Traffic Trace Info
DumpFile: 201203311930.dump
FileSize: 2184.57MB
Id: 201203311930
StartTime: Sat Mar 31 19:30:00 2012
EndTime: Sat Mar 31 19:45:00 2012
TotalTime: 899.43 seconds
TotalCapSize: 1718.34MB CapLen: 96 bytes
# of packets: 30554583 (23174.21MB)
AvgRate: 216.13Mbps stddev:46.61M
IP flow (unique src/dst pair) Information
# of flows: 1883969 (avg. 16.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 3.6% 2.8% 2.5% 2.1% 2.1% 2.1% 2.0% 2.0% 1.9%
IP address Information
# of IPv4 addresses: 1469952
Top 10 bandwidth usage (bytes/total in %):
28.2% 16.4% 5.6% 4.4% 4.0% 3.9% 3.7% 3.5% 3.1% 3.1%
# of IPv6 addresses: 5811
Top 10 bandwidth usage (bytes/total in %):
89.3% 87.1% 2.6% 2.3% 1.7% 1.3% 1.2% 1.1% 0.9% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311930.pktlen.png)
detailed numbers
[ 32- 63]: 5874468
[ 64- 127]: 6811723
[ 128- 255]: 1157998
[ 256- 511]: 708445
[ 512- 1023]: 809901
[ 1024- 2047]: 15192048
Protocol Breakdown
![[protocol breakdown chart]](201203311930.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30554583 (100.00%) 24299924340 (100.00%) 795.30
ip 30052812 ( 98.36%) 23710695226 ( 97.58%) 788.97
tcp 22002645 ( 72.01%) 20319863613 ( 83.62%) 923.52
http(s) 12081510 ( 39.54%) 16407746699 ( 67.52%) 1358.09
http(c) 5943251 ( 19.45%) 1236783533 ( 5.09%) 208.10
squid 68844 ( 0.23%) 49505168 ( 0.20%) 719.09
smtp 41225 ( 0.13%) 10237887 ( 0.04%) 248.34
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 9014 ( 0.03%) 881000 ( 0.00%) 97.74
pop3 23666 ( 0.08%) 2655409 ( 0.01%) 112.20
imap 543 ( 0.00%) 58073 ( 0.00%) 106.95
telnet 3539 ( 0.01%) 256516 ( 0.00%) 72.48
ssh 23522 ( 0.08%) 3347448 ( 0.01%) 142.31
dns 1975 ( 0.01%) 163141 ( 0.00%) 82.60
bgp 630 ( 0.00%) 104984 ( 0.00%) 166.64
napster 190 ( 0.00%) 13256 ( 0.00%) 69.77
realaud 169 ( 0.00%) 10538 ( 0.00%) 62.36
rtsp 32168 ( 0.11%) 41973927 ( 0.17%) 1304.83
icecast 809 ( 0.00%) 148303 ( 0.00%) 183.32
hotline 54 ( 0.00%) 4171 ( 0.00%) 77.24
other 3771519 ( 12.34%) 2565972512 ( 10.56%) 680.36
udp 3792531 ( 12.41%) 1745197244 ( 7.18%) 460.17
dns 428827 ( 1.40%) 127300179 ( 0.52%) 296.86
rip 6 ( 0.00%) 389 ( 0.00%) 64.83
realaud 107 ( 0.00%) 8259 ( 0.00%) 77.19
halflif 16 ( 0.00%) 2014 ( 0.00%) 125.88
starcra 29 ( 0.00%) 4136 ( 0.00%) 142.62
everque 351 ( 0.00%) 87079 ( 0.00%) 248.09
unreal 144 ( 0.00%) 46517 ( 0.00%) 323.03
quake 16 ( 0.00%) 2033 ( 0.00%) 127.06
cuseeme 7 ( 0.00%) 557 ( 0.00%) 79.57
other 3337875 ( 10.92%) 1615637010 ( 6.65%) 484.03
icmp 2220500 ( 7.27%) 236679298 ( 0.97%) 106.59
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2975 ( 0.01%) 1047226 ( 0.00%) 352.01
ip6 1940684 ( 6.35%) 1372087778 ( 5.65%) 707.01
pim 318 ( 0.00%) 19080 ( 0.00%) 60.00
other 92975 ( 0.30%) 35781827 ( 0.15%) 384.85
frag 135399 ( 0.44%) 119640307 ( 0.49%) 883.61
ip6 501771 ( 1.64%) 589229114 ( 2.42%) 1174.30
tcp6 411672 ( 1.35%) 559907294 ( 2.30%) 1360.08
http(s) 12442 ( 0.04%) 16327652 ( 0.07%) 1312.30
http(c) 23423 ( 0.08%) 2220181 ( 0.01%) 94.79
smtp 63 ( 0.00%) 42739 ( 0.00%) 678.40
ftp 24 ( 0.00%) 1890 ( 0.00%) 78.75
pop3 35 ( 0.00%) 3091 ( 0.00%) 88.31
dns 395 ( 0.00%) 105095 ( 0.00%) 266.06
bgp 91 ( 0.00%) 17526 ( 0.00%) 192.59
other 375199 ( 1.23%) 541189120 ( 2.23%) 1442.41
udp6 55267 ( 0.18%) 18417814 ( 0.08%) 333.25
dns 40662 ( 0.13%) 9582810 ( 0.04%) 235.67
realaud 1 ( 0.00%) 93 ( 0.00%) 93.00
everque 2 ( 0.00%) 210 ( 0.00%) 105.00
quake 1 ( 0.00%) 98 ( 0.00%) 98.00
other 14601 ( 0.05%) 8834603 ( 0.04%) 605.07
icmp6 28125 ( 0.09%) 3715562 ( 0.02%) 132.11
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 6594 ( 0.02%) 7173070 ( 0.03%) 1087.82
tcpdump file: 201203311930.dump.gz (687.74 MB)