Traffic Trace Info
DumpFile: 201203311700.dump
FileSize: 2543.93MB
Id: 201203311700
StartTime: Sat Mar 31 17:00:00 2012
EndTime: Sat Mar 31 17:15:01 2012
TotalTime: 900.42 seconds
TotalCapSize: 2001.04MB CapLen: 96 bytes
# of packets: 35578242 (29696.89MB)
AvgRate: 276.66Mbps stddev:51.21M
IP flow (unique src/dst pair) Information
# of flows: 1839708 (avg. 19.34 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.7% 2.5% 2.2% 2.1% 2.1% 1.5% 1.5% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 1411601
Top 10 bandwidth usage (bytes/total in %):
25.2% 22.3% 5.8% 3.9% 2.9% 2.9% 2.8% 2.7% 2.6% 2.6%
# of IPv6 addresses: 5926
Top 10 bandwidth usage (bytes/total in %):
38.2% 32.2% 11.7% 10.3% 9.4% 9.0% 8.8% 5.9% 5.2% 4.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311700.pktlen.png)
detailed numbers
[ 32- 63]: 6762113
[ 64- 127]: 6350593
[ 128- 255]: 1115076
[ 256- 511]: 636491
[ 512- 1023]: 973100
[ 1024- 2047]: 19740869
Protocol Breakdown
![[protocol breakdown chart]](201203311700.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35578242 (100.00%) 31139442082 (100.00%) 875.24
ip 35360626 ( 99.39%) 31039921259 ( 99.68%) 877.81
tcp 28345095 ( 79.67%) 27683837799 ( 88.90%) 976.67
http(s) 16841827 ( 47.34%) 23269454464 ( 74.73%) 1381.65
http(c) 6524875 ( 18.34%) 1351264451 ( 4.34%) 207.09
squid 48540 ( 0.14%) 36665530 ( 0.12%) 755.37
smtp 35418 ( 0.10%) 6896887 ( 0.02%) 194.73
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 5792 ( 0.02%) 526109 ( 0.00%) 90.83
pop3 1595 ( 0.00%) 351328 ( 0.00%) 220.27
imap 1861 ( 0.01%) 1201000 ( 0.00%) 645.35
telnet 3834 ( 0.01%) 282917 ( 0.00%) 73.79
ssh 70781 ( 0.20%) 53055596 ( 0.17%) 749.57
dns 1917 ( 0.01%) 140990 ( 0.00%) 73.55
bgp 616 ( 0.00%) 107339 ( 0.00%) 174.25
napster 415 ( 0.00%) 26640 ( 0.00%) 64.19
realaud 28 ( 0.00%) 5231 ( 0.00%) 186.82
rtsp 3 ( 0.00%) 180 ( 0.00%) 60.00
icecast 891 ( 0.00%) 127043 ( 0.00%) 142.58
hotline 153 ( 0.00%) 9666 ( 0.00%) 63.18
other 4806548 ( 13.51%) 2963722368 ( 9.52%) 616.60
udp 3220578 ( 9.05%) 1368106276 ( 4.39%) 424.80
dns 456507 ( 1.28%) 112821218 ( 0.36%) 247.14
realaud 7 ( 0.00%) 913 ( 0.00%) 130.43
halflif 48 ( 0.00%) 14012 ( 0.00%) 291.92
starcra 35 ( 0.00%) 3940 ( 0.00%) 112.57
everque 244 ( 0.00%) 53678 ( 0.00%) 219.99
unreal 152 ( 0.00%) 63551 ( 0.00%) 418.10
quake 24 ( 0.00%) 2810 ( 0.00%) 117.08
cuseeme 3 ( 0.00%) 252 ( 0.00%) 84.00
other 2762198 ( 7.76%) 1255025503 ( 4.03%) 454.36
icmp 1710644 ( 4.81%) 138010926 ( 0.44%) 80.68
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 5830 ( 0.02%) 3005572 ( 0.01%) 515.54
ip6 1982880 ( 5.57%) 1809789329 ( 5.81%) 912.71
pim 405 ( 0.00%) 24300 ( 0.00%) 60.00
other 95009 ( 0.27%) 37127787 ( 0.12%) 390.78
frag 13010 ( 0.04%) 9990398 ( 0.03%) 767.90
ip6 217616 ( 0.61%) 99520823 ( 0.32%) 457.32
tcp6 137390 ( 0.39%) 83401794 ( 0.27%) 607.04
http(s) 20645 ( 0.06%) 28048645 ( 0.09%) 1358.62
http(c) 67555 ( 0.19%) 5982726 ( 0.02%) 88.56
squid 1758 ( 0.00%) 1243382 ( 0.00%) 707.27
smtp 116 ( 0.00%) 71881 ( 0.00%) 619.66
dns 230 ( 0.00%) 48156 ( 0.00%) 209.37
bgp 87 ( 0.00%) 15931 ( 0.00%) 183.11
realaud 7718 ( 0.02%) 8688070 ( 0.03%) 1125.69
other 39281 ( 0.11%) 39303003 ( 0.13%) 1000.56
udp6 50134 ( 0.14%) 11442961 ( 0.04%) 228.25
dns 45356 ( 0.13%) 10850806 ( 0.03%) 239.24
quake 1 ( 0.00%) 112 ( 0.00%) 112.00
cuseeme 1 ( 0.00%) 104 ( 0.00%) 104.00
other 4776 ( 0.01%) 591939 ( 0.00%) 123.94
icmp6 28937 ( 0.08%) 3850024 ( 0.01%) 133.05
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1041 ( 0.00%) 810534 ( 0.00%) 778.61
tcpdump file: 201203311700.dump.gz (797.09 MB)