Traffic Trace Info
DumpFile: 201203311945.dump
FileSize: 2318.29MB
Id: 201203311945
StartTime: Sat Mar 31 19:45:00 2012
EndTime: Sat Mar 31 20:00:01 2012
TotalTime: 900.71 seconds
TotalCapSize: 1802.34MB CapLen: 96 bytes
# of packets: 33813263 (23674.72MB)
AvgRate: 220.48Mbps stddev:42.95M
IP flow (unique src/dst pair) Information
# of flows: 2258977 (avg. 14.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 4.5% 4.4% 3.2% 2.9% 2.5% 2.3% 2.0% 1.9% 1.8%
IP address Information
# of IPv4 addresses: 1576786
Top 10 bandwidth usage (bytes/total in %):
16.2% 15.6% 10.8% 6.8% 6.6% 5.8% 4.7% 4.5% 4.5% 3.8%
# of IPv6 addresses: 5859
Top 10 bandwidth usage (bytes/total in %):
67.9% 63.9% 10.6% 7.7% 4.4% 4.2% 3.4% 3.1% 2.3% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311945.pktlen.png)
detailed numbers
[ 32- 63]: 8383530
[ 64- 127]: 7200730
[ 128- 255]: 1240344
[ 256- 511]: 669717
[ 512- 1023]: 729207
[ 1024- 2047]: 15589735
Protocol Breakdown
![[protocol breakdown chart]](201203311945.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33813263 (100.00%) 24824742436 (100.00%) 734.17
ip 33460837 ( 98.96%) 24522896719 ( 98.78%) 732.88
tcp 20433758 ( 60.43%) 17452107190 ( 70.30%) 854.08
http(s) 10186804 ( 30.13%) 13604349289 ( 54.80%) 1335.49
http(c) 5468923 ( 16.17%) 1133517386 ( 4.57%) 207.27
squid 56370 ( 0.17%) 42609846 ( 0.17%) 755.90
smtp 39103 ( 0.12%) 5645683 ( 0.02%) 144.38
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 34592 ( 0.10%) 2695428 ( 0.01%) 77.92
pop3 126441 ( 0.37%) 8765838 ( 0.04%) 69.33
imap 364 ( 0.00%) 44038 ( 0.00%) 120.98
telnet 3609 ( 0.01%) 266176 ( 0.00%) 73.75
ssh 81505 ( 0.24%) 8209632 ( 0.03%) 100.73
dns 1724 ( 0.01%) 124498 ( 0.00%) 72.21
bgp 627 ( 0.00%) 105063 ( 0.00%) 167.56
napster 32 ( 0.00%) 3595 ( 0.00%) 112.34
realaud 162 ( 0.00%) 13384 ( 0.00%) 82.62
rtsp 31618 ( 0.09%) 41112067 ( 0.17%) 1300.27
icecast 567 ( 0.00%) 71885 ( 0.00%) 126.78
hotline 22 ( 0.00%) 2179 ( 0.00%) 99.05
other 4401283 ( 13.02%) 2604570455 ( 10.49%) 591.78
udp 8696554 ( 25.72%) 5308086879 ( 21.38%) 610.37
dns 356308 ( 1.05%) 79457462 ( 0.32%) 223.00
realaud 60 ( 0.00%) 4597 ( 0.00%) 76.62
halflif 23 ( 0.00%) 2675 ( 0.00%) 116.30
starcra 83 ( 0.00%) 33746 ( 0.00%) 406.58
everque 313 ( 0.00%) 54628 ( 0.00%) 174.53
unreal 133 ( 0.00%) 43694 ( 0.00%) 328.53
quake 10 ( 0.00%) 1299 ( 0.00%) 129.90
cuseeme 2 ( 0.00%) 208 ( 0.00%) 104.00
other 7994125 ( 23.64%) 5206643435 ( 20.97%) 651.31
icmp 2177379 ( 6.44%) 240303074 ( 0.97%) 110.36
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2781 ( 0.01%) 962318 ( 0.00%) 346.03
ip6 2061716 ( 6.10%) 1490711564 ( 6.00%) 723.04
pim 326 ( 0.00%) 19560 ( 0.00%) 60.00
other 88138 ( 0.26%) 30686864 ( 0.12%) 348.17
frag 4381469 ( 12.96%) 3335497670 ( 13.44%) 761.27
ip6 352426 ( 1.04%) 301845717 ( 1.22%) 856.48
tcp6 246439 ( 0.73%) 266699571 ( 1.07%) 1082.21
http(s) 6380 ( 0.02%) 7205912 ( 0.03%) 1129.45
http(c) 44563 ( 0.13%) 4076694 ( 0.02%) 91.48
smtp 347 ( 0.00%) 112125 ( 0.00%) 323.13
pop3 36 ( 0.00%) 3204 ( 0.00%) 89.00
dns 298 ( 0.00%) 37066 ( 0.00%) 124.38
bgp 86 ( 0.00%) 13693 ( 0.00%) 159.22
other 194729 ( 0.58%) 255250877 ( 1.03%) 1310.80
udp6 62052 ( 0.18%) 20189591 ( 0.08%) 325.37
dns 39045 ( 0.12%) 8969610 ( 0.04%) 229.72
realaud 2 ( 0.00%) 209 ( 0.00%) 104.50
halflif 1 ( 0.00%) 113 ( 0.00%) 113.00
starcra 1 ( 0.00%) 110 ( 0.00%) 110.00
quake 1 ( 0.00%) 112 ( 0.00%) 112.00
cuseeme 1 ( 0.00%) 109 ( 0.00%) 109.00
other 23001 ( 0.07%) 11219328 ( 0.05%) 487.78
icmp6 28259 ( 0.08%) 3904989 ( 0.02%) 138.19
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 15563 ( 0.05%) 11036174 ( 0.04%) 709.13
tcpdump file: 201203311945.dump.gz (713.98 MB)