Traffic Trace Info
DumpFile: 201203311445.dump
FileSize: 2604.83MB
Id: 201203311445
StartTime: Sat Mar 31 14:45:00 2012
EndTime: Sat Mar 31 15:00:00 2012
TotalTime: 899.75 seconds
TotalCapSize: 2047.50MB CapLen: 96 bytes
# of packets: 36524915 (28977.37MB)
AvgRate: 270.19Mbps stddev:51.05M
IP flow (unique src/dst pair) Information
# of flows: 1964667 (avg. 18.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 3.6% 3.3% 2.9% 2.2% 2.1% 2.1% 1.9% 1.8% 1.7%
IP address Information
# of IPv4 addresses: 1484391
Top 10 bandwidth usage (bytes/total in %):
18.5% 16.0% 8.9% 5.5% 5.4% 5.4% 4.3% 3.7% 3.7% 3.5%
# of IPv6 addresses: 5600
Top 10 bandwidth usage (bytes/total in %):
89.7% 86.4% 6.1% 2.4% 1.6% 1.5% 1.2% 0.9% 0.6% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311445.pktlen.png)
detailed numbers
[ 32- 63]: 8068172
[ 64- 127]: 6758860
[ 128- 255]: 912911
[ 256- 511]: 710822
[ 512- 1023]: 861626
[ 1024- 2047]: 19212524
Protocol Breakdown
![[protocol breakdown chart]](201203311445.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36524915 (100.00%) 30384975574 (100.00%) 831.90
ip 35875680 ( 98.22%) 29701608655 ( 97.75%) 827.90
tcp 28460373 ( 77.92%) 26686893318 ( 87.83%) 937.69
http(s) 13851827 ( 37.92%) 19332581839 ( 63.63%) 1395.67
http(c) 5867930 ( 16.07%) 602931447 ( 1.98%) 102.75
squid 152377 ( 0.42%) 112658848 ( 0.37%) 739.34
smtp 54722 ( 0.15%) 19232438 ( 0.06%) 351.46
nntp 24 ( 0.00%) 1496 ( 0.00%) 62.33
ftp 13327 ( 0.04%) 1183698 ( 0.00%) 88.82
pop3 1874 ( 0.01%) 616171 ( 0.00%) 328.80
imap 709 ( 0.00%) 170907 ( 0.00%) 241.05
telnet 4973 ( 0.01%) 364022 ( 0.00%) 73.20
ssh 17409 ( 0.05%) 2937015 ( 0.01%) 168.71
dns 2479 ( 0.01%) 296890 ( 0.00%) 119.76
bgp 614 ( 0.00%) 96797 ( 0.00%) 157.65
napster 57 ( 0.00%) 3644 ( 0.00%) 63.93
realaud 37 ( 0.00%) 2350 ( 0.00%) 63.51
rtsp 27033 ( 0.07%) 40284106 ( 0.13%) 1490.18
icecast 15971 ( 0.04%) 11884368 ( 0.04%) 744.12
hotline 37 ( 0.00%) 2697 ( 0.00%) 72.89
other 8448969 ( 23.13%) 6561644345 ( 21.60%) 776.62
udp 3508088 ( 9.60%) 1604985897 ( 5.28%) 457.51
dns 437004 ( 1.20%) 108903395 ( 0.36%) 249.20
rip 5 ( 0.00%) 320 ( 0.00%) 64.00
realaud 12 ( 0.00%) 875 ( 0.00%) 72.92
halflif 46 ( 0.00%) 3415 ( 0.00%) 74.24
starcra 154 ( 0.00%) 33754 ( 0.00%) 219.18
everque 512 ( 0.00%) 102505 ( 0.00%) 200.21
unreal 134 ( 0.00%) 50495 ( 0.00%) 376.83
quake 15 ( 0.00%) 1894 ( 0.00%) 126.27
cuseeme 4 ( 0.00%) 377 ( 0.00%) 94.25
other 2868871 ( 7.85%) 1483730806 ( 4.88%) 517.18
icmp 1751899 ( 4.80%) 150330649 ( 0.49%) 85.81
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4443 ( 0.01%) 1695650 ( 0.01%) 381.65
ip6 2057005 ( 5.63%) 1221504554 ( 4.02%) 593.83
pim 417 ( 0.00%) 25020 ( 0.00%) 60.00
other 93270 ( 0.26%) 36154297 ( 0.12%) 387.63
frag 864743 ( 2.37%) 659973761 ( 2.17%) 763.20
ip6 649235 ( 1.78%) 683366919 ( 2.25%) 1052.57
tcp6 571002 ( 1.56%) 667120519 ( 2.20%) 1168.33
http(s) 10464 ( 0.03%) 11242521 ( 0.04%) 1074.40
http(c) 40318 ( 0.11%) 3534180 ( 0.01%) 87.66
squid 12 ( 0.00%) 1016 ( 0.00%) 84.67
smtp 28 ( 0.00%) 3032 ( 0.00%) 108.29
dns 138 ( 0.00%) 25226 ( 0.00%) 182.80
bgp 89 ( 0.00%) 13737 ( 0.00%) 154.35
other 519953 ( 1.42%) 652300807 ( 2.15%) 1254.54
udp6 49234 ( 0.13%) 11954422 ( 0.04%) 242.81
dns 45003 ( 0.12%) 10995532 ( 0.04%) 244.33
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 3 ( 0.00%) 323 ( 0.00%) 107.67
cuseeme 2 ( 0.00%) 203 ( 0.00%) 101.50
other 4225 ( 0.01%) 958257 ( 0.00%) 226.81
icmp6 28420 ( 0.08%) 3836936 ( 0.01%) 135.01
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 465 ( 0.00%) 439532 ( 0.00%) 945.23
tcpdump file: 201203311445.dump.gz (805.16 MB)