Traffic Trace Info
DumpFile: 201203311815.dump
FileSize: 2091.87MB
Id: 201203311815
StartTime: Sat Mar 31 18:15:00 2012
EndTime: Sat Mar 31 18:30:00 2012
TotalTime: 899.65 seconds
TotalCapSize: 1647.61MB CapLen: 96 bytes
# of packets: 29114328 (21598.91MB)
AvgRate: 201.41Mbps stddev:46.30M
IP flow (unique src/dst pair) Information
# of flows: 1939346 (avg. 15.01 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.9% 2.8% 2.2% 2.0% 2.0% 1.7% 1.7% 1.6% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 1471450
Top 10 bandwidth usage (bytes/total in %):
20.2% 12.3% 6.0% 5.7% 5.5% 5.3% 4.6% 4.1% 3.3% 3.1%
# of IPv6 addresses: 6018
Top 10 bandwidth usage (bytes/total in %):
72.6% 72.6% 11.5% 5.1% 5.1% 2.9% 2.6% 2.5% 2.3% 2.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311815.pktlen.png)
detailed numbers
[ 32- 63]: 5903495
[ 64- 127]: 6392700
[ 128- 255]: 1132931
[ 256- 511]: 650188
[ 512- 1023]: 1005179
[ 1024- 2047]: 14029835
Protocol Breakdown
![[protocol breakdown chart]](201203311815.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29114328 (100.00%) 22648095670 (100.00%) 777.90
ip 28690937 ( 98.55%) 22237749261 ( 98.19%) 775.08
tcp 21748876 ( 74.70%) 19372465963 ( 85.54%) 890.73
http(s) 10815973 ( 37.15%) 14286054226 ( 63.08%) 1320.83
http(c) 5542557 ( 19.04%) 1140897897 ( 5.04%) 205.84
squid 58078 ( 0.20%) 43230498 ( 0.19%) 744.35
smtp 36336 ( 0.12%) 5989475 ( 0.03%) 164.84
ftp 10072 ( 0.03%) 951971 ( 0.00%) 94.52
pop3 2796 ( 0.01%) 1162769 ( 0.01%) 415.87
imap 821 ( 0.00%) 393567 ( 0.00%) 479.38
telnet 7598 ( 0.03%) 553984 ( 0.00%) 72.91
ssh 26792 ( 0.09%) 19234668 ( 0.08%) 717.93
dns 1705 ( 0.01%) 121403 ( 0.00%) 71.20
bgp 617 ( 0.00%) 106805 ( 0.00%) 173.10
napster 115 ( 0.00%) 46795 ( 0.00%) 406.91
realaud 24 ( 0.00%) 1780 ( 0.00%) 74.17
icecast 3983 ( 0.01%) 654781 ( 0.00%) 164.39
hotline 11 ( 0.00%) 1277 ( 0.00%) 116.09
other 5241398 ( 18.00%) 3873064067 ( 17.10%) 738.94
udp 3145631 ( 10.80%) 1321892444 ( 5.84%) 420.23
dns 440441 ( 1.51%) 106695668 ( 0.47%) 242.25
rip 2 ( 0.00%) 141 ( 0.00%) 70.50
realaud 22 ( 0.00%) 1827 ( 0.00%) 83.05
halflif 22 ( 0.00%) 1943 ( 0.00%) 88.32
starcra 97 ( 0.00%) 19084 ( 0.00%) 196.74
everque 267 ( 0.00%) 55965 ( 0.00%) 209.61
unreal 68 ( 0.00%) 21211 ( 0.00%) 311.93
quake 16 ( 0.00%) 1930 ( 0.00%) 120.62
cuseeme 6 ( 0.00%) 526 ( 0.00%) 87.67
other 2704432 ( 9.29%) 1215060472 ( 5.36%) 449.28
icmp 2051494 ( 7.05%) 168772519 ( 0.75%) 82.27
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2645 ( 0.01%) 901694 ( 0.00%) 340.91
ip6 1638931 ( 5.63%) 1335373253 ( 5.90%) 814.78
pim 315 ( 0.00%) 18900 ( 0.00%) 60.00
other 102860 ( 0.35%) 38305218 ( 0.17%) 372.40
frag 860 ( 0.00%) 724943 ( 0.00%) 842.96
ip6 423391 ( 1.45%) 410346409 ( 1.81%) 969.19
tcp6 312697 ( 1.07%) 373825177 ( 1.65%) 1195.49
http(s) 5179 ( 0.02%) 5792605 ( 0.03%) 1118.48
http(c) 35506 ( 0.12%) 3009771 ( 0.01%) 84.77
squid 160 ( 0.00%) 14779 ( 0.00%) 92.37
smtp 154 ( 0.00%) 107590 ( 0.00%) 698.64
ftp 19 ( 0.00%) 2168 ( 0.00%) 114.11
dns 88 ( 0.00%) 16946 ( 0.00%) 192.57
bgp 92 ( 0.00%) 14283 ( 0.00%) 155.25
other 271499 ( 0.93%) 364867035 ( 1.61%) 1343.90
udp6 51718 ( 0.18%) 11240413 ( 0.05%) 217.34
dns 44085 ( 0.15%) 10394069 ( 0.05%) 235.77
realaud 1 ( 0.00%) 104 ( 0.00%) 104.00
quake 2 ( 0.00%) 209 ( 0.00%) 104.50
cuseeme 1 ( 0.00%) 101 ( 0.00%) 101.00
other 7629 ( 0.03%) 845930 ( 0.00%) 110.88
icmp6 28542 ( 0.10%) 3791907 ( 0.02%) 132.85
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 30322 ( 0.10%) 21473656 ( 0.09%) 708.19
tcpdump file: 201203311815.dump.gz (670.81 MB)