Traffic Trace Info
DumpFile: 201203311745.dump
FileSize: 2312.12MB
Id: 201203311745
StartTime: Sat Mar 31 17:45:00 2012
EndTime: Sat Mar 31 18:00:00 2012
TotalTime: 899.65 seconds
TotalCapSize: 1818.99MB CapLen: 96 bytes
# of packets: 32316952 (25635.91MB)
AvgRate: 239.03Mbps stddev:55.94M
IP flow (unique src/dst pair) Information
# of flows: 1951282 (avg. 16.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 3.9% 3.1% 2.4% 2.4% 2.2% 1.8% 1.7% 1.7% 1.5%
IP address Information
# of IPv4 addresses: 1499342
Top 10 bandwidth usage (bytes/total in %):
23.7% 15.9% 6.5% 4.7% 4.3% 4.1% 4.0% 3.6% 3.4% 3.2%
# of IPv6 addresses: 5931
Top 10 bandwidth usage (bytes/total in %):
49.6% 42.1% 19.4% 13.2% 5.5% 5.2% 4.2% 4.0% 3.6% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311745.pktlen.png)
detailed numbers
[ 32- 63]: 6712575
[ 64- 127]: 6054535
[ 128- 255]: 1091051
[ 256- 511]: 604418
[ 512- 1023]: 896034
[ 1024- 2047]: 16958339
Protocol Breakdown
![[protocol breakdown chart]](201203311745.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32316952 (100.00%) 26881194956 (100.00%) 831.80
ip 32079269 ( 99.26%) 26694508254 ( 99.31%) 832.14
tcp 24370876 ( 75.41%) 23175235494 ( 86.21%) 950.94
http(s) 13415791 ( 41.51%) 18121775330 ( 67.41%) 1350.78
http(c) 5379243 ( 16.65%) 1209738996 ( 4.50%) 224.89
squid 61827 ( 0.19%) 45103324 ( 0.17%) 729.51
smtp 37525 ( 0.12%) 5963675 ( 0.02%) 158.93
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 10051 ( 0.03%) 936113 ( 0.00%) 93.14
pop3 1528 ( 0.00%) 326447 ( 0.00%) 213.64
imap 7739 ( 0.02%) 535982 ( 0.00%) 69.26
telnet 3097 ( 0.01%) 219515 ( 0.00%) 70.88
ssh 32847 ( 0.10%) 5811055 ( 0.02%) 176.91
dns 2080 ( 0.01%) 188325 ( 0.00%) 90.54
bgp 632 ( 0.00%) 113615 ( 0.00%) 179.77
napster 32 ( 0.00%) 2493 ( 0.00%) 77.91
realaud 5 ( 0.00%) 316 ( 0.00%) 63.20
icecast 814 ( 0.00%) 81634 ( 0.00%) 100.29
hotline 21 ( 0.00%) 1696 ( 0.00%) 80.76
other 5417638 ( 16.76%) 3784436604 ( 14.08%) 698.54
udp 3408119 ( 10.55%) 1551119228 ( 5.77%) 455.12
dns 420933 ( 1.30%) 104632529 ( 0.39%) 248.57
rip 1 ( 0.00%) 68 ( 0.00%) 68.00
realaud 2 ( 0.00%) 459 ( 0.00%) 229.50
halflif 54 ( 0.00%) 7459 ( 0.00%) 138.13
starcra 282 ( 0.00%) 35305 ( 0.00%) 125.20
everque 238 ( 0.00%) 53941 ( 0.00%) 226.64
unreal 14 ( 0.00%) 1845 ( 0.00%) 131.79
quake 23 ( 0.00%) 2887 ( 0.00%) 125.52
cuseeme 4 ( 0.00%) 452 ( 0.00%) 113.00
other 2956251 ( 9.15%) 1444501318 ( 5.37%) 488.63
icmp 2063116 ( 6.38%) 166781986 ( 0.62%) 80.84
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2635 ( 0.01%) 898434 ( 0.00%) 340.96
ip6 2131002 ( 6.59%) 1762816617 ( 6.56%) 827.22
pim 447 ( 0.00%) 26820 ( 0.00%) 60.00
other 102889 ( 0.32%) 37610405 ( 0.14%) 365.54
frag 67107 ( 0.21%) 51383826 ( 0.19%) 765.70
ip6 237683 ( 0.74%) 186686702 ( 0.69%) 785.44
tcp6 156656 ( 0.48%) 171310995 ( 0.64%) 1093.55
http(s) 17171 ( 0.05%) 22638369 ( 0.08%) 1318.41
http(c) 12615 ( 0.04%) 1187571 ( 0.00%) 94.14
squid 9 ( 0.00%) 702 ( 0.00%) 78.00
smtp 180 ( 0.00%) 85812 ( 0.00%) 476.73
dns 158 ( 0.00%) 25997 ( 0.00%) 164.54
bgp 93 ( 0.00%) 17431 ( 0.00%) 187.43
other 126430 ( 0.39%) 147355113 ( 0.55%) 1165.51
udp6 50932 ( 0.16%) 10919457 ( 0.04%) 214.39
dns 42883 ( 0.13%) 10067143 ( 0.04%) 234.76
starcra 1 ( 0.00%) 107 ( 0.00%) 107.00
unreal 1 ( 0.00%) 109 ( 0.00%) 109.00
other 8047 ( 0.02%) 852098 ( 0.00%) 105.89
icmp6 29472 ( 0.09%) 3948285 ( 0.01%) 133.97
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 509 ( 0.00%) 492405 ( 0.00%) 967.40
tcpdump file: 201203311745.dump.gz (727.72 MB)