Traffic Trace Info
DumpFile: 201203311915.dump
FileSize: 2521.30MB
Id: 201203311915
StartTime: Sat Mar 31 19:15:00 2012
EndTime: Sat Mar 31 19:30:00 2012
TotalTime: 900.62 seconds
TotalCapSize: 2003.60MB CapLen: 96 bytes
# of packets: 33927159 (24847.51MB)
AvgRate: 231.45Mbps stddev:51.47M
IP flow (unique src/dst pair) Information
# of flows: 1990020 (avg. 17.05 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.2% 6.0% 3.9% 3.0% 2.6% 2.5% 2.4% 1.6% 1.5% 1.5%
IP address Information
# of IPv4 addresses: 1506343
Top 10 bandwidth usage (bytes/total in %):
19.7% 17.6% 15.6% 11.4% 5.3% 4.9% 4.2% 3.6% 3.4% 3.2%
# of IPv6 addresses: 5716
Top 10 bandwidth usage (bytes/total in %):
94.7% 94.2% 2.6% 2.6% 0.8% 0.5% 0.5% 0.4% 0.3% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311915.pktlen.png)
detailed numbers
[ 32- 63]: 5502776
[ 64- 127]: 9633855
[ 128- 255]: 1143059
[ 256- 511]: 687405
[ 512- 1023]: 782397
[ 1024- 2047]: 16177667
Protocol Breakdown
![[protocol breakdown chart]](201203311915.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33927159 (100.00%) 26054503288 (100.00%) 767.95
ip 32714965 ( 96.43%) 24384219017 ( 93.59%) 745.35
tcp 25115282 ( 74.03%) 21679683775 ( 83.21%) 863.21
http(s) 12564658 ( 37.03%) 17107552991 ( 65.66%) 1361.56
http(c) 7562082 ( 22.29%) 1273003494 ( 4.89%) 168.34
squid 62765 ( 0.18%) 45404613 ( 0.17%) 723.41
smtp 33451 ( 0.10%) 6798162 ( 0.03%) 203.23
nntp 13 ( 0.00%) 808 ( 0.00%) 62.15
ftp 8281 ( 0.02%) 894284 ( 0.00%) 107.99
pop3 1388 ( 0.00%) 289625 ( 0.00%) 208.66
imap 550 ( 0.00%) 59884 ( 0.00%) 108.88
telnet 49247 ( 0.15%) 7772026 ( 0.03%) 157.82
ssh 32010 ( 0.09%) 4604616 ( 0.02%) 143.85
dns 1953 ( 0.01%) 149275 ( 0.00%) 76.43
bgp 629 ( 0.00%) 107667 ( 0.00%) 171.17
napster 36 ( 0.00%) 3202 ( 0.00%) 88.94
realaud 233 ( 0.00%) 14944 ( 0.00%) 64.14
rtsp 32209 ( 0.09%) 42022523 ( 0.16%) 1304.68
icecast 804 ( 0.00%) 85393 ( 0.00%) 106.21
hotline 51 ( 0.00%) 3486 ( 0.00%) 68.35
other 4764922 ( 14.04%) 3190916782 ( 12.25%) 669.67
udp 3011669 ( 8.88%) 1141305494 ( 4.38%) 378.96
dns 399085 ( 1.18%) 89134366 ( 0.34%) 223.35
rip 2 ( 0.00%) 138 ( 0.00%) 69.00
realaud 90 ( 0.00%) 7125 ( 0.00%) 79.17
halflif 33 ( 0.00%) 4735 ( 0.00%) 143.48
starcra 26 ( 0.00%) 2998 ( 0.00%) 115.31
everque 308 ( 0.00%) 68256 ( 0.00%) 221.61
unreal 140 ( 0.00%) 68146 ( 0.00%) 486.76
quake 39 ( 0.00%) 5845 ( 0.00%) 149.87
cuseeme 15 ( 0.00%) 1458 ( 0.00%) 97.20
other 2611451 ( 7.70%) 1051903099 ( 4.04%) 402.80
icmp 2400812 ( 7.08%) 248188663 ( 0.95%) 103.38
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2765 ( 0.01%) 933966 ( 0.00%) 337.78
ip6 2089737 ( 6.16%) 1279770266 ( 4.91%) 612.41
pim 283 ( 0.00%) 16980 ( 0.00%) 60.00
other 94232 ( 0.28%) 34300603 ( 0.13%) 364.00
frag 1353 ( 0.00%) 1138928 ( 0.00%) 841.78
ip6 1212194 ( 3.57%) 1670284271 ( 6.41%) 1377.90
tcp6 1127615 ( 3.32%) 1649909601 ( 6.33%) 1463.19
http(s) 5805 ( 0.02%) 6163039 ( 0.02%) 1061.68
http(c) 24361 ( 0.07%) 2428909 ( 0.01%) 99.70
smtp 205 ( 0.00%) 181694 ( 0.00%) 886.31
ftp 50 ( 0.00%) 6668 ( 0.00%) 133.36
pop3 33 ( 0.00%) 2943 ( 0.00%) 89.18
dns 238 ( 0.00%) 24714 ( 0.00%) 103.84
bgp 92 ( 0.00%) 14324 ( 0.00%) 155.70
other 1096831 ( 3.23%) 1641087310 ( 6.30%) 1496.21
udp6 55781 ( 0.16%) 16040331 ( 0.06%) 287.56
dns 41416 ( 0.12%) 9765552 ( 0.04%) 235.79
halflif 1 ( 0.00%) 102 ( 0.00%) 102.00
unreal 1 ( 0.00%) 99 ( 0.00%) 99.00
quake 1 ( 0.00%) 101 ( 0.00%) 101.00
other 14362 ( 0.04%) 6274477 ( 0.02%) 436.88
icmp6 28088 ( 0.08%) 3746139 ( 0.01%) 133.37
ip6 86 ( 0.00%) 11698 ( 0.00%) 136.02
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 594 ( 0.00%) 572422 ( 0.00%) 963.67
tcpdump file: 201203311915.dump.gz (746.19 MB)