Traffic Trace Info
DumpFile: 201203312015.dump
FileSize: 2038.92MB
Id: 201203312015
StartTime: Sat Mar 31 20:15:00 2012
EndTime: Sat Mar 31 20:30:01 2012
TotalTime: 900.52 seconds
TotalCapSize: 1603.08MB CapLen: 96 bytes
# of packets: 28562592 (20485.31MB)
AvgRate: 190.83Mbps stddev:47.48M
IP flow (unique src/dst pair) Information
# of flows: 2117229 (avg. 13.49 pkts/flow)
Top 10 big flow size (bytes/total in %):
1.9% 1.9% 1.7% 1.6% 1.6% 1.4% 1.4% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 1603188
Top 10 bandwidth usage (bytes/total in %):
24.5% 11.0% 5.6% 5.3% 5.2% 3.8% 3.5% 3.3% 3.2% 2.2%
# of IPv6 addresses: 5982
Top 10 bandwidth usage (bytes/total in %):
57.8% 56.8% 23.9% 17.0% 8.2% 3.1% 3.0% 2.5% 2.4% 1.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203312015.pktlen.png)
detailed numbers
[ 32- 63]: 6040150
[ 64- 127]: 6687517
[ 128- 255]: 1119732
[ 256- 511]: 658219
[ 512- 1023]: 672921
[ 1024- 2047]: 13384053
Protocol Breakdown
![[protocol breakdown chart]](201203312015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28562592 (100.00%) 21480409498 (100.00%) 752.05
ip 27739929 ( 97.12%) 20774754595 ( 96.71%) 748.91
tcp 18993282 ( 66.50%) 16892729298 ( 78.64%) 889.41
http(s) 9896943 ( 34.65%) 13199329514 ( 61.45%) 1333.68
http(c) 5032587 ( 17.62%) 1057461422 ( 4.92%) 210.12
squid 64144 ( 0.22%) 54524765 ( 0.25%) 850.04
smtp 31297 ( 0.11%) 4652280 ( 0.02%) 148.65
ftp 3706 ( 0.01%) 381174 ( 0.00%) 102.85
pop3 1448 ( 0.01%) 302360 ( 0.00%) 208.81
imap 1730 ( 0.01%) 1150090 ( 0.01%) 664.79
telnet 4719 ( 0.02%) 342045 ( 0.00%) 72.48
ssh 50416 ( 0.18%) 7004125 ( 0.03%) 138.93
dns 2057 ( 0.01%) 151047 ( 0.00%) 73.43
bgp 632 ( 0.00%) 113483 ( 0.00%) 179.56
napster 740 ( 0.00%) 46071 ( 0.00%) 62.26
realaud 13 ( 0.00%) 816 ( 0.00%) 62.77
rtsp 4483 ( 0.02%) 1727098 ( 0.01%) 385.25
icecast 5402 ( 0.02%) 3713362 ( 0.02%) 687.41
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 3892964 ( 13.63%) 2561829586 ( 11.93%) 658.07
udp 4138512 ( 14.49%) 2082320120 ( 9.69%) 503.16
dns 354694 ( 1.24%) 75993145 ( 0.35%) 214.25
rip 2 ( 0.00%) 3012 ( 0.00%) 1506.00
realaud 4 ( 0.00%) 644 ( 0.00%) 161.00
halflif 48 ( 0.00%) 15287 ( 0.00%) 318.48
starcra 171 ( 0.00%) 59931 ( 0.00%) 350.47
everque 322 ( 0.00%) 57833 ( 0.00%) 179.61
unreal 101 ( 0.00%) 50073 ( 0.00%) 495.77
quake 9 ( 0.00%) 1018 ( 0.00%) 113.11
cuseeme 2 ( 0.00%) 162 ( 0.00%) 81.00
other 3742332 ( 13.10%) 2003633908 ( 9.33%) 535.40
icmp 2289889 ( 8.02%) 245048444 ( 1.14%) 107.01
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2986 ( 0.01%) 1047452 ( 0.00%) 350.79
ip6 2225690 ( 7.79%) 1521655328 ( 7.08%) 683.68
pim 290 ( 0.00%) 17400 ( 0.00%) 60.00
other 89096 ( 0.31%) 31917393 ( 0.15%) 358.24
frag 185876 ( 0.65%) 142549897 ( 0.66%) 766.91
ip6 822661 ( 2.88%) 705654783 ( 3.29%) 857.77
tcp6 697022 ( 2.44%) 652100678 ( 3.04%) 935.55
http(s) 9742 ( 0.03%) 12132245 ( 0.06%) 1245.35
http(c) 14867 ( 0.05%) 1319946 ( 0.01%) 88.78
smtp 194 ( 0.00%) 112219 ( 0.00%) 578.45
ftp 87 ( 0.00%) 10717 ( 0.00%) 123.18
pop3 35 ( 0.00%) 3126 ( 0.00%) 89.31
dns 326 ( 0.00%) 34148 ( 0.00%) 104.75
bgp 95 ( 0.00%) 14816 ( 0.00%) 155.96
other 671676 ( 2.35%) 638473461 ( 2.97%) 950.57
udp6 80388 ( 0.28%) 37828166 ( 0.18%) 470.57
dns 42132 ( 0.15%) 10524411 ( 0.05%) 249.80
everque 3 ( 0.00%) 300 ( 0.00%) 100.00
quake 1 ( 0.00%) 98 ( 0.00%) 98.00
other 38252 ( 0.13%) 27303357 ( 0.13%) 713.78
icmp6 28546 ( 0.10%) 3942138 ( 0.02%) 138.10
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 16591 ( 0.06%) 11768309 ( 0.05%) 709.32
tcpdump file: 201203312015.dump.gz (649.73 MB)