Traffic Trace Info
DumpFile: 201203311600.dump
FileSize: 2158.64MB
Id: 201203311600
StartTime: Sat Mar 31 16:00:01 2012
EndTime: Sat Mar 31 16:15:00 2012
TotalTime: 899.43 seconds
TotalCapSize: 1692.73MB CapLen: 96 bytes
# of packets: 30533050 (22768.87MB)
AvgRate: 212.36Mbps stddev:36.71M
IP flow (unique src/dst pair) Information
# of flows: 1769717 (avg. 17.25 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.5% 1.6% 1.6% 1.6% 1.5% 1.4% 1.2% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 1389101
Top 10 bandwidth usage (bytes/total in %):
15.3% 14.3% 5.2% 4.9% 4.7% 4.5% 4.3% 3.6% 2.9% 2.4%
# of IPv6 addresses: 5807
Top 10 bandwidth usage (bytes/total in %):
54.6% 13.7% 12.7% 12.0% 10.8% 9.3% 7.3% 6.6% 5.6% 5.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311600.pktlen.png)
detailed numbers
[ 32- 63]: 7301784
[ 64- 127]: 5759821
[ 128- 255]: 962426
[ 256- 511]: 810339
[ 512- 1023]: 835485
[ 1024- 2047]: 14863195
Protocol Breakdown
![[protocol breakdown chart]](201203311600.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30533050 (100.00%) 23874893226 (100.00%) 781.94
ip 30361152 ( 99.44%) 23778591152 ( 99.60%) 783.19
tcp 23543961 ( 77.11%) 20908411000 ( 87.57%) 888.06
http(s) 12533387 ( 41.05%) 17353909394 ( 72.69%) 1384.61
http(c) 5820953 ( 19.06%) 854279334 ( 3.58%) 146.76
squid 71938 ( 0.24%) 53012426 ( 0.22%) 736.92
smtp 40447 ( 0.13%) 13281326 ( 0.06%) 328.36
ftp 10179 ( 0.03%) 868134 ( 0.00%) 85.29
pop3 1912 ( 0.01%) 667679 ( 0.00%) 349.20
imap 1236 ( 0.00%) 148497 ( 0.00%) 120.14
telnet 3867 ( 0.01%) 275245 ( 0.00%) 71.18
ssh 54730 ( 0.18%) 9212800 ( 0.04%) 168.33
dns 2006 ( 0.01%) 164295 ( 0.00%) 81.90
bgp 687 ( 0.00%) 154045 ( 0.00%) 224.23
napster 89 ( 0.00%) 7040 ( 0.00%) 79.10
realaud 3 ( 0.00%) 184 ( 0.00%) 61.33
icecast 12749 ( 0.04%) 9336934 ( 0.04%) 732.37
hotline 36 ( 0.00%) 3896 ( 0.00%) 108.22
other 4989742 ( 16.34%) 2613089771 ( 10.94%) 523.69
udp 3415867 ( 11.19%) 1430504411 ( 5.99%) 418.78
dns 488979 ( 1.60%) 126502718 ( 0.53%) 258.71
rip 3 ( 0.00%) 210 ( 0.00%) 70.00
realaud 5 ( 0.00%) 495 ( 0.00%) 99.00
halflif 35 ( 0.00%) 3338 ( 0.00%) 95.37
starcra 66 ( 0.00%) 7668 ( 0.00%) 116.18
everque 307 ( 0.00%) 81759 ( 0.00%) 266.32
unreal 160 ( 0.00%) 59710 ( 0.00%) 373.19
quake 20 ( 0.00%) 2961 ( 0.00%) 148.05
other 2831333 ( 9.27%) 1297707906 ( 5.44%) 458.34
icmp 1671188 ( 5.47%) 135589017 ( 0.57%) 81.13
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2941 ( 0.01%) 1042286 ( 0.00%) 354.40
ip6 1629101 ( 5.34%) 1264126366 ( 5.29%) 775.97
pim 438 ( 0.00%) 26280 ( 0.00%) 60.00
other 97471 ( 0.32%) 38872522 ( 0.16%) 398.81
frag 405580 ( 1.33%) 303315788 ( 1.27%) 747.86
ip6 171898 ( 0.56%) 96302074 ( 0.40%) 560.23
tcp6 91341 ( 0.30%) 79600716 ( 0.33%) 871.47
http(s) 10732 ( 0.04%) 14285896 ( 0.06%) 1331.15
http(c) 19932 ( 0.07%) 1717346 ( 0.01%) 86.16
squid 3 ( 0.00%) 230 ( 0.00%) 76.67
smtp 564 ( 0.00%) 306432 ( 0.00%) 543.32
dns 315 ( 0.00%) 64564 ( 0.00%) 204.97
bgp 88 ( 0.00%) 14467 ( 0.00%) 164.40
other 59707 ( 0.20%) 63211781 ( 0.26%) 1058.70
udp6 49430 ( 0.16%) 11516134 ( 0.05%) 232.98
dns 46023 ( 0.15%) 11032134 ( 0.05%) 239.71
realaud 2 ( 0.00%) 208 ( 0.00%) 104.00
everque 1 ( 0.00%) 117 ( 0.00%) 117.00
unreal 1 ( 0.00%) 101 ( 0.00%) 101.00
quake 2 ( 0.00%) 223 ( 0.00%) 111.50
cuseeme 1 ( 0.00%) 92 ( 0.00%) 92.00
other 3400 ( 0.01%) 483259 ( 0.00%) 142.13
icmp6 29484 ( 0.10%) 3940404 ( 0.02%) 133.65
ip6 86 ( 0.00%) 11698 ( 0.00%) 136.02
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1527 ( 0.01%) 1229042 ( 0.01%) 804.87
tcpdump file: 201203311600.dump.gz (698.48 MB)