Traffic Trace Info
DumpFile: 201203311715.dump
FileSize: 2518.55MB
Id: 201203311715
StartTime: Sat Mar 31 17:15:01 2012
EndTime: Sat Mar 31 17:30:01 2012
TotalTime: 899.74 seconds
TotalCapSize: 1987.31MB CapLen: 96 bytes
# of packets: 34814907 (28733.22MB)
AvgRate: 267.88Mbps stddev:49.00M
IP flow (unique src/dst pair) Information
# of flows: 1855053 (avg. 18.77 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 2.6% 2.4% 2.3% 1.8% 1.7% 1.5% 1.5% 1.5% 1.5%
IP address Information
# of IPv4 addresses: 1450926
Top 10 bandwidth usage (bytes/total in %):
20.4% 14.2% 7.9% 5.8% 4.1% 3.7% 2.8% 2.8% 2.7% 2.7%
# of IPv6 addresses: 6119
Top 10 bandwidth usage (bytes/total in %):
39.2% 39.2% 33.4% 9.6% 8.7% 7.6% 6.9% 5.8% 4.1% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311715.pktlen.png)
detailed numbers
[ 32- 63]: 6014449
[ 64- 127]: 6726327
[ 128- 255]: 1135441
[ 256- 511]: 824231
[ 512- 1023]: 1112283
[ 1024- 2047]: 19002176
Protocol Breakdown
![[protocol breakdown chart]](201203311715.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34814907 (100.00%) 30128960232 (100.00%) 865.40
ip 34649642 ( 99.53%) 30018696398 ( 99.63%) 866.35
tcp 26944771 ( 77.39%) 26095833238 ( 86.61%) 968.49
http(s) 14225194 ( 40.86%) 19419277756 ( 64.45%) 1365.13
http(c) 5981858 ( 17.18%) 1622018382 ( 5.38%) 271.16
squid 60142 ( 0.17%) 43617273 ( 0.14%) 725.24
smtp 38573 ( 0.11%) 5034309 ( 0.02%) 130.51
nntp 13 ( 0.00%) 800 ( 0.00%) 61.54
ftp 9391 ( 0.03%) 870768 ( 0.00%) 92.72
pop3 1462 ( 0.00%) 324577 ( 0.00%) 222.01
imap 1805 ( 0.01%) 1258328 ( 0.00%) 697.13
telnet 3360 ( 0.01%) 247586 ( 0.00%) 73.69
ssh 29126 ( 0.08%) 5969275 ( 0.02%) 204.95
dns 1767 ( 0.01%) 127035 ( 0.00%) 71.89
bgp 619 ( 0.00%) 108687 ( 0.00%) 175.58
napster 44 ( 0.00%) 3660 ( 0.00%) 83.18
realaud 3 ( 0.00%) 194 ( 0.00%) 64.67
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 946 ( 0.00%) 113168 ( 0.00%) 119.63
hotline 13 ( 0.00%) 874 ( 0.00%) 67.23
other 6590454 ( 18.93%) 4996860506 ( 16.58%) 758.20
udp 3268710 ( 9.39%) 1357281822 ( 4.50%) 415.23
dns 454303 ( 1.30%) 112688012 ( 0.37%) 248.05
realaud 5 ( 0.00%) 437 ( 0.00%) 87.40
halflif 27 ( 0.00%) 3077 ( 0.00%) 113.96
starcra 63 ( 0.00%) 6049 ( 0.00%) 96.02
everque 236 ( 0.00%) 60141 ( 0.00%) 254.83
unreal 122 ( 0.00%) 63228 ( 0.00%) 518.26
quake 17 ( 0.00%) 1724 ( 0.00%) 101.41
cuseeme 2 ( 0.00%) 216 ( 0.00%) 108.00
other 2812962 ( 8.08%) 1244368132 ( 4.13%) 442.37
icmp 1836774 ( 5.28%) 148707762 ( 0.49%) 80.96
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2880 ( 0.01%) 1005552 ( 0.00%) 349.15
ip6 2497283 ( 7.17%) 2380452638 ( 7.90%) 953.22
pim 386 ( 0.00%) 23160 ( 0.00%) 60.00
other 98654 ( 0.28%) 35373066 ( 0.12%) 358.56
frag 8127 ( 0.02%) 6276618 ( 0.02%) 772.32
ip6 165265 ( 0.47%) 110263834 ( 0.37%) 667.19
tcp6 85211 ( 0.24%) 94481794 ( 0.31%) 1108.80
http(s) 3949 ( 0.01%) 4248850 ( 0.01%) 1075.93
http(c) 6075 ( 0.02%) 587704 ( 0.00%) 96.74
squid 1473 ( 0.00%) 903756 ( 0.00%) 613.55
smtp 171 ( 0.00%) 141337 ( 0.00%) 826.53
dns 156 ( 0.00%) 23995 ( 0.00%) 153.81
bgp 86 ( 0.00%) 13592 ( 0.00%) 158.05
realaud 5032 ( 0.01%) 5834885 ( 0.02%) 1159.56
other 68269 ( 0.20%) 82727675 ( 0.27%) 1211.79
udp6 50362 ( 0.14%) 11494254 ( 0.04%) 228.23
dns 45782 ( 0.13%) 10942640 ( 0.04%) 239.02
realaud 1 ( 0.00%) 98 ( 0.00%) 98.00
everque 1 ( 0.00%) 104 ( 0.00%) 104.00
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 4577 ( 0.01%) 551308 ( 0.00%) 120.45
icmp6 29173 ( 0.08%) 3875161 ( 0.01%) 132.83
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 407 ( 0.00%) 397369 ( 0.00%) 976.34
tcpdump file: 201203311715.dump.gz (780.93 MB)