Traffic Trace Info
DumpFile: 201203312115.dump
FileSize: 2627.94MB
Id: 201203312115
StartTime: Sat Mar 31 21:15:00 2012
EndTime: Sat Mar 31 21:30:01 2012
TotalTime: 900.78 seconds
TotalCapSize: -2034.64MB CapLen: 96 bytes
# of packets: 37131220 (29582.89MB)
AvgRate: 275.52Mbps stddev:58.25M
IP flow (unique src/dst pair) Information
# of flows: 2155645 (avg. 17.23 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 3.8% 2.4% 1.9% 1.9% 1.9% 1.8% 1.8% 1.6% 1.6%
IP address Information
# of IPv4 addresses: 1591117
Top 10 bandwidth usage (bytes/total in %):
21.5% 16.6% 8.3% 7.2% 6.2% 4.6% 4.0% 3.9% 3.6% 2.7%
# of IPv6 addresses: 6272
Top 10 bandwidth usage (bytes/total in %):
53.3% 51.1% 24.9% 24.9% 13.5% 4.1% 3.2% 2.8% 2.5% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203312115.pktlen.png)
detailed numbers
[ 32- 63]: 7338757
[ 64- 127]: 7065090
[ 128- 255]: 1217869
[ 256- 511]: 841306
[ 512- 1023]: 1223605
[ 1024- 2047]: 19444593
Protocol Breakdown
![[protocol breakdown chart]](201203312115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37131220 (100.00%) 31019904797 (100.00%) 835.41
ip 36494471 ( 98.29%) 30408304947 ( 98.03%) 833.23
tcp 26913084 ( 72.48%) 25434840509 ( 82.00%) 945.07
http(s) 13067294 ( 35.19%) 17811349847 ( 57.42%) 1363.05
http(c) 5628088 ( 15.16%) 1124353831 ( 3.62%) 199.78
squid 77599 ( 0.21%) 57386447 ( 0.18%) 739.53
smtp 43150 ( 0.12%) 5632948 ( 0.02%) 130.54
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 5054 ( 0.01%) 468320 ( 0.00%) 92.66
pop3 1425 ( 0.00%) 297508 ( 0.00%) 208.78
imap 769 ( 0.00%) 157677 ( 0.00%) 205.04
telnet 6671 ( 0.02%) 490808 ( 0.00%) 73.57
ssh 83576 ( 0.23%) 42173981 ( 0.14%) 504.62
dns 1938 ( 0.01%) 137659 ( 0.00%) 71.03
bgp 643 ( 0.00%) 124652 ( 0.00%) 193.86
napster 17 ( 0.00%) 1458 ( 0.00%) 85.76
realaud 53 ( 0.00%) 3928 ( 0.00%) 74.11
rtsp 31468 ( 0.08%) 42031423 ( 0.14%) 1335.69
icecast 864 ( 0.00%) 123927 ( 0.00%) 143.43
hotline 8 ( 0.00%) 486 ( 0.00%) 60.75
other 7964455 ( 21.45%) 6350104861 ( 20.47%) 797.31
udp 5655746 ( 15.23%) 3451931703 ( 11.13%) 610.34
dns 361593 ( 0.97%) 76079027 ( 0.25%) 210.40
rip 1 ( 0.00%) 70 ( 0.00%) 70.00
realaud 20 ( 0.00%) 3711 ( 0.00%) 185.55
halflif 24 ( 0.00%) 3569 ( 0.00%) 148.71
starcra 28 ( 0.00%) 3346 ( 0.00%) 119.50
everque 237 ( 0.00%) 62771 ( 0.00%) 264.86
unreal 217 ( 0.00%) 81543 ( 0.00%) 375.77
quake 12 ( 0.00%) 1424 ( 0.00%) 118.67
cuseeme 5 ( 0.00%) 756 ( 0.00%) 151.20
other 5291793 ( 14.25%) 3375559716 ( 10.88%) 637.89
icmp 2191010 ( 5.90%) 241557616 ( 0.78%) 110.25
ipip 186 ( 0.00%) 19380 ( 0.00%) 104.19
ipsec 2896 ( 0.01%) 992416 ( 0.00%) 342.69
ip6 1708622 ( 4.60%) 1276055263 ( 4.11%) 746.83
pim 283 ( 0.00%) 16980 ( 0.00%) 60.00
other 22644 ( 0.06%) 2891080 ( 0.01%) 127.68
frag 62546 ( 0.17%) 47763528 ( 0.15%) 763.65
ip6 636749 ( 1.71%) 611599850 ( 1.97%) 960.50
tcp6 533009 ( 1.44%) 578211860 ( 1.86%) 1084.81
http(s) 7647 ( 0.02%) 9664698 ( 0.03%) 1263.85
http(c) 44298 ( 0.12%) 3734537 ( 0.01%) 84.30
squid 2679 ( 0.01%) 2525918 ( 0.01%) 942.86
smtp 156 ( 0.00%) 64951 ( 0.00%) 416.35
dns 107 ( 0.00%) 19255 ( 0.00%) 179.95
bgp 93 ( 0.00%) 14781 ( 0.00%) 158.94
other 478029 ( 1.29%) 562187720 ( 1.81%) 1176.05
udp6 71984 ( 0.19%) 27410503 ( 0.09%) 380.79
dns 43819 ( 0.12%) 9970041 ( 0.03%) 227.53
halflif 1 ( 0.00%) 112 ( 0.00%) 112.00
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
other 28163 ( 0.08%) 17440245 ( 0.06%) 619.26
icmp6 29062 ( 0.08%) 4021038 ( 0.01%) 138.36
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 2578 ( 0.01%) 1940703 ( 0.01%) 752.79
tcpdump file: 201203312115.dump.gz (834.33 MB)