 ( 0.00%) 324.89
dns 85 ( 0.00%) 26068 ( 0.00%) 306.68
bgp 94 ( 0.00%) 18988 ( 0.00%) 202.00
other 214121 ( 0.63%) 274630147 ( 1.00%) 1282.59
udp6 48006 ( 0.14%) 11285225 ( 0.04%) 235.08
dns 42480 ( 0.13%) 10328505 ( 0.04%) 243.14
realaud 2 ( 0.00%) 224 ( 0.00%) 112.00
halflif 4 ( 0.00%) 449 ( 0.00%) 112.25
starcra 1 ( 0.00%) 103 ( 0.00%) 103.00
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
other 5518 ( 0.02%) 955839 ( 0.00%) 173.22
icmp6 28082 ( 0.08%) 3749594 ( 0.01%) 133.52
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 593 ( 0.00%) 505347 ( 0.00%) 852.19
tcpdump file: 201203311345.dump.gz (750.62 MB)