Traffic Trace Info
DumpFile: 201203312130.dump
FileSize: 2291.27MB
Id: 201203312130
StartTime: Sat Mar 31 21:30:01 2012
EndTime: Sat Mar 31 21:45:01 2012
TotalTime: 899.80 seconds
TotalCapSize: 1795.07MB CapLen: 96 bytes
# of packets: 32518344 (24361.84MB)
AvgRate: 227.10Mbps stddev:49.60M
IP flow (unique src/dst pair) Information
# of flows: 2004805 (avg. 16.22 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 4.7% 4.2% 4.0% 3.0% 2.1% 1.7% 1.7% 1.6% 1.2%
IP address Information
# of IPv4 addresses: 1522089
Top 10 bandwidth usage (bytes/total in %):
19.1% 17.9% 7.2% 7.2% 5.5% 5.2% 4.8% 4.5% 4.2% 4.1%
# of IPv6 addresses: 6006
Top 10 bandwidth usage (bytes/total in %):
42.7% 12.8% 10.2% 10.0% 9.1% 5.3% 5.0% 4.9% 4.4% 3.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203312130.pktlen.png)
detailed numbers
[ 32- 63]: 6207207
[ 64- 127]: 7689164
[ 128- 255]: 1224185
[ 256- 511]: 673873
[ 512- 1023]: 665397
[ 1024- 2047]: 16058518
Protocol Breakdown
![[protocol breakdown chart]](201203312130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32518344 (100.00%) 25545244222 (100.00%) 785.56
ip 32242423 ( 99.15%) 25425234280 ( 99.53%) 788.56
tcp 22397391 ( 68.88%) 20517693983 ( 80.32%) 916.08
http(s) 10815276 ( 33.26%) 14799667450 ( 57.94%) 1368.40
http(c) 5255815 ( 16.16%) 713065789 ( 2.79%) 135.67
squid 57061 ( 0.18%) 36113168 ( 0.14%) 632.89
smtp 30529 ( 0.09%) 4353377 ( 0.02%) 142.60
nntp 18 ( 0.00%) 1122 ( 0.00%) 62.33
ftp 7695 ( 0.02%) 690866 ( 0.00%) 89.78
pop3 3868 ( 0.01%) 708640 ( 0.00%) 183.21
imap 1190 ( 0.00%) 509147 ( 0.00%) 427.85
telnet 5885 ( 0.02%) 433504 ( 0.00%) 73.66
ssh 71766 ( 0.22%) 27873861 ( 0.11%) 388.40
dns 1888 ( 0.01%) 136554 ( 0.00%) 72.33
bgp 625 ( 0.00%) 117558 ( 0.00%) 188.09
napster 189 ( 0.00%) 12713 ( 0.00%) 67.26
realaud 4 ( 0.00%) 246 ( 0.00%) 61.50
rtsp 28085 ( 0.09%) 40677754 ( 0.16%) 1448.38
icecast 689 ( 0.00%) 121396 ( 0.00%) 176.19
hotline 2 ( 0.00%) 120 ( 0.00%) 60.00
other 6116806 ( 18.81%) 4893210718 ( 19.16%) 799.96
udp 5992058 ( 18.43%) 3411664930 ( 13.36%) 569.36
dns 380267 ( 1.17%) 82138760 ( 0.32%) 216.00
realaud 18 ( 0.00%) 1756 ( 0.00%) 97.56
halflif 27 ( 0.00%) 3634 ( 0.00%) 134.59
starcra 63 ( 0.00%) 28618 ( 0.00%) 454.25
everque 5502 ( 0.02%) 5392974 ( 0.02%) 980.18
unreal 163 ( 0.00%) 49809 ( 0.00%) 305.58
quake 44 ( 0.00%) 11122 ( 0.00%) 252.77
cuseeme 8 ( 0.00%) 546 ( 0.00%) 68.25
other 5325092 ( 16.38%) 3305841098 ( 12.94%) 620.80
icmp 2123795 ( 6.53%) 230825015 ( 0.90%) 108.69
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2818 ( 0.01%) 972956 ( 0.00%) 345.26
ip6 1709159 ( 5.26%) 1261821740 ( 4.94%) 738.27
pim 265 ( 0.00%) 15900 ( 0.00%) 60.00
other 16752 ( 0.05%) 2220486 ( 0.01%) 132.55
frag 568881 ( 1.75%) 432061116 ( 1.69%) 759.49
ip6 275921 ( 0.85%) 120009942 ( 0.47%) 434.94
tcp6 168973 ( 0.52%) 85186348 ( 0.33%) 504.14
http(s) 8246 ( 0.03%) 10389300 ( 0.04%) 1259.92
http(c) 10305 ( 0.03%) 916645 ( 0.00%) 88.95
smtp 92 ( 0.00%) 46394 ( 0.00%) 504.28
dns 312 ( 0.00%) 78328 ( 0.00%) 251.05
bgp 92 ( 0.00%) 17495 ( 0.00%) 190.16
other 149926 ( 0.46%) 73738186 ( 0.29%) 491.83
udp6 68922 ( 0.21%) 24331331 ( 0.10%) 353.03
dns 42840 ( 0.13%) 9611905 ( 0.04%) 224.37
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 26081 ( 0.08%) 14719322 ( 0.06%) 564.37
icmp6 29290 ( 0.09%) 4070799 ( 0.02%) 138.98
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8623 ( 0.03%) 6406090 ( 0.03%) 742.91
tcpdump file: 201203312130.dump.gz (724.61 MB)