Traffic Trace Info
DumpFile: 201203312000.dump
FileSize: 2231.12MB
Id: 201203312000
StartTime: Sat Mar 31 20:00:01 2012
EndTime: Sat Mar 31 20:15:00 2012
TotalTime: 899.37 seconds
TotalCapSize: 1740.38MB CapLen: 96 bytes
# of packets: 32160574 (23571.31MB)
AvgRate: 219.86Mbps stddev:48.35M
IP flow (unique src/dst pair) Information
# of flows: 2225574 (avg. 14.45 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.8% 4.7% 4.5% 3.0% 2.7% 2.3% 1.7% 1.6% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 1633636
Top 10 bandwidth usage (bytes/total in %):
16.2% 15.5% 13.9% 9.2% 6.8% 5.7% 4.8% 4.7% 4.5% 3.2%
# of IPv6 addresses: 6130
Top 10 bandwidth usage (bytes/total in %):
64.6% 27.8% 27.7% 14.0% 7.5% 4.4% 4.4% 4.2% 3.0% 2.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203312000.pktlen.png)
detailed numbers
[ 32- 63]: 7416311
[ 64- 127]: 6484039
[ 128- 255]: 1236089
[ 256- 511]: 698940
[ 512- 1023]: 747747
[ 1024- 2047]: 15577448
Protocol Breakdown
![[protocol breakdown chart]](201203312000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32160574 (100.00%) 24716308082 (100.00%) 768.53
ip 31692718 ( 98.55%) 24413252072 ( 98.77%) 770.31
tcp 20179110 ( 62.74%) 17585657312 ( 71.15%) 871.48
http(s) 10329358 ( 32.12%) 13730604575 ( 55.55%) 1329.28
http(c) 5375458 ( 16.71%) 1141514637 ( 4.62%) 212.36
squid 65797 ( 0.20%) 50174973 ( 0.20%) 762.57
smtp 42350 ( 0.13%) 21598689 ( 0.09%) 510.00
nntp 36 ( 0.00%) 2236 ( 0.00%) 62.11
ftp 5053 ( 0.02%) 529635 ( 0.00%) 104.82
pop3 1660 ( 0.01%) 357168 ( 0.00%) 215.16
imap 2278 ( 0.01%) 441568 ( 0.00%) 193.84
telnet 2788 ( 0.01%) 201416 ( 0.00%) 72.24
ssh 24005 ( 0.07%) 4502723 ( 0.02%) 187.57
dns 1769 ( 0.01%) 123575 ( 0.00%) 69.86
bgp 620 ( 0.00%) 102576 ( 0.00%) 165.45
napster 66 ( 0.00%) 7458 ( 0.00%) 113.00
realaud 104 ( 0.00%) 6350 ( 0.00%) 61.06
rtsp 12983 ( 0.04%) 14077673 ( 0.06%) 1084.32
icecast 963 ( 0.00%) 176798 ( 0.00%) 183.59
hotline 208 ( 0.00%) 12994 ( 0.00%) 62.47
other 4313614 ( 13.41%) 2621222268 ( 10.61%) 607.66
udp 7175229 ( 22.31%) 4921520823 ( 19.91%) 685.90
dns 392625 ( 1.22%) 83224736 ( 0.34%) 211.97
realaud 3834 ( 0.01%) 1918588 ( 0.01%) 500.41
halflif 23 ( 0.00%) 4868 ( 0.00%) 211.65
starcra 111 ( 0.00%) 25829 ( 0.00%) 232.69
everque 291 ( 0.00%) 76407 ( 0.00%) 262.57
unreal 72 ( 0.00%) 21098 ( 0.00%) 293.03
quake 10 ( 0.00%) 1660 ( 0.00%) 166.00
cuseeme 7 ( 0.00%) 486 ( 0.00%) 69.43
other 6486258 ( 20.17%) 4817455050 ( 19.49%) 742.72
icmp 2205775 ( 6.86%) 239927973 ( 0.97%) 108.77
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2980 ( 0.01%) 1042808 ( 0.00%) 349.94
ip6 2040525 ( 6.34%) 1631038000 ( 6.60%) 799.32
pim 300 ( 0.00%) 18000 ( 0.00%) 60.00
other 88614 ( 0.28%) 34027886 ( 0.14%) 384.00
frag 1029874 ( 3.20%) 782919588 ( 3.17%) 760.21
ip6 467856 ( 1.45%) 303056010 ( 1.23%) 647.75
tcp6 361352 ( 1.12%) 262336972 ( 1.06%) 725.99
http(s) 7584 ( 0.02%) 9013854 ( 0.04%) 1188.54
http(c) 20954 ( 0.07%) 1735664 ( 0.01%) 82.83
squid 3 ( 0.00%) 254 ( 0.00%) 84.67
smtp 71 ( 0.00%) 22634 ( 0.00%) 318.79
pop3 36 ( 0.00%) 3198 ( 0.00%) 88.83
dns 436 ( 0.00%) 68053 ( 0.00%) 156.08
bgp 89 ( 0.00%) 13463 ( 0.00%) 151.27
other 332179 ( 1.03%) 251479852 ( 1.02%) 757.06
udp6 73184 ( 0.23%) 33899431 ( 0.14%) 463.21
dns 41436 ( 0.13%) 9732545 ( 0.04%) 234.88
halflif 1 ( 0.00%) 100 ( 0.00%) 100.00
starcra 2 ( 0.00%) 219 ( 0.00%) 109.50
everque 1 ( 0.00%) 110 ( 0.00%) 110.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 31743 ( 0.10%) 24166350 ( 0.10%) 761.31
icmp6 29447 ( 0.09%) 4001720 ( 0.02%) 135.90
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3758 ( 0.01%) 2802227 ( 0.01%) 745.67
tcpdump file: 201203312000.dump.gz (703.66 MB)