Traffic Trace Info
DumpFile: 201203311430.dump
FileSize: 2326.98MB
Id: 201203311430
StartTime: Sat Mar 31 14:30:01 2012
EndTime: Sat Mar 31 14:45:00 2012
TotalTime: 899.58 seconds
TotalCapSize: 1834.11MB CapLen: 96 bytes
# of packets: 32300088 (25386.22MB)
AvgRate: 236.62Mbps stddev:40.99M
IP flow (unique src/dst pair) Information
# of flows: 1989460 (avg. 16.24 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 3.3% 2.7% 2.4% 2.3% 2.3% 1.9% 1.6% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 1521962
Top 10 bandwidth usage (bytes/total in %):
22.9% 14.4% 7.6% 5.5% 5.4% 3.8% 3.6% 3.4% 2.8% 2.8%
# of IPv6 addresses: 5502
Top 10 bandwidth usage (bytes/total in %):
96.5% 91.4% 3.0% 0.9% 0.7% 0.6% 0.3% 0.2% 0.2% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311430.pktlen.png)
detailed numbers
[ 32- 63]: 6406195
[ 64- 127]: 6714942
[ 128- 255]: 920157
[ 256- 511]: 690450
[ 512- 1023]: 805904
[ 1024- 2047]: 16762440
Protocol Breakdown
![[protocol breakdown chart]](201203311430.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32300088 (100.00%) 26619380068 (100.00%) 824.13
ip 31672074 ( 98.06%) 25955902994 ( 97.51%) 819.52
tcp 25327551 ( 78.41%) 23533566485 ( 88.41%) 929.17
http(s) 12882243 ( 39.88%) 17983425831 ( 67.56%) 1395.99
http(c) 5631897 ( 17.44%) 701574557 ( 2.64%) 124.57
squid 106426 ( 0.33%) 74770503 ( 0.28%) 702.56
smtp 31572 ( 0.10%) 4891781 ( 0.02%) 154.94
ftp 11294 ( 0.03%) 958625 ( 0.00%) 84.88
pop3 2307 ( 0.01%) 758222 ( 0.00%) 328.66
imap 1127 ( 0.00%) 354221 ( 0.00%) 314.30
telnet 10487 ( 0.03%) 773436 ( 0.00%) 73.75
ssh 18745 ( 0.06%) 3369198 ( 0.01%) 179.74
dns 2659 ( 0.01%) 345405 ( 0.00%) 129.90
bgp 632 ( 0.00%) 115588 ( 0.00%) 182.89
napster 105 ( 0.00%) 9284 ( 0.00%) 88.42
realaud 19 ( 0.00%) 2374 ( 0.00%) 124.95
rtsp 27026 ( 0.08%) 40274455 ( 0.15%) 1490.21
icecast 29459 ( 0.09%) 22504885 ( 0.08%) 763.94
hotline 20 ( 0.00%) 1773 ( 0.00%) 88.65
other 6571532 ( 20.35%) 4699436287 ( 17.65%) 715.12
udp 2870443 ( 8.89%) 1219275790 ( 4.58%) 424.77
dns 450644 ( 1.40%) 110609225 ( 0.42%) 245.45
rip 21 ( 0.00%) 1526 ( 0.00%) 72.67
realaud 17 ( 0.00%) 1790 ( 0.00%) 105.29
halflif 47 ( 0.00%) 4109 ( 0.00%) 87.43
starcra 34 ( 0.00%) 2820 ( 0.00%) 82.94
everque 415 ( 0.00%) 93691 ( 0.00%) 225.76
unreal 42 ( 0.00%) 9993 ( 0.00%) 237.93
quake 19 ( 0.00%) 2401 ( 0.00%) 126.37
cuseeme 4 ( 0.00%) 310 ( 0.00%) 77.50
other 2329570 ( 7.21%) 1103067239 ( 4.14%) 473.51
icmp 1766285 ( 5.47%) 153699731 ( 0.58%) 87.02
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 7291 ( 0.02%) 2972930 ( 0.01%) 407.75
ip6 1604488 ( 4.97%) 1006027294 ( 3.78%) 627.01
pim 410 ( 0.00%) 24600 ( 0.00%) 60.00
other 95421 ( 0.30%) 40316894 ( 0.15%) 422.52
frag 246995 ( 0.76%) 188363054 ( 0.71%) 762.62
ip6 628014 ( 1.94%) 663477074 ( 2.49%) 1056.47
tcp6 549623 ( 1.70%) 646889017 ( 2.43%) 1176.97
http(s) 20643 ( 0.06%) 28212947 ( 0.11%) 1366.71
http(c) 42960 ( 0.13%) 3880666 ( 0.01%) 90.33
squid 12 ( 0.00%) 1016 ( 0.00%) 84.67
smtp 95 ( 0.00%) 62018 ( 0.00%) 652.82
dns 231 ( 0.00%) 58414 ( 0.00%) 252.87
bgp 98 ( 0.00%) 20985 ( 0.00%) 214.13
other 485584 ( 1.50%) 614652971 ( 2.31%) 1265.80
udp6 49868 ( 0.15%) 12295310 ( 0.05%) 246.56
dns 45346 ( 0.14%) 11399068 ( 0.04%) 251.38
realaud 1 ( 0.00%) 112 ( 0.00%) 112.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 4 ( 0.00%) 425 ( 0.00%) 106.25
other 4516 ( 0.01%) 895597 ( 0.00%) 198.32
icmp6 27940 ( 0.09%) 3809049 ( 0.01%) 136.33
ip6 84 ( 0.00%) 11462 ( 0.00%) 136.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 469 ( 0.00%) 468156 ( 0.00%) 998.20
tcpdump file: 201203311430.dump.gz (728.83 MB)