Traffic Trace Info
DumpFile: 201203311500.dump
FileSize: 2735.79MB
Id: 201203311500
StartTime: Sat Mar 31 15:00:00 2012
EndTime: Sat Mar 31 15:15:00 2012
TotalTime: 900.27 seconds
TotalCapSize: -1942.59MB CapLen: 96 bytes
# of packets: 38166470 (30559.47MB)
AvgRate: 284.75Mbps stddev:54.55M
IP flow (unique src/dst pair) Information
# of flows: 1868417 (avg. 20.43 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.7% 2.4% 2.2% 2.1% 2.1% 1.7% 1.6% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1439684
Top 10 bandwidth usage (bytes/total in %):
22.1% 21.5% 6.6% 4.8% 3.8% 3.5% 2.8% 2.5% 2.4% 2.4%
# of IPv6 addresses: 5771
Top 10 bandwidth usage (bytes/total in %):
89.2% 87.7% 6.2% 1.6% 1.4% 1.1% 1.1% 0.8% 0.8% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311500.pktlen.png)
detailed numbers
[ 32- 63]: 7805323
[ 64- 127]: 7283120
[ 128- 255]: 1009937
[ 256- 511]: 879665
[ 512- 1023]: 939670
[ 1024- 2047]: 20248755
Protocol Breakdown
![[protocol breakdown chart]](201203311500.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38166470 (100.00%) 32043922799 (100.00%) 839.58
ip 37418182 ( 98.04%) 31243101501 ( 97.50%) 834.97
tcp 29642200 ( 77.67%) 28009064947 ( 87.41%) 944.91
http(s) 15737350 ( 41.23%) 22122371682 ( 69.04%) 1405.72
http(c) 6811379 ( 17.85%) 864231644 ( 2.70%) 126.88
squid 141383 ( 0.37%) 102771981 ( 0.32%) 726.90
smtp 41076 ( 0.11%) 13462581 ( 0.04%) 327.75
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 13054 ( 0.03%) 1895572 ( 0.01%) 145.21
pop3 1736 ( 0.00%) 553129 ( 0.00%) 318.62
imap 839 ( 0.00%) 284102 ( 0.00%) 338.62
telnet 6811 ( 0.02%) 493805 ( 0.00%) 72.50
ssh 23116 ( 0.06%) 3717144 ( 0.01%) 160.80
dns 2412 ( 0.01%) 298582 ( 0.00%) 123.79
bgp 623 ( 0.00%) 115492 ( 0.00%) 185.38
napster 101 ( 0.00%) 10748 ( 0.00%) 106.42
realaud 438 ( 0.00%) 29296 ( 0.00%) 66.89
rtsp 27079 ( 0.07%) 40345423 ( 0.13%) 1489.92
icecast 16267 ( 0.04%) 11985872 ( 0.04%) 736.82
hotline 181 ( 0.00%) 11355 ( 0.00%) 62.73
other 6818353 ( 17.86%) 4846486419 ( 15.12%) 710.80
udp 3893438 ( 10.20%) 1737434449 ( 5.42%) 446.25
dns 487332 ( 1.28%) 117489682 ( 0.37%) 241.09
realaud 9 ( 0.00%) 1259 ( 0.00%) 139.89
halflif 23 ( 0.00%) 4480 ( 0.00%) 194.78
starcra 36 ( 0.00%) 4680 ( 0.00%) 130.00
everque 367 ( 0.00%) 81268 ( 0.00%) 221.44
unreal 71 ( 0.00%) 14573 ( 0.00%) 205.25
quake 41 ( 0.00%) 4507 ( 0.00%) 109.93
other 3176892 ( 8.32%) 1606072128 ( 5.01%) 505.55
icmp 1791196 ( 4.69%) 152804814 ( 0.48%) 85.31
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2780 ( 0.01%) 938488 ( 0.00%) 337.59
ip6 1994088 ( 5.22%) 1303555004 ( 4.07%) 653.71
pim 390 ( 0.00%) 23400 ( 0.00%) 60.00
other 93906 ( 0.25%) 39261239 ( 0.12%) 418.09
frag 895001 ( 2.34%) 683249830 ( 2.13%) 763.41
ip6 748288 ( 1.96%) 800821298 ( 2.50%) 1070.20
tcp6 665614 ( 1.74%) 784145156 ( 2.45%) 1178.08
http(s) 10313 ( 0.03%) 12790949 ( 0.04%) 1240.27
http(c) 36645 ( 0.10%) 3298849 ( 0.01%) 90.02
squid 78 ( 0.00%) 81351 ( 0.00%) 1042.96
smtp 46 ( 0.00%) 10903 ( 0.00%) 237.02
dns 212 ( 0.00%) 44418 ( 0.00%) 209.52
bgp 87 ( 0.00%) 18900 ( 0.00%) 217.24
other 618233 ( 1.62%) 767899786 ( 2.40%) 1242.09
udp6 51901 ( 0.14%) 12057976 ( 0.04%) 232.33
dns 48790 ( 0.13%) 11653303 ( 0.04%) 238.85
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 3 ( 0.00%) 327 ( 0.00%) 109.00
unreal 1 ( 0.00%) 115 ( 0.00%) 115.00
quake 3 ( 0.00%) 329 ( 0.00%) 109.67
other 3103 ( 0.01%) 403795 ( 0.00%) 130.13
icmp6 30086 ( 0.08%) 4027354 ( 0.01%) 133.86
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 573 ( 0.00%) 575320 ( 0.00%) 1004.05
tcpdump file: 201203311500.dump.gz (853.59 MB)