Traffic Trace Info
DumpFile: 201203312045.dump
FileSize: 2333.40MB
Id: 201203312045
StartTime: Sat Mar 31 20:45:00 2012
EndTime: Sat Mar 31 21:00:01 2012
TotalTime: 900.66 seconds
TotalCapSize: 1831.49MB CapLen: 96 bytes
# of packets: 32892356 (25203.76MB)
AvgRate: 234.75Mbps stddev:55.96M
IP flow (unique src/dst pair) Information
# of flows: 2162868 (avg. 15.21 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 2.5% 2.2% 1.9% 1.5% 1.5% 1.4% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1575351
Top 10 bandwidth usage (bytes/total in %):
29.8% 13.1% 6.2% 4.9% 4.9% 4.5% 4.3% 3.3% 3.0% 2.6%
# of IPv6 addresses: 5973
Top 10 bandwidth usage (bytes/total in %):
38.7% 31.4% 16.0% 12.5% 11.5% 9.8% 7.3% 6.7% 4.3% 4.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203312045.pktlen.png)
detailed numbers
[ 32- 63]: 7018843
[ 64- 127]: 6640504
[ 128- 255]: 1146728
[ 256- 511]: 665001
[ 512- 1023]: 773030
[ 1024- 2047]: 16648250
Protocol Breakdown
![[protocol breakdown chart]](201203312045.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32892356 (100.00%) 26428054671 (100.00%) 803.47
ip 32293522 ( 98.18%) 26206787835 ( 99.16%) 811.52
tcp 23688357 ( 72.02%) 22214330578 ( 84.06%) 937.77
http(s) 13566623 ( 41.25%) 18544994461 ( 70.17%) 1366.96
http(c) 6143914 ( 18.68%) 1178498141 ( 4.46%) 191.82
squid 53842 ( 0.16%) 38358841 ( 0.15%) 712.43
smtp 36850 ( 0.11%) 7790506 ( 0.03%) 211.41
nntp 24 ( 0.00%) 1496 ( 0.00%) 62.33
ftp 5565 ( 0.02%) 536328 ( 0.00%) 96.38
pop3 1499 ( 0.00%) 293843 ( 0.00%) 196.03
imap 1466 ( 0.00%) 963776 ( 0.00%) 657.42
telnet 6516 ( 0.02%) 472448 ( 0.00%) 72.51
ssh 15946 ( 0.05%) 3407848 ( 0.01%) 213.71
dns 4261 ( 0.01%) 321870 ( 0.00%) 75.54
bgp 653 ( 0.00%) 113167 ( 0.00%) 173.30
napster 73 ( 0.00%) 33419 ( 0.00%) 457.79
realaud 404 ( 0.00%) 25812 ( 0.00%) 63.89
rtsp 4387 ( 0.01%) 1702266 ( 0.01%) 388.03
icecast 1043 ( 0.00%) 157105 ( 0.00%) 150.63
hotline 18 ( 0.00%) 2739 ( 0.00%) 152.17
other 3845273 ( 11.69%) 2436656512 ( 9.22%) 633.68
udp 4177257 ( 12.70%) 2042802231 ( 7.73%) 489.03
dns 310362 ( 0.94%) 70151764 ( 0.27%) 226.03
realaud 14 ( 0.00%) 1303 ( 0.00%) 93.07
halflif 41 ( 0.00%) 4510 ( 0.00%) 110.00
starcra 152 ( 0.00%) 100475 ( 0.00%) 661.02
everque 288 ( 0.00%) 73224 ( 0.00%) 254.25
unreal 162 ( 0.00%) 71842 ( 0.00%) 443.47
quake 54 ( 0.00%) 4363 ( 0.00%) 80.80
cuseeme 4 ( 0.00%) 449 ( 0.00%) 112.25
other 3795490 ( 11.54%) 1968102823 ( 7.45%) 518.54
icmp 2201104 ( 6.69%) 244027816 ( 0.92%) 110.87
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2866 ( 0.01%) 993820 ( 0.00%) 346.76
ip6 2161835 ( 6.57%) 1685056187 ( 6.38%) 779.46
pim 369 ( 0.00%) 22140 ( 0.00%) 60.00
other 61549 ( 0.19%) 19535793 ( 0.07%) 317.40
frag 286346 ( 0.87%) 218685096 ( 0.83%) 763.71
ip6 598834 ( 1.82%) 221266836 ( 0.84%) 369.50
tcp6 450184 ( 1.37%) 150651557 ( 0.57%) 334.64
http(s) 30417 ( 0.09%) 43196335 ( 0.16%) 1420.14
http(c) 50639 ( 0.15%) 4486413 ( 0.02%) 88.60
smtp 101 ( 0.00%) 39006 ( 0.00%) 386.20
dns 326 ( 0.00%) 36613 ( 0.00%) 112.31
bgp 97 ( 0.00%) 15505 ( 0.00%) 159.85
other 368604 ( 1.12%) 102877685 ( 0.39%) 279.10
udp6 73865 ( 0.22%) 34757226 ( 0.13%) 470.55
dns 40528 ( 0.12%) 9426919 ( 0.04%) 232.60
realaud 1 ( 0.00%) 104 ( 0.00%) 104.00
halflif 1 ( 0.00%) 119 ( 0.00%) 119.00
other 33335 ( 0.10%) 25330084 ( 0.10%) 759.86
icmp6 29546 ( 0.09%) 4036193 ( 0.02%) 136.61
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 45125 ( 0.14%) 31806368 ( 0.12%) 704.85
tcpdump file: 201203312045.dump.gz (737.27 MB)