Traffic Trace Info
DumpFile: 201203311515.dump
FileSize: 2913.50MB
Id: 201203311515
StartTime: Sat Mar 31 15:15:00 2012
EndTime: Sat Mar 31 15:30:00 2012
TotalTime: 899.87 seconds
TotalCapSize: -1811.86MB CapLen: 96 bytes
# of packets: 41245244 (32287.88MB)
AvgRate: 300.98Mbps stddev:51.49M
IP flow (unique src/dst pair) Information
# of flows: 1914065 (avg. 21.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 2.9% 1.9% 1.7% 1.6% 1.6% 1.3% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1474201
Top 10 bandwidth usage (bytes/total in %):
20.3% 13.7% 10.8% 6.7% 5.9% 5.4% 4.4% 2.9% 2.7% 2.7%
# of IPv6 addresses: 5867
Top 10 bandwidth usage (bytes/total in %):
30.6% 23.1% 23.1% 11.0% 7.3% 6.8% 6.6% 6.6% 6.1% 5.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311515.pktlen.png)
detailed numbers
[ 32- 63]: 9205405
[ 64- 127]: 7990899
[ 128- 255]: 1011501
[ 256- 511]: 737798
[ 512- 1023]: 821989
[ 1024- 2047]: 21477652
Protocol Breakdown
![[protocol breakdown chart]](201203311515.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41245244 (100.00%) 33856291029 (100.00%) 820.85
ip 41001961 ( 99.41%) 33669088514 ( 99.45%) 821.16
tcp 32778077 ( 79.47%) 29673076118 ( 87.64%) 905.27
http(s) 16532067 ( 40.08%) 23393594516 ( 69.10%) 1415.04
http(c) 8259847 ( 20.03%) 746536987 ( 2.21%) 90.38
squid 169004 ( 0.41%) 125941397 ( 0.37%) 745.20
smtp 31075 ( 0.08%) 5972020 ( 0.02%) 192.18
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 12133 ( 0.03%) 1065338 ( 0.00%) 87.80
pop3 1940 ( 0.00%) 656939 ( 0.00%) 338.63
imap 795 ( 0.00%) 169653 ( 0.00%) 213.40
telnet 2317 ( 0.01%) 162772 ( 0.00%) 70.25
ssh 19897 ( 0.05%) 3286506 ( 0.01%) 165.18
dns 2099 ( 0.01%) 185474 ( 0.00%) 88.36
bgp 624 ( 0.00%) 114882 ( 0.00%) 184.11
napster 651 ( 0.00%) 46542 ( 0.00%) 71.49
realaud 8 ( 0.00%) 492 ( 0.00%) 61.50
rtsp 16793 ( 0.04%) 25010827 ( 0.07%) 1489.36
icecast 16132 ( 0.04%) 11892825 ( 0.04%) 737.22
hotline 28 ( 0.00%) 1758 ( 0.00%) 62.79
other 7712660 ( 18.70%) 5358436756 ( 15.83%) 694.76
udp 4505948 ( 10.92%) 2299990132 ( 6.79%) 510.43
dns 473656 ( 1.15%) 115389941 ( 0.34%) 243.62
rip 2 ( 0.00%) 141 ( 0.00%) 70.50
realaud 18 ( 0.00%) 2004 ( 0.00%) 111.33
halflif 36 ( 0.00%) 2898 ( 0.00%) 80.50
starcra 65 ( 0.00%) 9663 ( 0.00%) 148.66
everque 254 ( 0.00%) 59736 ( 0.00%) 235.18
unreal 162 ( 0.00%) 72319 ( 0.00%) 446.41
quake 18 ( 0.00%) 2584 ( 0.00%) 143.56
cuseeme 3 ( 0.00%) 322 ( 0.00%) 107.33
other 3768408 ( 9.14%) 2168637288 ( 6.41%) 575.48
icmp 1722167 ( 4.18%) 148705774 ( 0.44%) 86.35
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2910 ( 0.01%) 1002212 ( 0.00%) 344.40
ip6 1899209 ( 4.60%) 1510951909 ( 4.46%) 795.57
pim 406 ( 0.00%) 24360 ( 0.00%) 60.00
other 93059 ( 0.23%) 35318739 ( 0.10%) 379.53
frag 1125303 ( 2.73%) 858870105 ( 2.54%) 763.23
ip6 243283 ( 0.59%) 187202515 ( 0.55%) 769.48
tcp6 161918 ( 0.39%) 170658369 ( 0.50%) 1053.98
http(s) 19433 ( 0.05%) 23401689 ( 0.07%) 1204.22
http(c) 16688 ( 0.04%) 1457464 ( 0.00%) 87.34
squid 2882 ( 0.01%) 2113094 ( 0.01%) 733.20
smtp 116 ( 0.00%) 42549 ( 0.00%) 366.80
dns 172 ( 0.00%) 24972 ( 0.00%) 145.19
bgp 93 ( 0.00%) 16156 ( 0.00%) 173.72
other 122534 ( 0.30%) 143602445 ( 0.42%) 1171.94
udp6 51015 ( 0.12%) 12037574 ( 0.04%) 235.96
dns 47381 ( 0.11%) 11568081 ( 0.03%) 244.15
realaud 1 ( 0.00%) 118 ( 0.00%) 118.00
halflif 2 ( 0.00%) 227 ( 0.00%) 113.50
everque 1 ( 0.00%) 101 ( 0.00%) 101.00
quake 2 ( 0.00%) 209 ( 0.00%) 104.50
other 3628 ( 0.01%) 468838 ( 0.00%) 129.23
icmp6 29685 ( 0.07%) 3936893 ( 0.01%) 132.62
ip6 86 ( 0.00%) 11698 ( 0.00%) 136.02
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 549 ( 0.00%) 553901 ( 0.00%) 1008.93
tcpdump file: 201203311515.dump.gz (917.47 MB)