Traffic Trace Info
DumpFile: 201203312215.dump
FileSize: 2404.51MB
Id: 201203312215
StartTime: Sat Mar 31 22:15:01 2012
EndTime: Sat Mar 31 22:30:00 2012
TotalTime: 899.72 seconds
TotalCapSize: 1886.78MB CapLen: 96 bytes
# of packets: 33929644 (25933.76MB)
AvgRate: 241.80Mbps stddev:46.44M
IP flow (unique src/dst pair) Information
# of flows: 1996040 (avg. 17.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.9% 4.3% 3.7% 3.5% 2.2% 1.8% 1.3% 1.2% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 1529217
Top 10 bandwidth usage (bytes/total in %):
21.1% 12.8% 8.4% 8.0% 7.1% 7.0% 4.4% 4.1% 3.9% 3.6%
# of IPv6 addresses: 6113
Top 10 bandwidth usage (bytes/total in %):
34.9% 34.9% 12.4% 10.2% 9.0% 5.1% 5.1% 4.8% 4.0% 3.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203312215.pktlen.png)
detailed numbers
[ 32- 63]: 7040707
[ 64- 127]: 7162747
[ 128- 255]: 1314740
[ 256- 511]: 660269
[ 512- 1023]: 678735
[ 1024- 2047]: 17072446
Protocol Breakdown
![[protocol breakdown chart]](201203312215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33929644 (100.00%) 27193515879 (100.00%) 801.47
ip 33650986 ( 99.18%) 27069250546 ( 99.54%) 804.41
tcp 25981116 ( 76.57%) 23964931737 ( 88.13%) 922.40
http(s) 12738889 ( 37.55%) 17861787645 ( 65.68%) 1402.15
http(c) 5963357 ( 17.58%) 514466521 ( 1.89%) 86.27
squid 81123 ( 0.24%) 58040032 ( 0.21%) 715.46
smtp 32806 ( 0.10%) 5380345 ( 0.02%) 164.00
nntp 3 ( 0.00%) 180 ( 0.00%) 60.00
ftp 18125 ( 0.05%) 1888436 ( 0.01%) 104.19
pop3 1900 ( 0.01%) 661909 ( 0.00%) 348.37
imap 668 ( 0.00%) 100203 ( 0.00%) 150.00
telnet 5854 ( 0.02%) 438591 ( 0.00%) 74.92
ssh 95120 ( 0.28%) 7535461 ( 0.03%) 79.22
dns 2170 ( 0.01%) 187630 ( 0.00%) 86.47
bgp 632 ( 0.00%) 105468 ( 0.00%) 166.88
napster 43 ( 0.00%) 3556 ( 0.00%) 82.70
realaud 39 ( 0.00%) 2907 ( 0.00%) 74.54
rtsp 26815 ( 0.08%) 39956587 ( 0.15%) 1490.08
icecast 919 ( 0.00%) 112709 ( 0.00%) 122.64
hotline 301 ( 0.00%) 19549 ( 0.00%) 64.95
other 7012350 ( 20.67%) 5474243888 ( 20.13%) 780.66
udp 4054264 ( 11.95%) 1842355922 ( 6.77%) 454.42
dns 335733 ( 0.99%) 72253905 ( 0.27%) 215.21
rip 11 ( 0.00%) 3277 ( 0.00%) 297.91
realaud 5 ( 0.00%) 562 ( 0.00%) 112.40
halflif 18 ( 0.00%) 2189 ( 0.00%) 121.61
starcra 82 ( 0.00%) 8293 ( 0.00%) 101.13
everque 1653 ( 0.00%) 1212879 ( 0.00%) 733.74
unreal 169 ( 0.00%) 67505 ( 0.00%) 399.44
quake 12 ( 0.00%) 959 ( 0.00%) 79.92
cuseeme 8 ( 0.00%) 1048 ( 0.00%) 131.00
other 3716408 ( 10.95%) 1768714463 ( 6.50%) 475.92
icmp 2133631 ( 6.29%) 233093081 ( 0.86%) 109.25
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2881 ( 0.01%) 992342 ( 0.00%) 344.44
ip6 1455201 ( 4.29%) 1024779688 ( 3.77%) 704.22
pim 364 ( 0.00%) 21840 ( 0.00%) 60.00
other 23345 ( 0.07%) 3056776 ( 0.01%) 130.94
frag 2024 ( 0.01%) 2204018 ( 0.01%) 1088.94
ip6 278658 ( 0.82%) 124265333 ( 0.46%) 445.94
tcp6 164400 ( 0.48%) 87169997 ( 0.32%) 530.23
http(s) 11823 ( 0.03%) 14285967 ( 0.05%) 1208.32
http(c) 35723 ( 0.11%) 3263658 ( 0.01%) 91.36
smtp 395 ( 0.00%) 132812 ( 0.00%) 336.23
ftp 19 ( 0.00%) 2168 ( 0.00%) 114.11
dns 206 ( 0.00%) 30050 ( 0.00%) 145.87
bgp 92 ( 0.00%) 16051 ( 0.00%) 174.47
other 116142 ( 0.34%) 69439291 ( 0.26%) 597.88
udp6 72103 ( 0.21%) 25223754 ( 0.09%) 349.83
dns 43641 ( 0.13%) 9488781 ( 0.03%) 217.43
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
halflif 1 ( 0.00%) 104 ( 0.00%) 104.00
everque 2 ( 0.00%) 199 ( 0.00%) 99.50
quake 2 ( 0.00%) 212 ( 0.00%) 106.00
cuseeme 1 ( 0.00%) 100 ( 0.00%) 100.00
other 28455 ( 0.08%) 15734248 ( 0.06%) 552.95
icmp6 31772 ( 0.09%) 4364991 ( 0.02%) 137.38
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 10269 ( 0.03%) 7491099 ( 0.03%) 729.49
tcpdump file: 201203312215.dump.gz (764.49 MB)