Traffic Trace Info
DumpFile: 201203311615.dump
FileSize: 2349.32MB
Id: 201203311615
StartTime: Sat Mar 31 16:15:00 2012
EndTime: Sat Mar 31 16:30:00 2012
TotalTime: 899.64 seconds
TotalCapSize: 1850.22MB CapLen: 96 bytes
# of packets: 32708183 (24856.71MB)
AvgRate: 231.74Mbps stddev:45.57M
IP flow (unique src/dst pair) Information
# of flows: 1907178 (avg. 17.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 3.6% 3.6% 1.7% 1.6% 1.5% 1.4% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1445363
Top 10 bandwidth usage (bytes/total in %):
14.2% 10.0% 7.7% 5.5% 5.1% 4.4% 4.4% 4.1% 3.8% 3.8%
# of IPv6 addresses: 5805
Top 10 bandwidth usage (bytes/total in %):
41.5% 32.4% 32.4% 9.8% 8.5% 7.5% 6.9% 5.9% 5.1% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311615.pktlen.png)
detailed numbers
[ 32- 63]: 6626684
[ 64- 127]: 7182295
[ 128- 255]: 1034183
[ 256- 511]: 693161
[ 512- 1023]: 824850
[ 1024- 2047]: 16347010
Protocol Breakdown
![[protocol breakdown chart]](201203311615.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32708183 (100.00%) 26064148937 (100.00%) 796.87
ip 32510352 ( 99.40%) 25930482920 ( 99.49%) 797.61
tcp 26167655 ( 80.00%) 23409761896 ( 89.82%) 894.61
http(s) 13454873 ( 41.14%) 18603865402 ( 71.38%) 1382.69
http(c) 6209807 ( 18.99%) 665271247 ( 2.55%) 107.13
squid 54233 ( 0.17%) 29165458 ( 0.11%) 537.78
smtp 29906 ( 0.09%) 4558031 ( 0.02%) 152.41
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 16466 ( 0.05%) 2127940 ( 0.01%) 129.23
pop3 2243 ( 0.01%) 908967 ( 0.00%) 405.25
imap 1296 ( 0.00%) 130720 ( 0.00%) 100.86
telnet 9334 ( 0.03%) 678762 ( 0.00%) 72.72
ssh 21980 ( 0.07%) 3951827 ( 0.02%) 179.79
dns 1901 ( 0.01%) 136716 ( 0.00%) 71.92
bgp 672 ( 0.00%) 144827 ( 0.00%) 215.52
napster 100 ( 0.00%) 6931 ( 0.00%) 69.31
realaud 11 ( 0.00%) 672 ( 0.00%) 61.09
icecast 695 ( 0.00%) 104158 ( 0.00%) 149.87
hotline 4 ( 0.00%) 244 ( 0.00%) 61.00
other 6364121 ( 19.46%) 4098708934 ( 15.73%) 644.03
udp 3033397 ( 9.27%) 1180298843 ( 4.53%) 389.10
dns 449746 ( 1.38%) 114058312 ( 0.44%) 253.61
rip 1 ( 0.00%) 69 ( 0.00%) 69.00
realaud 14 ( 0.00%) 1356 ( 0.00%) 96.86
halflif 11 ( 0.00%) 1152 ( 0.00%) 104.73
starcra 26 ( 0.00%) 2645 ( 0.00%) 101.73
everque 329 ( 0.00%) 78546 ( 0.00%) 238.74
unreal 205 ( 0.00%) 103381 ( 0.00%) 504.30
quake 15 ( 0.00%) 2244 ( 0.00%) 149.60
cuseeme 9 ( 0.00%) 3029 ( 0.00%) 336.56
other 2574931 ( 7.87%) 1065325489 ( 4.09%) 413.73
icmp 1738762 ( 5.32%) 140612847 ( 0.54%) 80.87
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3149 ( 0.01%) 1053726 ( 0.00%) 334.62
ip6 1468526 ( 4.49%) 1163533285 ( 4.46%) 792.31
pim 404 ( 0.00%) 24240 ( 0.00%) 60.00
other 98274 ( 0.30%) 35178813 ( 0.13%) 357.97
frag 17024 ( 0.05%) 9620903 ( 0.04%) 565.14
ip6 197829 ( 0.60%) 133665897 ( 0.51%) 675.66
tcp6 116448 ( 0.36%) 117495031 ( 0.45%) 1008.99
http(s) 5256 ( 0.02%) 6091433 ( 0.02%) 1158.95
http(c) 17618 ( 0.05%) 1523153 ( 0.01%) 86.45
squid 11 ( 0.00%) 838 ( 0.00%) 76.18
smtp 60 ( 0.00%) 34575 ( 0.00%) 576.25
ftp 100 ( 0.00%) 12739 ( 0.00%) 127.39
dns 169 ( 0.00%) 29466 ( 0.00%) 174.36
bgp 87 ( 0.00%) 18174 ( 0.00%) 208.90
other 93147 ( 0.28%) 109784653 ( 0.42%) 1178.62
udp6 51559 ( 0.16%) 11568522 ( 0.04%) 224.37
dns 45924 ( 0.14%) 10913951 ( 0.04%) 237.65
halflif 3 ( 0.00%) 325 ( 0.00%) 108.33
everque 1 ( 0.00%) 116 ( 0.00%) 116.00
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
other 5630 ( 0.02%) 654025 ( 0.00%) 116.17
icmp6 28890 ( 0.09%) 3818326 ( 0.01%) 132.17
ip6 81 ( 0.00%) 11058 ( 0.00%) 136.52
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 821 ( 0.00%) 768880 ( 0.00%) 936.52
tcpdump file: 201203311615.dump.gz (744.53 MB)