Traffic Trace Info
DumpFile: 201203311845.dump
FileSize: 2090.42MB
Id: 201203311845
StartTime: Sat Mar 31 18:45:00 2012
EndTime: Sat Mar 31 19:00:00 2012
TotalTime: 899.51 seconds
TotalCapSize: 1639.89MB CapLen: 96 bytes
# of packets: 29525486 (20632.17MB)
AvgRate: 192.41Mbps stddev:45.56M
IP flow (unique src/dst pair) Information
# of flows: 2070530 (avg. 14.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.6% 2.5% 2.0% 1.4% 1.2% 1.2% 1.1% 1.0% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 1568156
Top 10 bandwidth usage (bytes/total in %):
32.8% 9.2% 5.7% 4.1% 3.7% 3.6% 3.2% 2.6% 2.5% 2.4%
# of IPv6 addresses: 5859
Top 10 bandwidth usage (bytes/total in %):
38.0% 23.6% 9.6% 9.4% 8.5% 7.3% 7.3% 7.2% 6.7% 6.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311845.pktlen.png)
detailed numbers
[ 32- 63]: 6403402
[ 64- 127]: 7152368
[ 128- 255]: 1160566
[ 256- 511]: 648806
[ 512- 1023]: 755675
[ 1024- 2047]: 13404669
Protocol Breakdown
![[protocol breakdown chart]](201203311845.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29525486 (100.00%) 21634401634 (100.00%) 732.74
ip 29296586 ( 99.22%) 21532065934 ( 99.53%) 734.97
tcp 21822025 ( 73.91%) 18371506430 ( 84.92%) 841.88
http(s) 10794129 ( 36.56%) 14314344092 ( 66.16%) 1326.12
http(c) 7006516 ( 23.73%) 1696075775 ( 7.84%) 242.07
squid 76096 ( 0.26%) 55235134 ( 0.26%) 725.86
smtp 32979 ( 0.11%) 7486740 ( 0.03%) 227.02
nntp 18 ( 0.00%) 1122 ( 0.00%) 62.33
ftp 7510 ( 0.03%) 684008 ( 0.00%) 91.08
pop3 1499 ( 0.01%) 335129 ( 0.00%) 223.57
imap 448 ( 0.00%) 60366 ( 0.00%) 134.75
telnet 64865 ( 0.22%) 4792957 ( 0.02%) 73.89
ssh 53310 ( 0.18%) 15583229 ( 0.07%) 292.31
dns 1688 ( 0.01%) 122239 ( 0.00%) 72.42
bgp 612 ( 0.00%) 106236 ( 0.00%) 173.59
napster 15 ( 0.00%) 1062 ( 0.00%) 70.80
realaud 13 ( 0.00%) 1755 ( 0.00%) 135.00
rtsp 4398 ( 0.01%) 1708130 ( 0.01%) 388.39
icecast 854 ( 0.00%) 87644 ( 0.00%) 102.63
hotline 54 ( 0.00%) 4020 ( 0.00%) 74.44
other 3777021 ( 12.79%) 2274876792 ( 10.52%) 602.29
udp 3464256 ( 11.73%) 1613855933 ( 7.46%) 465.86
dns 385053 ( 1.30%) 90958917 ( 0.42%) 236.22
realaud 9 ( 0.00%) 805 ( 0.00%) 89.44
halflif 23 ( 0.00%) 2831 ( 0.00%) 123.09
starcra 16 ( 0.00%) 2035 ( 0.00%) 127.19
everque 235 ( 0.00%) 56208 ( 0.00%) 239.18
unreal 297 ( 0.00%) 99700 ( 0.00%) 335.69
quake 30 ( 0.00%) 3218 ( 0.00%) 107.27
cuseeme 8 ( 0.00%) 1081 ( 0.00%) 135.12
other 3078403 ( 10.43%) 1522693355 ( 7.04%) 494.64
icmp 2159243 ( 7.31%) 232655215 ( 1.08%) 107.75
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2888 ( 0.01%) 1017760 ( 0.00%) 352.41
ip6 1750105 ( 5.93%) 1276267857 ( 5.90%) 729.25
pim 329 ( 0.00%) 19740 ( 0.00%) 60.00
other 97555 ( 0.33%) 36723729 ( 0.17%) 376.44
frag 895 ( 0.00%) 761554 ( 0.00%) 850.90
ip6 228900 ( 0.78%) 102335700 ( 0.47%) 447.08
tcp6 147790 ( 0.50%) 83085776 ( 0.38%) 562.19
http(s) 10016 ( 0.03%) 12663848 ( 0.06%) 1264.36
http(c) 50689 ( 0.17%) 4454256 ( 0.02%) 87.87
squid 236 ( 0.00%) 21402 ( 0.00%) 90.69
smtp 152 ( 0.00%) 114867 ( 0.00%) 755.70
ftp 17 ( 0.00%) 1532 ( 0.00%) 90.12
dns 195 ( 0.00%) 28386 ( 0.00%) 145.57
bgp 90 ( 0.00%) 14724 ( 0.00%) 163.60
other 86395 ( 0.29%) 65786761 ( 0.30%) 761.46
udp6 50978 ( 0.17%) 14173999 ( 0.07%) 278.04
dns 41169 ( 0.14%) 9741332 ( 0.05%) 236.62
halflif 1 ( 0.00%) 108 ( 0.00%) 108.00
everque 1 ( 0.00%) 102 ( 0.00%) 102.00
cuseeme 1 ( 0.00%) 109 ( 0.00%) 109.00
other 9806 ( 0.03%) 4432348 ( 0.02%) 452.00
icmp6 28422 ( 0.10%) 3794181 ( 0.02%) 133.49
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1596 ( 0.01%) 1266252 ( 0.01%) 793.39
tcpdump file: 201203311845.dump.gz (679.01 MB)