Traffic Trace Info
DumpFile: 201203311800.dump
FileSize: 2550.49MB
Id: 201203311800
StartTime: Sat Mar 31 18:00:00 2012
EndTime: Sat Mar 31 18:15:00 2012
TotalTime: 900.48 seconds
TotalCapSize: 2003.55MB CapLen: 96 bytes
# of packets: 35844052 (29169.16MB)
AvgRate: 271.80Mbps stddev:41.05M
IP flow (unique src/dst pair) Information
# of flows: 1802378 (avg. 19.89 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.3% 3.1% 3.1% 2.9% 2.7% 2.4% 2.2% 2.0% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 1416631
Top 10 bandwidth usage (bytes/total in %):
23.4% 19.3% 10.9% 10.5% 5.3% 4.6% 4.4% 4.1% 3.5% 3.1%
# of IPv6 addresses: 6143
Top 10 bandwidth usage (bytes/total in %):
44.6% 11.9% 11.5% 10.8% 9.8% 9.7% 8.3% 6.5% 5.1% 4.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311800.pktlen.png)
detailed numbers
[ 32- 63]: 7500766
[ 64- 127]: 6033614
[ 128- 255]: 1194144
[ 256- 511]: 605679
[ 512- 1023]: 1059717
[ 1024- 2047]: 19450132
Protocol Breakdown
![[protocol breakdown chart]](201203311800.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35844052 (100.00%) 30586083427 (100.00%) 853.31
ip 35671762 ( 99.52%) 30495137096 ( 99.70%) 854.88
tcp 28305292 ( 78.97%) 27182562279 ( 88.87%) 960.33
http(s) 13771558 ( 38.42%) 18748416575 ( 61.30%) 1361.39
http(c) 5641167 ( 15.74%) 1102074435 ( 3.60%) 195.36
squid 69370 ( 0.19%) 54213613 ( 0.18%) 781.51
smtp 42228 ( 0.12%) 8017016 ( 0.03%) 189.85
ftp 7491 ( 0.02%) 676953 ( 0.00%) 90.37
pop3 1520 ( 0.00%) 347835 ( 0.00%) 228.84
imap 573 ( 0.00%) 121404 ( 0.00%) 211.87
telnet 4266 ( 0.01%) 307306 ( 0.00%) 72.04
ssh 81204 ( 0.23%) 12104545 ( 0.04%) 149.06
dns 1991 ( 0.01%) 147012 ( 0.00%) 73.84
bgp 601 ( 0.00%) 100643 ( 0.00%) 167.46
napster 27 ( 0.00%) 1726 ( 0.00%) 63.93
realaud 68 ( 0.00%) 7741 ( 0.00%) 113.84
rtsp 3 ( 0.00%) 180 ( 0.00%) 60.00
icecast 1706 ( 0.00%) 351254 ( 0.00%) 205.89
hotline 22 ( 0.00%) 3720 ( 0.00%) 169.09
other 8681497 ( 24.22%) 7255670321 ( 23.72%) 835.76
udp 3313238 ( 9.24%) 1448584237 ( 4.74%) 437.21
dns 424031 ( 1.18%) 104893400 ( 0.34%) 247.37
rip 1 ( 0.00%) 70 ( 0.00%) 70.00
realaud 14 ( 0.00%) 1284 ( 0.00%) 91.71
halflif 30 ( 0.00%) 3251 ( 0.00%) 108.37
starcra 466 ( 0.00%) 68646 ( 0.00%) 147.31
everque 269 ( 0.00%) 65140 ( 0.00%) 242.16
unreal 73 ( 0.00%) 33440 ( 0.00%) 458.08
quake 17 ( 0.00%) 1875 ( 0.00%) 110.29
cuseeme 3 ( 0.00%) 243 ( 0.00%) 81.00
other 2885145 ( 8.05%) 1343285992 ( 4.39%) 465.59
icmp 2048483 ( 5.71%) 168306724 ( 0.55%) 82.16
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2704 ( 0.01%) 921712 ( 0.00%) 340.87
ip6 1890313 ( 5.27%) 1651526907 ( 5.40%) 873.68
pim 324 ( 0.00%) 19440 ( 0.00%) 60.00
other 111223 ( 0.31%) 43196527 ( 0.14%) 388.38
frag 7519 ( 0.02%) 5840539 ( 0.02%) 776.77
ip6 172290 ( 0.48%) 90946331 ( 0.30%) 527.87
tcp6 90521 ( 0.25%) 75086559 ( 0.25%) 829.49
http(s) 8315 ( 0.02%) 9253278 ( 0.03%) 1112.84
http(c) 15070 ( 0.04%) 1262184 ( 0.00%) 83.75
squid 11 ( 0.00%) 890 ( 0.00%) 80.91
smtp 439 ( 0.00%) 143214 ( 0.00%) 326.23
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 233 ( 0.00%) 33978 ( 0.00%) 145.83
bgp 92 ( 0.00%) 13529 ( 0.00%) 147.05
icecast 1 ( 0.00%) 94 ( 0.00%) 94.00
hotline 3 ( 0.00%) 246 ( 0.00%) 82.00
other 66340 ( 0.19%) 64377541 ( 0.21%) 970.42
udp6 51675 ( 0.14%) 11546860 ( 0.04%) 223.45
dns 44997 ( 0.13%) 10813954 ( 0.04%) 240.33
realaud 1 ( 0.00%) 104 ( 0.00%) 104.00
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
everque 1 ( 0.00%) 111 ( 0.00%) 111.00
quake 1 ( 0.00%) 102 ( 0.00%) 102.00
other 6674 ( 0.02%) 732484 ( 0.00%) 109.75
icmp6 29485 ( 0.08%) 3842772 ( 0.01%) 130.33
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 495 ( 0.00%) 454648 ( 0.00%) 918.48
tcpdump file: 201203311800.dump.gz (793.05 MB)