Traffic Trace Info
DumpFile: 201203311900.dump
FileSize: 2326.56MB
Id: 201203311900
StartTime: Sat Mar 31 19:00:00 2012
EndTime: Sat Mar 31 19:15:00 2012
TotalTime: 899.89 seconds
TotalCapSize: 1835.98MB CapLen: 96 bytes
# of packets: 32150242 (22553.40MB)
AvgRate: 210.23Mbps stddev:48.96M
IP flow (unique src/dst pair) Information
# of flows: 2112398 (avg. 15.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 3.6% 2.9% 2.7% 2.2% 1.8% 1.8% 1.7% 1.5% 1.5%
IP address Information
# of IPv4 addresses: 1534689
Top 10 bandwidth usage (bytes/total in %):
27.9% 15.4% 7.9% 5.1% 5.0% 4.0% 3.1% 3.0% 3.0% 2.9%
# of IPv6 addresses: 5948
Top 10 bandwidth usage (bytes/total in %):
92.5% 90.5% 2.7% 1.3% 1.0% 0.9% 0.8% 0.6% 0.6% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311900.pktlen.png)
detailed numbers
[ 32- 63]: 6550988
[ 64- 127]: 8421534
[ 128- 255]: 1125341
[ 256- 511]: 640512
[ 512- 1023]: 780357
[ 1024- 2047]: 14631510
Protocol Breakdown
![[protocol breakdown chart]](201203311900.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32150242 (100.00%) 23648949375 (100.00%) 735.58
ip 31368957 ( 97.57%) 22714270805 ( 96.05%) 724.10
tcp 24185233 ( 75.23%) 20175029568 ( 85.31%) 834.19
http(s) 11839744 ( 36.83%) 16027039334 ( 67.77%) 1353.66
http(c) 8013409 ( 24.92%) 1499571127 ( 6.34%) 187.13
squid 84941 ( 0.26%) 59021845 ( 0.25%) 694.86
smtp 32765 ( 0.10%) 7294575 ( 0.03%) 222.63
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 9111 ( 0.03%) 898793 ( 0.00%) 98.65
pop3 10168 ( 0.03%) 7885041 ( 0.03%) 775.48
imap 905 ( 0.00%) 380997 ( 0.00%) 420.99
telnet 77541 ( 0.24%) 5709303 ( 0.02%) 73.63
ssh 111310 ( 0.35%) 18538886 ( 0.08%) 166.55
dns 2302 ( 0.01%) 176726 ( 0.00%) 76.77
bgp 647 ( 0.00%) 118570 ( 0.00%) 183.26
napster 364 ( 0.00%) 25985 ( 0.00%) 71.39
realaud 854 ( 0.00%) 54622 ( 0.00%) 63.96
rtsp 31540 ( 0.10%) 40815639 ( 0.17%) 1294.09
icecast 952 ( 0.00%) 156470 ( 0.00%) 164.36
hotline 25 ( 0.00%) 2721 ( 0.00%) 108.84
other 3968649 ( 12.34%) 2507338560 ( 10.60%) 631.79
udp 3030602 ( 9.43%) 1044284071 ( 4.42%) 344.58
dns 439709 ( 1.37%) 100150674 ( 0.42%) 227.77
rip 1 ( 0.00%) 72 ( 0.00%) 72.00
realaud 114 ( 0.00%) 9444 ( 0.00%) 82.84
halflif 21 ( 0.00%) 3195 ( 0.00%) 152.14
starcra 14 ( 0.00%) 2687 ( 0.00%) 191.93
everque 233 ( 0.00%) 56370 ( 0.00%) 241.93
unreal 202 ( 0.00%) 60437 ( 0.00%) 299.19
quake 23 ( 0.00%) 2401 ( 0.00%) 104.39
other 2590167 ( 8.06%) 943957230 ( 3.99%) 364.44
icmp 2123738 ( 6.61%) 230156335 ( 0.97%) 108.37
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2699 ( 0.01%) 915282 ( 0.00%) 339.12
ip6 1926270 ( 5.99%) 1225599651 ( 5.18%) 636.26
pim 323 ( 0.00%) 19380 ( 0.00%) 60.00
other 99907 ( 0.31%) 38247248 ( 0.16%) 382.83
frag 591 ( 0.00%) 542837 ( 0.00%) 918.51
ip6 781285 ( 2.43%) 934678570 ( 3.95%) 1196.33
tcp6 697987 ( 2.17%) 916755724 ( 3.88%) 1313.43
http(s) 6401 ( 0.02%) 7270011 ( 0.03%) 1135.76
http(c) 62764 ( 0.20%) 5833485 ( 0.02%) 92.94
squid 115 ( 0.00%) 10980 ( 0.00%) 95.48
smtp 816 ( 0.00%) 296114 ( 0.00%) 362.88
ftp 71 ( 0.00%) 8850 ( 0.00%) 124.65
pop3 20 ( 0.00%) 6639 ( 0.00%) 331.95
dns 517 ( 0.00%) 80388 ( 0.00%) 155.49
bgp 89 ( 0.00%) 15522 ( 0.00%) 174.40
other 627194 ( 1.95%) 903233735 ( 3.82%) 1440.12
udp6 50961 ( 0.16%) 11921391 ( 0.05%) 233.93
dns 43366 ( 0.13%) 10340554 ( 0.04%) 238.45
halflif 1 ( 0.00%) 115 ( 0.00%) 115.00
quake 2 ( 0.00%) 219 ( 0.00%) 109.50
cuseeme 1 ( 0.00%) 112 ( 0.00%) 112.00
other 7591 ( 0.02%) 1580391 ( 0.01%) 208.19
icmp6 29385 ( 0.09%) 3868007 ( 0.02%) 131.63
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2835 ( 0.01%) 2117584 ( 0.01%) 746.94
tcpdump file: 201203311900.dump.gz (731.36 MB)