Traffic Trace Info
DumpFile: 201203312145.dump
FileSize: 1979.67MB
Id: 201203312145
StartTime: Sat Mar 31 21:45:01 2012
EndTime: Sat Mar 31 22:00:00 2012
TotalTime: 899.56 seconds
TotalCapSize: 1557.36MB CapLen: 96 bytes
# of packets: 27676063 (19046.30MB)
AvgRate: 177.68Mbps stddev:39.27M
IP flow (unique src/dst pair) Information
# of flows: 2040632 (avg. 13.56 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 4.3% 4.0% 2.2% 2.1% 2.1% 1.6% 1.6% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1565306
Top 10 bandwidth usage (bytes/total in %):
16.7% 16.1% 8.2% 7.1% 6.0% 5.5% 4.9% 4.4% 4.1% 2.8%
# of IPv6 addresses: 6058
Top 10 bandwidth usage (bytes/total in %):
22.9% 17.4% 11.1% 9.9% 8.7% 7.0% 6.6% 6.4% 5.9% 5.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203312145.pktlen.png)
detailed numbers
[ 32- 63]: 5368614
[ 64- 127]: 7443451
[ 128- 255]: 1238519
[ 256- 511]: 612381
[ 512- 1023]: 648161
[ 1024- 2047]: 12364937
Protocol Breakdown
![[protocol breakdown chart]](201203312145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27676063 (100.00%) 19971493157 (100.00%) 721.62
ip 27425607 ( 99.10%) 19902439686 ( 99.65%) 725.69
tcp 19779629 ( 71.47%) 16821275232 ( 84.23%) 850.43
http(s) 9527287 ( 34.42%) 13062833987 ( 65.41%) 1371.10
http(c) 5748100 ( 20.77%) 498585384 ( 2.50%) 86.74
squid 64360 ( 0.23%) 41712113 ( 0.21%) 648.11
smtp 31079 ( 0.11%) 4814829 ( 0.02%) 154.92
nntp 18 ( 0.00%) 1122 ( 0.00%) 62.33
ftp 8813 ( 0.03%) 832519 ( 0.00%) 94.46
pop3 2099 ( 0.01%) 797254 ( 0.00%) 379.83
imap 880 ( 0.00%) 423211 ( 0.00%) 480.92
telnet 6936 ( 0.03%) 509705 ( 0.00%) 73.49
ssh 16843 ( 0.06%) 3298713 ( 0.02%) 195.85
dns 5261 ( 0.02%) 3340631 ( 0.02%) 634.98
bgp 647 ( 0.00%) 129950 ( 0.00%) 200.85
napster 27 ( 0.00%) 2534 ( 0.00%) 93.85
realaud 51 ( 0.00%) 3378 ( 0.00%) 66.24
rtsp 27039 ( 0.10%) 40293599 ( 0.20%) 1490.20
icecast 1088 ( 0.00%) 127531 ( 0.00%) 117.22
hotline 20 ( 0.00%) 1747 ( 0.00%) 87.35
other 4339081 ( 15.68%) 3163567025 ( 15.84%) 729.09
udp 3709595 ( 13.40%) 1577355906 ( 7.90%) 425.21
dns 303897 ( 1.10%) 66948958 ( 0.34%) 220.30
rip 1 ( 0.00%) 109 ( 0.00%) 109.00
realaud 39 ( 0.00%) 3782 ( 0.00%) 96.97
halflif 23 ( 0.00%) 2643 ( 0.00%) 114.91
starcra 128 ( 0.00%) 27183 ( 0.00%) 212.37
everque 236 ( 0.00%) 64460 ( 0.00%) 273.14
unreal 149 ( 0.00%) 49603 ( 0.00%) 332.91
quake 17 ( 0.00%) 1837 ( 0.00%) 108.06
cuseeme 7 ( 0.00%) 621 ( 0.00%) 88.71
other 3404892 ( 12.30%) 1510188985 ( 7.56%) 443.54
icmp 2137138 ( 7.72%) 233668766 ( 1.17%) 109.34
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2874 ( 0.01%) 983612 ( 0.00%) 342.24
ip6 1779483 ( 6.43%) 1266973859 ( 6.34%) 711.99
pim 289 ( 0.00%) 17340 ( 0.00%) 60.00
other 16415 ( 0.06%) 2145811 ( 0.01%) 130.72
frag 1544 ( 0.01%) 1585580 ( 0.01%) 1026.93
ip6 250456 ( 0.90%) 69053471 ( 0.35%) 275.71
tcp6 163628 ( 0.59%) 46416969 ( 0.23%) 283.67
http(s) 6545 ( 0.02%) 7963915 ( 0.04%) 1216.79
http(c) 25777 ( 0.09%) 2238792 ( 0.01%) 86.85
smtp 132 ( 0.00%) 52180 ( 0.00%) 395.30
ftp 239 ( 0.00%) 21230 ( 0.00%) 88.83
dns 182 ( 0.00%) 37595 ( 0.00%) 206.57
bgp 87 ( 0.00%) 15732 ( 0.00%) 180.83
other 130666 ( 0.47%) 36087525 ( 0.18%) 276.18
udp6 54531 ( 0.20%) 16673667 ( 0.08%) 305.76
dns 41697 ( 0.15%) 9426780 ( 0.05%) 226.08
starcra 1 ( 0.00%) 100 ( 0.00%) 100.00
everque 1 ( 0.00%) 97 ( 0.00%) 97.00
quake 2 ( 0.00%) 209 ( 0.00%) 104.50
other 12830 ( 0.05%) 7246481 ( 0.04%) 564.81
icmp6 29772 ( 0.11%) 4058581 ( 0.02%) 136.32
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2410 ( 0.01%) 1888594 ( 0.01%) 783.65
tcpdump file: 201203312145.dump.gz (638.02 MB)