Traffic Trace Info
DumpFile: 201203312100.dump
FileSize: 2301.23MB
Id: 201203312100
StartTime: Sat Mar 31 21:00:01 2012
EndTime: Sat Mar 31 21:15:00 2012
TotalTime: 899.40 seconds
TotalCapSize: 1804.39MB CapLen: 96 bytes
# of packets: 32560772 (24070.99MB)
AvgRate: 224.51Mbps stddev:46.74M
IP flow (unique src/dst pair) Information
# of flows: 2199391 (avg. 14.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 3.0% 2.8% 2.5% 2.3% 2.0% 1.4% 1.4% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 1638267
Top 10 bandwidth usage (bytes/total in %):
20.1% 13.2% 7.9% 7.8% 5.3% 4.6% 3.8% 3.7% 3.6% 3.1%
# of IPv6 addresses: 6202
Top 10 bandwidth usage (bytes/total in %):
70.3% 67.8% 17.6% 6.3% 4.9% 2.4% 2.3% 2.1% 1.2% 1.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203312100.pktlen.png)
detailed numbers
[ 32- 63]: 7182355
[ 64- 127]: 6641278
[ 128- 255]: 1242982
[ 256- 511]: 735864
[ 512- 1023]: 1012144
[ 1024- 2047]: 15746149
Protocol Breakdown
![[protocol breakdown chart]](201203312100.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32560772 (100.00%) 25240258002 (100.00%) 775.17
ip 31929212 ( 98.06%) 24713737192 ( 97.91%) 774.02
tcp 23548835 ( 72.32%) 21071509513 ( 83.48%) 894.80
http(s) 11541164 ( 35.44%) 15484424394 ( 61.35%) 1341.67
http(c) 5725527 ( 17.58%) 1237751079 ( 4.90%) 216.18
squid 70102 ( 0.22%) 53497144 ( 0.21%) 763.13
smtp 37648 ( 0.12%) 6624147 ( 0.03%) 175.95
nntp 30 ( 0.00%) 1870 ( 0.00%) 62.33
ftp 6023 ( 0.02%) 552731 ( 0.00%) 91.77
pop3 1691 ( 0.01%) 457729 ( 0.00%) 270.69
imap 599 ( 0.00%) 99709 ( 0.00%) 166.46
telnet 6035 ( 0.02%) 445376 ( 0.00%) 73.80
ssh 41899 ( 0.13%) 19779293 ( 0.08%) 472.07
dns 2044 ( 0.01%) 176619 ( 0.00%) 86.41
bgp 637 ( 0.00%) 121074 ( 0.00%) 190.07
napster 44 ( 0.00%) 4479 ( 0.00%) 101.80
realaud 37 ( 0.00%) 2949 ( 0.00%) 79.70
rtsp 11731 ( 0.04%) 12564047 ( 0.05%) 1071.01
icecast 1279 ( 0.00%) 179038 ( 0.00%) 139.98
hotline 39 ( 0.00%) 3052 ( 0.00%) 78.26
other 6102306 ( 18.74%) 4254824783 ( 16.86%) 697.25
udp 4269547 ( 13.11%) 2046425731 ( 8.11%) 479.31
dns 384848 ( 1.18%) 79899632 ( 0.32%) 207.61
realaud 6 ( 0.00%) 602 ( 0.00%) 100.33
halflif 33 ( 0.00%) 3835 ( 0.00%) 116.21
starcra 349 ( 0.00%) 25809 ( 0.00%) 73.95
everque 8012 ( 0.02%) 8078493 ( 0.03%) 1008.30
unreal 108 ( 0.00%) 47420 ( 0.00%) 439.07
quake 11 ( 0.00%) 1198 ( 0.00%) 108.91
cuseeme 2 ( 0.00%) 177 ( 0.00%) 88.50
other 3869008 ( 11.88%) 1957902731 ( 7.76%) 506.05
icmp 2222380 ( 6.83%) 246618132 ( 0.98%) 110.97
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2828 ( 0.01%) 969128 ( 0.00%) 342.69
ip6 1857722 ( 5.71%) 1344827372 ( 5.33%) 723.91
pim 353 ( 0.00%) 21180 ( 0.00%) 60.00
other 27363 ( 0.08%) 3346976 ( 0.01%) 122.32
frag 111828 ( 0.34%) 85649796 ( 0.34%) 765.91
ip6 631560 ( 1.94%) 526520810 ( 2.09%) 833.68
tcp6 512281 ( 1.57%) 481225381 ( 1.91%) 939.38
http(s) 9501 ( 0.03%) 10745077 ( 0.04%) 1130.94
http(c) 14550 ( 0.04%) 1462858 ( 0.01%) 100.54
smtp 248 ( 0.00%) 76691 ( 0.00%) 309.24
dns 454 ( 0.00%) 79037 ( 0.00%) 174.09
bgp 91 ( 0.00%) 16237 ( 0.00%) 178.43
other 487437 ( 1.50%) 468845481 ( 1.86%) 961.86
udp6 78274 ( 0.24%) 32710684 ( 0.13%) 417.90
dns 44631 ( 0.14%) 10397180 ( 0.04%) 232.96
halflif 1 ( 0.00%) 104 ( 0.00%) 104.00
everque 2 ( 0.00%) 211 ( 0.00%) 105.50
unreal 1 ( 0.00%) 108 ( 0.00%) 108.00
other 33639 ( 0.10%) 22313081 ( 0.09%) 663.31
icmp6 29003 ( 0.09%) 4091444 ( 0.02%) 141.07
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 11889 ( 0.04%) 8477877 ( 0.03%) 713.09
tcpdump file: 201203312100.dump.gz (740.81 MB)