Traffic Trace Info
DumpFile: 201203311830.dump
FileSize: 2220.11MB
Id: 201203311830
StartTime: Sat Mar 31 18:30:00 2012
EndTime: Sat Mar 31 18:45:00 2012
TotalTime: 900.45 seconds
TotalCapSize: 1740.91MB CapLen: 96 bytes
# of packets: 31404242 (23125.77MB)
AvgRate: 215.52Mbps stddev:35.81M
IP flow (unique src/dst pair) Information
# of flows: 2025937 (avg. 15.50 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.2% 2.7% 2.1% 1.8% 1.7% 1.6% 1.6% 1.4% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 1533050
Top 10 bandwidth usage (bytes/total in %):
23.8% 11.0% 6.3% 6.3% 6.0% 5.3% 5.1% 3.9% 3.3% 2.8%
# of IPv6 addresses: 5946
Top 10 bandwidth usage (bytes/total in %):
45.9% 16.6% 13.5% 10.7% 10.5% 10.2% 8.2% 7.4% 6.8% 5.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311830.pktlen.png)
detailed numbers
[ 32- 63]: 6378350
[ 64- 127]: 7263035
[ 128- 255]: 1128932
[ 256- 511]: 641299
[ 512- 1023]: 834571
[ 1024- 2047]: 15158055
Protocol Breakdown
![[protocol breakdown chart]](201203311830.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31404242 (100.00%) 24249122221 (100.00%) 772.16
ip 31208174 ( 99.38%) 24159127822 ( 99.63%) 774.13
tcp 23516714 ( 74.88%) 20682637654 ( 85.29%) 879.49
http(s) 12345043 ( 39.31%) 16691290498 ( 68.83%) 1352.06
http(c) 6792986 ( 21.63%) 1235318358 ( 5.09%) 181.85
squid 62365 ( 0.20%) 44668101 ( 0.18%) 716.24
smtp 33935 ( 0.11%) 6450766 ( 0.03%) 190.09
ftp 8058 ( 0.03%) 711934 ( 0.00%) 88.35
pop3 1399 ( 0.00%) 298060 ( 0.00%) 213.05
imap 674 ( 0.00%) 353123 ( 0.00%) 523.92
telnet 6905 ( 0.02%) 507635 ( 0.00%) 73.52
ssh 34463 ( 0.11%) 12368141 ( 0.05%) 358.88
dns 1961 ( 0.01%) 224691 ( 0.00%) 114.58
bgp 626 ( 0.00%) 111226 ( 0.00%) 177.68
napster 29 ( 0.00%) 1920 ( 0.00%) 66.21
realaud 37 ( 0.00%) 3698 ( 0.00%) 99.95
rtsp 1013 ( 0.00%) 709366 ( 0.00%) 700.26
icecast 2241 ( 0.01%) 415444 ( 0.00%) 185.38
hotline 11 ( 0.00%) 1172 ( 0.00%) 106.55
other 4224968 ( 13.45%) 2689203521 ( 11.09%) 636.50
udp 3785871 ( 12.06%) 1920310262 ( 7.92%) 507.23
dns 422532 ( 1.35%) 99919106 ( 0.41%) 236.48
rip 7 ( 0.00%) 458 ( 0.00%) 65.43
realaud 12 ( 0.00%) 1211 ( 0.00%) 100.92
halflif 20 ( 0.00%) 2580 ( 0.00%) 129.00
starcra 19 ( 0.00%) 2873 ( 0.00%) 151.21
everque 259 ( 0.00%) 73672 ( 0.00%) 284.45
unreal 207 ( 0.00%) 76598 ( 0.00%) 370.04
quake 60 ( 0.00%) 16334 ( 0.00%) 272.23
cuseeme 2 ( 0.00%) 167 ( 0.00%) 83.50
other 3361134 ( 10.70%) 1820090941 ( 7.51%) 541.51
icmp 2102405 ( 6.69%) 210336663 ( 0.87%) 100.05
ipip 183 ( 0.00%) 19050 ( 0.00%) 104.10
ipsec 2682 ( 0.01%) 915948 ( 0.00%) 341.52
ip6 1696410 ( 5.40%) 1303686501 ( 5.38%) 768.50
pim 268 ( 0.00%) 16080 ( 0.00%) 60.00
other 103641 ( 0.33%) 41205664 ( 0.17%) 397.58
frag 3885 ( 0.01%) 3062479 ( 0.01%) 788.28
ip6 196068 ( 0.62%) 89994399 ( 0.37%) 459.00
tcp6 116613 ( 0.37%) 72528783 ( 0.30%) 621.96
http(s) 4010 ( 0.01%) 4221676 ( 0.02%) 1052.79
http(c) 39833 ( 0.13%) 3487719 ( 0.01%) 87.56
squid 319 ( 0.00%) 27276 ( 0.00%) 85.50
smtp 452 ( 0.00%) 154541 ( 0.00%) 341.90
dns 273 ( 0.00%) 58243 ( 0.00%) 213.34
bgp 93 ( 0.00%) 16942 ( 0.00%) 182.17
other 71633 ( 0.23%) 64562386 ( 0.27%) 901.29
udp6 47476 ( 0.15%) 11098536 ( 0.05%) 233.77
dns 41566 ( 0.13%) 9835112 ( 0.04%) 236.61
quake 1 ( 0.00%) 99 ( 0.00%) 99.00
other 5909 ( 0.02%) 1263325 ( 0.01%) 213.80
icmp6 28485 ( 0.09%) 3809666 ( 0.02%) 133.74
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 3380 ( 0.01%) 2541854 ( 0.01%) 752.03
tcpdump file: 201203311830.dump.gz (714.57 MB)