Traffic Trace Info
DumpFile: 201203312030.dump
FileSize: 2126.14MB
Id: 201203312030
StartTime: Sat Mar 31 20:30:01 2012
EndTime: Sat Mar 31 20:45:00 2012
TotalTime: 899.43 seconds
TotalCapSize: 1666.56MB CapLen: 96 bytes
# of packets: 30118566 (22097.37MB)
AvgRate: 206.09Mbps stddev:46.63M
IP flow (unique src/dst pair) Information
# of flows: 2197721 (avg. 13.70 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 2.2% 2.0% 1.9% 1.6% 1.0% 0.9% 0.9% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 1619415
Top 10 bandwidth usage (bytes/total in %):
33.0% 12.4% 6.0% 5.4% 3.9% 3.8% 3.6% 3.2% 2.3% 2.1%
# of IPv6 addresses: 6044
Top 10 bandwidth usage (bytes/total in %):
37.0% 32.0% 13.6% 7.8% 7.3% 7.0% 6.3% 6.0% 6.0% 4.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203312030.pktlen.png)
detailed numbers
[ 32- 63]: 6644329
[ 64- 127]: 6340939
[ 128- 255]: 1116222
[ 256- 511]: 813293
[ 512- 1023]: 723639
[ 1024- 2047]: 14480144
Protocol Breakdown
![[protocol breakdown chart]](201203312030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30118566 (100.00%) 23170768901 (100.00%) 769.32
ip 29521351 ( 98.02%) 22961827894 ( 99.10%) 777.80
tcp 20342584 ( 67.54%) 18490307633 ( 79.80%) 908.95
http(s) 11297341 ( 37.51%) 15293979030 ( 66.01%) 1353.77
http(c) 5588600 ( 18.56%) 1361862893 ( 5.88%) 243.69
squid 61948 ( 0.21%) 44673342 ( 0.19%) 721.14
smtp 30706 ( 0.10%) 4462134 ( 0.02%) 145.32
nntp 13 ( 0.00%) 808 ( 0.00%) 62.15
ftp 5036 ( 0.02%) 487198 ( 0.00%) 96.74
pop3 1766 ( 0.01%) 335177 ( 0.00%) 189.79
imap 1533 ( 0.01%) 753443 ( 0.00%) 491.48
telnet 8076 ( 0.03%) 585186 ( 0.00%) 72.46
ssh 25956 ( 0.09%) 10742453 ( 0.05%) 413.87
dns 13796 ( 0.05%) 1116253 ( 0.00%) 80.91
bgp 703 ( 0.00%) 126852 ( 0.00%) 180.44
napster 202 ( 0.00%) 12715 ( 0.00%) 62.95
realaud 52 ( 0.00%) 3553 ( 0.00%) 68.33
rtsp 4347 ( 0.01%) 1689656 ( 0.01%) 388.69
icecast 5905 ( 0.02%) 4066497 ( 0.02%) 688.65
hotline 245 ( 0.00%) 15142 ( 0.00%) 61.80
other 3296358 ( 10.94%) 1765395241 ( 7.62%) 535.56
udp 4566993 ( 15.16%) 2359776197 ( 10.18%) 516.70
dns 421701 ( 1.40%) 100589332 ( 0.43%) 238.53
realaud 10 ( 0.00%) 1165 ( 0.00%) 116.50
halflif 63 ( 0.00%) 41119 ( 0.00%) 652.68
starcra 34 ( 0.00%) 4651 ( 0.00%) 136.79
everque 323 ( 0.00%) 74663 ( 0.00%) 231.15
unreal 90 ( 0.00%) 22439 ( 0.00%) 249.32
quake 33 ( 0.00%) 3489 ( 0.00%) 105.73
cuseeme 2 ( 0.00%) 185 ( 0.00%) 92.50
other 4038006 ( 13.41%) 2252540729 ( 9.72%) 557.83
icmp 2176968 ( 7.23%) 237984952 ( 1.03%) 109.32
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3018 ( 0.01%) 1049564 ( 0.00%) 347.77
ip6 2383186 ( 7.91%) 1858727507 ( 8.02%) 779.93
pim 231 ( 0.00%) 13860 ( 0.00%) 60.00
other 48186 ( 0.16%) 13948911 ( 0.06%) 289.48
frag 385256 ( 1.28%) 295318627 ( 1.27%) 766.55
ip6 597215 ( 1.98%) 208941007 ( 0.90%) 349.86
tcp6 460481 ( 1.53%) 146705461 ( 0.63%) 318.59
http(s) 26875 ( 0.09%) 37125704 ( 0.16%) 1381.42
http(c) 26180 ( 0.09%) 2317049 ( 0.01%) 88.50
smtp 34 ( 0.00%) 11910 ( 0.00%) 350.29
ftp 24 ( 0.00%) 1923 ( 0.00%) 80.12
pop3 13 ( 0.00%) 1141 ( 0.00%) 87.77
dns 580 ( 0.00%) 98959 ( 0.00%) 170.62
bgp 88 ( 0.00%) 13775 ( 0.00%) 156.53
other 406687 ( 1.35%) 107135000 ( 0.46%) 263.43
udp6 78096 ( 0.26%) 36788377 ( 0.16%) 471.07
dns 39999 ( 0.13%) 9175572 ( 0.04%) 229.40
realaud 2 ( 0.00%) 215 ( 0.00%) 107.50
other 38095 ( 0.13%) 27612590 ( 0.12%) 724.84
icmp6 28424 ( 0.09%) 3910898 ( 0.02%) 137.59
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 30101 ( 0.10%) 21520879 ( 0.09%) 714.96
tcpdump file: 201203312030.dump.gz (681.34 MB)