Traffic Trace Info
DumpFile: 201203311730.dump
FileSize: 2554.35MB
Id: 201203311730
StartTime: Sat Mar 31 17:30:01 2012
EndTime: Sat Mar 31 17:45:00 2012
TotalTime: 899.72 seconds
TotalCapSize: 2009.36MB CapLen: 96 bytes
# of packets: 35716090 (29245.35MB)
AvgRate: 272.69Mbps stddev:53.35M
IP flow (unique src/dst pair) Information
# of flows: 1890643 (avg. 18.89 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 3.4% 3.2% 3.2% 2.8% 2.8% 2.4% 2.2% 1.8% 1.6%
IP address Information
# of IPv4 addresses: 1482132
Top 10 bandwidth usage (bytes/total in %):
25.6% 15.4% 8.5% 5.6% 4.0% 3.9% 3.7% 3.4% 3.4% 3.2%
# of IPv6 addresses: 6107
Top 10 bandwidth usage (bytes/total in %):
34.4% 32.1% 24.7% 9.5% 8.7% 8.1% 6.3% 6.1% 5.5% 5.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311730.pktlen.png)
detailed numbers
[ 32- 63]: 7017395
[ 64- 127]: 6209907
[ 128- 255]: 1177112
[ 256- 511]: 879563
[ 512- 1023]: 1113724
[ 1024- 2047]: 19318389
Protocol Breakdown
![[protocol breakdown chart]](201203311730.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35716090 (100.00%) 30665968666 (100.00%) 858.60
ip 35523134 ( 99.46%) 30552622227 ( 99.63%) 860.08
tcp 28089677 ( 78.65%) 27196798229 ( 88.69%) 968.21
http(s) 14497326 ( 40.59%) 19881359353 ( 64.83%) 1371.38
http(c) 5924978 ( 16.59%) 1637427675 ( 5.34%) 276.36
squid 66344 ( 0.19%) 47188126 ( 0.15%) 711.26
smtp 39556 ( 0.11%) 6656022 ( 0.02%) 168.27
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 9277 ( 0.03%) 812668 ( 0.00%) 87.60
pop3 1605 ( 0.00%) 351773 ( 0.00%) 219.17
imap 1202 ( 0.00%) 811303 ( 0.00%) 674.96
telnet 13707 ( 0.04%) 1008035 ( 0.00%) 73.54
ssh 50163 ( 0.14%) 7773718 ( 0.03%) 154.97
dns 1805 ( 0.01%) 132039 ( 0.00%) 73.15
bgp 626 ( 0.00%) 113976 ( 0.00%) 182.07
napster 35 ( 0.00%) 2568 ( 0.00%) 73.37
realaud 26 ( 0.00%) 2404 ( 0.00%) 92.46
icecast 872 ( 0.00%) 129065 ( 0.00%) 148.01
hotline 2 ( 0.00%) 126 ( 0.00%) 63.00
other 7482141 ( 20.95%) 5613028630 ( 18.30%) 750.19
udp 3317269 ( 9.29%) 1406301863 ( 4.59%) 423.93
dns 456595 ( 1.28%) 110813115 ( 0.36%) 242.69
rip 2 ( 0.00%) 178 ( 0.00%) 89.00
realaud 12 ( 0.00%) 1153 ( 0.00%) 96.08
halflif 26 ( 0.00%) 4108 ( 0.00%) 158.00
starcra 107 ( 0.00%) 9205 ( 0.00%) 86.03
everque 247 ( 0.00%) 68366 ( 0.00%) 276.79
unreal 528 ( 0.00%) 423636 ( 0.00%) 802.34
quake 6 ( 0.00%) 558 ( 0.00%) 93.00
cuseeme 10 ( 0.00%) 1499 ( 0.00%) 149.90
other 2858268 ( 8.00%) 1294863797 ( 4.22%) 453.02
icmp 2016223 ( 5.65%) 162185386 ( 0.53%) 80.44
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2686 ( 0.01%) 919716 ( 0.00%) 342.41
ip6 1992423 ( 5.58%) 1746252979 ( 5.69%) 876.45
pim 379 ( 0.00%) 22740 ( 0.00%) 60.00
other 104292 ( 0.29%) 40122044 ( 0.13%) 384.71
frag 4710 ( 0.01%) 3678560 ( 0.01%) 781.01
ip6 192956 ( 0.54%) 113346439 ( 0.37%) 587.42
tcp6 112111 ( 0.31%) 97520747 ( 0.32%) 869.86
http(s) 31751 ( 0.09%) 44618886 ( 0.15%) 1405.27
http(c) 27419 ( 0.08%) 2443131 ( 0.01%) 89.10
smtp 447 ( 0.00%) 153237 ( 0.00%) 342.81
ftp 146 ( 0.00%) 19542 ( 0.00%) 133.85
dns 253 ( 0.00%) 54289 ( 0.00%) 214.58
bgp 86 ( 0.00%) 14564 ( 0.00%) 169.35
other 52009 ( 0.15%) 50217098 ( 0.16%) 965.55
udp6 50123 ( 0.14%) 11375786 ( 0.04%) 226.96
dns 45215 ( 0.13%) 10808762 ( 0.04%) 239.05
halflif 2 ( 0.00%) 226 ( 0.00%) 113.00
quake 1 ( 0.00%) 99 ( 0.00%) 99.00
cuseeme 1 ( 0.00%) 96 ( 0.00%) 96.00
other 4904 ( 0.01%) 566603 ( 0.00%) 115.54
icmp6 30170 ( 0.08%) 3999681 ( 0.01%) 132.57
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 438 ( 0.00%) 434733 ( 0.00%) 992.54
tcpdump file: 201203311730.dump.gz (805.01 MB)