Traffic Trace Info
DumpFile: 201203311545.dump
FileSize: 2317.05MB
Id: 201203311545
StartTime: Sat Mar 31 15:45:00 2012
EndTime: Sat Mar 31 16:00:01 2012
TotalTime: 900.73 seconds
TotalCapSize: 1820.18MB CapLen: 96 bytes
# of packets: 32562244 (25136.24MB)
AvgRate: 234.13Mbps stddev:55.98M
IP flow (unique src/dst pair) Information
# of flows: 2087693 (avg. 15.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.5% 1.8% 1.8% 1.8% 1.3% 1.3% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1470818
Top 10 bandwidth usage (bytes/total in %):
20.1% 18.3% 6.4% 6.0% 4.8% 4.0% 3.0% 2.5% 2.5% 2.3%
# of IPv6 addresses: 5604
Top 10 bandwidth usage (bytes/total in %):
52.0% 13.6% 12.4% 12.4% 11.8% 11.6% 8.1% 7.0% 6.1% 5.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311545.pktlen.png)
detailed numbers
[ 32- 63]: 7164641
[ 64- 127]: 6177557
[ 128- 255]: 975250
[ 256- 511]: 801335
[ 512- 1023]: 941313
[ 1024- 2047]: 16502148
Protocol Breakdown
![[protocol breakdown chart]](201203311545.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32562244 (100.00%) 26357256057 (100.00%) 809.44
ip 32392631 ( 99.48%) 26260270912 ( 99.63%) 810.69
tcp 25309901 ( 77.73%) 23051116555 ( 87.46%) 910.75
http(s) 13747250 ( 42.22%) 19069351941 ( 72.35%) 1387.14
http(c) 5587252 ( 17.16%) 660555679 ( 2.51%) 118.23
squid 98712 ( 0.30%) 75978633 ( 0.29%) 769.70
smtp 47268 ( 0.15%) 10766213 ( 0.04%) 227.77
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 18002 ( 0.06%) 1519133 ( 0.01%) 84.39
pop3 3250 ( 0.01%) 1874066 ( 0.01%) 576.64
imap 896 ( 0.00%) 242152 ( 0.00%) 270.26
telnet 122962 ( 0.38%) 9094052 ( 0.03%) 73.96
ssh 13397 ( 0.04%) 2516398 ( 0.01%) 187.83
dns 2060 ( 0.01%) 149073 ( 0.00%) 72.37
bgp 608 ( 0.00%) 107449 ( 0.00%) 176.73
napster 58 ( 0.00%) 3954 ( 0.00%) 68.17
realaud 87 ( 0.00%) 7656 ( 0.00%) 88.00
rtsp 144 ( 0.00%) 11680 ( 0.00%) 81.11
icecast 16108 ( 0.05%) 11909365 ( 0.05%) 739.34
hotline 23 ( 0.00%) 1626 ( 0.00%) 70.70
other 5651811 ( 17.36%) 3207026677 ( 12.17%) 567.43
udp 3318899 ( 10.19%) 1414748033 ( 5.37%) 426.27
dns 444337 ( 1.36%) 124078282 ( 0.47%) 279.24
rip 1 ( 0.00%) 219 ( 0.00%) 219.00
realaud 10 ( 0.00%) 746 ( 0.00%) 74.60
halflif 35 ( 0.00%) 5331 ( 0.00%) 152.31
starcra 36 ( 0.00%) 4396 ( 0.00%) 122.11
everque 237 ( 0.00%) 49535 ( 0.00%) 209.01
unreal 164 ( 0.00%) 71504 ( 0.00%) 436.00
quake 15 ( 0.00%) 1768 ( 0.00%) 117.87
cuseeme 3 ( 0.00%) 295 ( 0.00%) 98.33
other 2800388 ( 8.60%) 1284983265 ( 4.88%) 458.86
icmp 1821849 ( 5.59%) 152835332 ( 0.58%) 83.89
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 9003 ( 0.03%) 4580738 ( 0.02%) 508.80
ip6 1835908 ( 5.64%) 1600795581 ( 6.07%) 871.94
pim 440 ( 0.00%) 26400 ( 0.00%) 60.00
other 96447 ( 0.30%) 36149113 ( 0.14%) 374.81
frag 325396 ( 1.00%) 232063261 ( 0.88%) 713.17
ip6 169613 ( 0.52%) 96985145 ( 0.37%) 571.80
tcp6 92618 ( 0.28%) 81932172 ( 0.31%) 884.62
http(s) 17952 ( 0.06%) 23246325 ( 0.09%) 1294.92
http(c) 19378 ( 0.06%) 1662523 ( 0.01%) 85.79
squid 22 ( 0.00%) 1684 ( 0.00%) 76.55
smtp 845 ( 0.00%) 354500 ( 0.00%) 419.53
dns 116 ( 0.00%) 14857 ( 0.00%) 128.08
bgp 92 ( 0.00%) 16116 ( 0.00%) 175.17
other 54213 ( 0.17%) 56636167 ( 0.21%) 1044.70
udp6 48309 ( 0.15%) 10802277 ( 0.04%) 223.61
dns 43967 ( 0.14%) 10294449 ( 0.04%) 234.14
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
cuseeme 1 ( 0.00%) 101 ( 0.00%) 101.00
other 4339 ( 0.01%) 507512 ( 0.00%) 116.97
icmp6 28119 ( 0.09%) 3803177 ( 0.01%) 135.25
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 455 ( 0.00%) 432263 ( 0.00%) 950.03
tcpdump file: 201203311545.dump.gz (738.25 MB)