Traffic Trace Info
DumpFile: 201203312200.dump
FileSize: 1983.87MB
Id: 201203312200
StartTime: Sat Mar 31 22:00:00 2012
EndTime: Sat Mar 31 22:15:01 2012
TotalTime: 900.45 seconds
TotalCapSize: 1553.09MB CapLen: 96 bytes
# of packets: 28231548 (20638.24MB)
AvgRate: 192.27Mbps stddev:45.29M
IP flow (unique src/dst pair) Information
# of flows: 2021098 (avg. 13.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 3.4% 1.5% 1.4% 1.2% 1.2% 1.1% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 1561827
Top 10 bandwidth usage (bytes/total in %):
26.9% 10.5% 9.4% 6.7% 5.5% 4.2% 3.4% 3.0% 3.0% 2.4%
# of IPv6 addresses: 6133
Top 10 bandwidth usage (bytes/total in %):
30.6% 11.3% 10.4% 9.2% 8.9% 8.0% 7.9% 6.7% 6.6% 6.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203312200.pktlen.png)
detailed numbers
[ 32- 63]: 6062367
[ 64- 127]: 6036014
[ 128- 255]: 1357948
[ 256- 511]: 602398
[ 512- 1023]: 604371
[ 1024- 2047]: 13568450
Protocol Breakdown
![[protocol breakdown chart]](201203312200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28231548 (100.00%) 21640766259 (100.00%) 766.55
ip 27997801 ( 99.17%) 21554930407 ( 99.60%) 769.88
tcp 19783093 ( 70.07%) 18141073539 ( 83.83%) 917.00
http(s) 10629436 ( 37.65%) 14687010851 ( 67.87%) 1381.73
http(c) 4885967 ( 17.31%) 453591569 ( 2.10%) 92.84
squid 72943 ( 0.26%) 55303636 ( 0.26%) 758.18
smtp 38998 ( 0.14%) 9248743 ( 0.04%) 237.16
nntp 18 ( 0.00%) 1122 ( 0.00%) 62.33
ftp 7904 ( 0.03%) 763617 ( 0.00%) 96.61
pop3 2069 ( 0.01%) 691421 ( 0.00%) 334.18
imap 725 ( 0.00%) 268166 ( 0.00%) 369.88
telnet 4643 ( 0.02%) 341489 ( 0.00%) 73.55
ssh 16931 ( 0.06%) 2975865 ( 0.01%) 175.76
dns 28394 ( 0.10%) 27299533 ( 0.13%) 961.45
bgp 638 ( 0.00%) 119907 ( 0.00%) 187.94
napster 98 ( 0.00%) 6808 ( 0.00%) 69.47
realaud 7 ( 0.00%) 992 ( 0.00%) 141.71
rtsp 27023 ( 0.10%) 40266753 ( 0.19%) 1490.09
icecast 1093 ( 0.00%) 161501 ( 0.00%) 147.76
hotline 8 ( 0.00%) 1052 ( 0.00%) 131.50
other 4066198 ( 14.40%) 2863020514 ( 13.23%) 704.10
udp 4262328 ( 15.10%) 1883015277 ( 8.70%) 441.78
dns 327119 ( 1.16%) 71774366 ( 0.33%) 219.41
realaud 16 ( 0.00%) 1790 ( 0.00%) 111.88
halflif 20 ( 0.00%) 2827 ( 0.00%) 141.35
starcra 74 ( 0.00%) 6556 ( 0.00%) 88.59
everque 1513 ( 0.01%) 1166153 ( 0.01%) 770.76
unreal 172 ( 0.00%) 56929 ( 0.00%) 330.98
quake 15 ( 0.00%) 1503 ( 0.00%) 100.20
cuseeme 3 ( 0.00%) 577 ( 0.00%) 192.33
other 3933128 ( 13.93%) 1809857037 ( 8.36%) 460.16
icmp 2139236 ( 7.58%) 231390246 ( 1.07%) 108.16
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2948 ( 0.01%) 1033672 ( 0.00%) 350.64
ip6 1784251 ( 6.32%) 1295032662 ( 5.98%) 725.81
pim 276 ( 0.00%) 16560 ( 0.00%) 60.00
other 25484 ( 0.09%) 3349181 ( 0.02%) 131.42
frag 2891 ( 0.01%) 3250614 ( 0.02%) 1124.39
ip6 233747 ( 0.83%) 85835852 ( 0.40%) 367.22
tcp6 140714 ( 0.50%) 59866100 ( 0.28%) 425.45
http(s) 15222 ( 0.05%) 20481791 ( 0.09%) 1345.54
http(c) 19294 ( 0.07%) 1672050 ( 0.01%) 86.66
smtp 429 ( 0.00%) 133925 ( 0.00%) 312.18
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 440 ( 0.00%) 80015 ( 0.00%) 181.85
bgp 86 ( 0.00%) 14654 ( 0.00%) 170.40
other 105226 ( 0.37%) 37482060 ( 0.17%) 356.21
udp6 57699 ( 0.20%) 17889328 ( 0.08%) 310.05
dns 45884 ( 0.16%) 10353750 ( 0.05%) 225.65
halflif 1 ( 0.00%) 93 ( 0.00%) 93.00
starcra 1 ( 0.00%) 90 ( 0.00%) 90.00
everque 2 ( 0.00%) 217 ( 0.00%) 108.50
quake 2 ( 0.00%) 211 ( 0.00%) 105.50
other 11809 ( 0.04%) 7534967 ( 0.03%) 638.07
icmp6 29923 ( 0.11%) 4099870 ( 0.02%) 137.01
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 5298 ( 0.02%) 3965162 ( 0.02%) 748.43
tcpdump file: 201203312200.dump.gz (652.41 MB)