Traffic Trace Info
DumpFile: 201203311415.dump
FileSize: 2389.43MB
Id: 201203311415
StartTime: Sat Mar 31 14:15:00 2012
EndTime: Sat Mar 31 14:30:01 2012
TotalTime: 900.69 seconds
TotalCapSize: 1880.74MB CapLen: 96 bytes
# of packets: 33337636 (26021.12MB)
AvgRate: 242.34Mbps stddev:42.91M
IP flow (unique src/dst pair) Information
# of flows: 2017873 (avg. 16.52 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 3.8% 2.3% 2.0% 2.0% 1.9% 1.4% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 1540531
Top 10 bandwidth usage (bytes/total in %):
22.6% 10.7% 10.0% 6.2% 5.1% 4.2% 3.8% 3.8% 3.5% 3.2%
# of IPv6 addresses: 5446
Top 10 bandwidth usage (bytes/total in %):
51.8% 51.8% 14.8% 7.6% 7.1% 6.7% 5.3% 3.9% 1.6% 1.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311415.pktlen.png)
detailed numbers
[ 32- 63]: 7309322
[ 64- 127]: 6438877
[ 128- 255]: 881747
[ 256- 511]: 675933
[ 512- 1023]: 877864
[ 1024- 2047]: 17153893
Protocol Breakdown
![[protocol breakdown chart]](201203311415.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33337636 (100.00%) 27285120079 (100.00%) 818.45
ip 33177374 ( 99.52%) 27201572362 ( 99.69%) 819.88
tcp 26515138 ( 79.54%) 24088286887 ( 88.28%) 908.47
http(s) 12574931 ( 37.72%) 17014388039 ( 62.36%) 1353.04
http(c) 5313640 ( 15.94%) 514535310 ( 1.89%) 96.83
squid 110115 ( 0.33%) 73233702 ( 0.27%) 665.07
smtp 31057 ( 0.09%) 4582169 ( 0.02%) 147.54
ftp 6102 ( 0.02%) 589818 ( 0.00%) 96.66
pop3 2931 ( 0.01%) 1536182 ( 0.01%) 524.12
imap 1083 ( 0.00%) 985565 ( 0.00%) 910.03
telnet 16335 ( 0.05%) 1204459 ( 0.00%) 73.73
ssh 55028 ( 0.17%) 11742113 ( 0.04%) 213.38
dns 2429 ( 0.01%) 281400 ( 0.00%) 115.85
bgp 618 ( 0.00%) 101970 ( 0.00%) 165.00
napster 37 ( 0.00%) 2424 ( 0.00%) 65.51
realaud 11 ( 0.00%) 678 ( 0.00%) 61.64
rtsp 27061 ( 0.08%) 40326213 ( 0.15%) 1490.20
icecast 20371 ( 0.06%) 13475367 ( 0.05%) 661.50
hotline 50 ( 0.00%) 3632 ( 0.00%) 72.64
other 8353338 ( 25.06%) 6411297786 ( 23.50%) 767.51
udp 3122507 ( 9.37%) 1472039283 ( 5.40%) 471.43
dns 458613 ( 1.38%) 112609769 ( 0.41%) 245.54
rip 269 ( 0.00%) 19368 ( 0.00%) 72.00
realaud 16 ( 0.00%) 1512 ( 0.00%) 94.50
halflif 50 ( 0.00%) 7842 ( 0.00%) 156.84
starcra 46 ( 0.00%) 3986 ( 0.00%) 86.65
everque 298 ( 0.00%) 56018 ( 0.00%) 187.98
unreal 98 ( 0.00%) 34580 ( 0.00%) 352.86
quake 20 ( 0.00%) 4240 ( 0.00%) 212.00
cuseeme 2 ( 0.00%) 190 ( 0.00%) 95.00
other 2604957 ( 7.81%) 1355742962 ( 4.97%) 520.45
icmp 1782880 ( 5.35%) 156088480 ( 0.57%) 87.55
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 8516 ( 0.03%) 3602472 ( 0.01%) 423.02
ip6 1649563 ( 4.95%) 1443502935 ( 5.29%) 875.08
pim 422 ( 0.00%) 25320 ( 0.00%) 60.00
other 98163 ( 0.29%) 38007715 ( 0.14%) 387.19
frag 361082 ( 1.08%) 275387864 ( 1.01%) 762.67
ip6 160262 ( 0.48%) 83547717 ( 0.31%) 521.32
tcp6 81525 ( 0.24%) 67164370 ( 0.25%) 823.85
http(s) 7399 ( 0.02%) 8472065 ( 0.03%) 1145.03
http(c) 30554 ( 0.09%) 2627929 ( 0.01%) 86.01
smtp 57 ( 0.00%) 11398 ( 0.00%) 199.96
ftp 19 ( 0.00%) 2168 ( 0.00%) 114.11
dns 107 ( 0.00%) 14041 ( 0.00%) 131.22
bgp 83 ( 0.00%) 11838 ( 0.00%) 142.63
other 43306 ( 0.13%) 56024931 ( 0.21%) 1293.70
udp6 49782 ( 0.15%) 12212692 ( 0.04%) 245.32
dns 45246 ( 0.14%) 11232781 ( 0.04%) 248.26
halflif 2 ( 0.00%) 206 ( 0.00%) 103.00
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 4533 ( 0.01%) 979599 ( 0.00%) 216.10
icmp6 28434 ( 0.09%) 3763626 ( 0.01%) 132.36
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 406 ( 0.00%) 391419 ( 0.00%) 964.09
tcpdump file: 201203311415.dump.gz (748.63 MB)