Traffic Trace Info
DumpFile: 201203311530.dump
FileSize: 2600.35MB
Id: 201203311530
StartTime: Sat Mar 31 15:30:00 2012
EndTime: Sat Mar 31 15:45:00 2012
TotalTime: 899.84 seconds
TotalCapSize: 2039.45MB CapLen: 96 bytes
# of packets: 36758637 (29102.79MB)
AvgRate: 271.36Mbps stddev:54.65M
IP flow (unique src/dst pair) Information
# of flows: 1810754 (avg. 20.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.3% 3.3% 2.0% 1.8% 1.5% 1.3% 1.3% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1425782
Top 10 bandwidth usage (bytes/total in %):
16.6% 13.0% 12.6% 11.8% 5.7% 5.1% 4.9% 3.5% 3.3% 3.1%
# of IPv6 addresses: 5785
Top 10 bandwidth usage (bytes/total in %):
61.2% 14.4% 12.3% 11.4% 10.1% 8.9% 7.2% 7.1% 4.5% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311530.pktlen.png)
detailed numbers
[ 32- 63]: 8192705
[ 64- 127]: 6714825
[ 128- 255]: 976843
[ 256- 511]: 687555
[ 512- 1023]: 837391
[ 1024- 2047]: 19349318
Protocol Breakdown
![[protocol breakdown chart]](201203311530.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36758637 (100.00%) 30516490169 (100.00%) 830.19
ip 36580618 ( 99.52%) 30424215806 ( 99.70%) 831.70
tcp 29656715 ( 80.68%) 27291357963 ( 89.43%) 920.24
http(s) 15739298 ( 42.82%) 22180507407 ( 72.68%) 1409.24
http(c) 7176404 ( 19.52%) 651635256 ( 2.14%) 90.80
squid 189673 ( 0.52%) 148596179 ( 0.49%) 783.43
smtp 37333 ( 0.10%) 8156581 ( 0.03%) 218.48
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 11420 ( 0.03%) 974531 ( 0.00%) 85.34
pop3 1820 ( 0.00%) 583762 ( 0.00%) 320.75
imap 848 ( 0.00%) 207184 ( 0.00%) 244.32
telnet 2424 ( 0.01%) 170869 ( 0.00%) 70.49
ssh 16020 ( 0.04%) 2710382 ( 0.01%) 169.19
dns 1745 ( 0.00%) 128217 ( 0.00%) 73.48
bgp 650 ( 0.00%) 127363 ( 0.00%) 195.94
napster 117 ( 0.00%) 7563 ( 0.00%) 64.64
realaud 57 ( 0.00%) 4706 ( 0.00%) 82.56
rtsp 12 ( 0.00%) 1334 ( 0.00%) 111.17
icecast 16172 ( 0.04%) 11963253 ( 0.04%) 739.75
hotline 10 ( 0.00%) 626 ( 0.00%) 62.60
other 6462702 ( 17.58%) 4285582136 ( 14.04%) 663.13
udp 3297544 ( 8.97%) 1420600803 ( 4.66%) 430.81
dns 462609 ( 1.26%) 117855107 ( 0.39%) 254.76
realaud 16 ( 0.00%) 2144 ( 0.00%) 134.00
halflif 30 ( 0.00%) 7681 ( 0.00%) 256.03
starcra 93 ( 0.00%) 16041 ( 0.00%) 172.48
everque 273 ( 0.00%) 74291 ( 0.00%) 272.13
unreal 128 ( 0.00%) 50804 ( 0.00%) 396.91
quake 18 ( 0.00%) 1705 ( 0.00%) 94.72
cuseeme 11 ( 0.00%) 942 ( 0.00%) 85.64
other 2746332 ( 7.47%) 1297128685 ( 4.25%) 472.31
icmp 1775207 ( 4.83%) 152061099 ( 0.50%) 85.66
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2952 ( 0.01%) 1043504 ( 0.00%) 353.49
ip6 1747699 ( 4.75%) 1518928466 ( 4.98%) 869.10
pim 386 ( 0.00%) 23160 ( 0.00%) 60.00
other 99930 ( 0.27%) 40181541 ( 0.13%) 402.10
frag 355618 ( 0.97%) 269104046 ( 0.88%) 756.72
ip6 178019 ( 0.48%) 92274363 ( 0.30%) 518.34
tcp6 98588 ( 0.27%) 76476267 ( 0.25%) 775.72
http(s) 13194 ( 0.04%) 15854407 ( 0.05%) 1201.64
http(c) 27587 ( 0.08%) 2376582 ( 0.01%) 86.15
smtp 85 ( 0.00%) 37467 ( 0.00%) 440.79
ftp 24 ( 0.00%) 1890 ( 0.00%) 78.75
dns 224 ( 0.00%) 46304 ( 0.00%) 206.71
bgp 94 ( 0.00%) 16167 ( 0.00%) 171.99
hotline 8 ( 0.00%) 676 ( 0.00%) 84.50
other 57372 ( 0.16%) 58142774 ( 0.19%) 1013.43
udp6 50831 ( 0.14%) 11548863 ( 0.04%) 227.20
dns 45802 ( 0.12%) 10960363 ( 0.04%) 239.30
halflif 1 ( 0.00%) 123 ( 0.00%) 123.00
starcra 1 ( 0.00%) 115 ( 0.00%) 115.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 5026 ( 0.01%) 588155 ( 0.00%) 117.02
icmp6 28047 ( 0.08%) 3808945 ( 0.01%) 135.81
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 439 ( 0.00%) 424778 ( 0.00%) 967.60
tcpdump file: 201203311530.dump.gz (819.31 MB)