Traffic Trace Info
DumpFile: 201203312230.dump
FileSize: 2480.26MB
Id: 201203312230
StartTime: Sat Mar 31 22:30:00 2012
EndTime: Sat Mar 31 22:45:00 2012
TotalTime: 899.60 seconds
TotalCapSize: 1944.12MB CapLen: 96 bytes
# of packets: 35136044 (26515.71MB)
AvgRate: 247.27Mbps stddev:51.35M
IP flow (unique src/dst pair) Information
# of flows: 1987730 (avg. 17.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 3.3% 3.0% 2.4% 1.5% 1.3% 1.1% 1.0% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 1501184
Top 10 bandwidth usage (bytes/total in %):
33.5% 10.8% 10.3% 5.3% 4.6% 3.8% 3.3% 3.1% 2.8% 2.7%
# of IPv6 addresses: 6285
Top 10 bandwidth usage (bytes/total in %):
38.9% 34.3% 12.8% 10.7% 8.6% 5.0% 4.4% 3.8% 3.7% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203312230.pktlen.png)
detailed numbers
[ 32- 63]: 6953347
[ 64- 127]: 7973830
[ 128- 255]: 1257022
[ 256- 511]: 704723
[ 512- 1023]: 853164
[ 1024- 2047]: 17393958
Protocol Breakdown
![[protocol breakdown chart]](201203312230.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35136044 (100.00%) 27803735544 (100.00%) 791.32
ip 34864607 ( 99.23%) 27694442208 ( 99.61%) 794.34
tcp 26368869 ( 75.05%) 24005431528 ( 86.34%) 910.37
http(s) 13159733 ( 37.45%) 18371378807 ( 66.08%) 1396.03
http(c) 6426044 ( 18.29%) 553649827 ( 1.99%) 86.16
squid 66111 ( 0.19%) 46222913 ( 0.17%) 699.17
smtp 38209 ( 0.11%) 7403555 ( 0.03%) 193.76
nntp 7 ( 0.00%) 448 ( 0.00%) 64.00
ftp 13490 ( 0.04%) 1363865 ( 0.00%) 101.10
pop3 1547 ( 0.00%) 298998 ( 0.00%) 193.28
imap 656 ( 0.00%) 73897 ( 0.00%) 112.65
telnet 4899 ( 0.01%) 361203 ( 0.00%) 73.73
ssh 200931 ( 0.57%) 25415102 ( 0.09%) 126.49
dns 2321 ( 0.01%) 199177 ( 0.00%) 85.82
bgp 667 ( 0.00%) 152442 ( 0.00%) 228.55
napster 123 ( 0.00%) 8716 ( 0.00%) 70.86
realaud 259 ( 0.00%) 27833 ( 0.00%) 107.46
rtsp 17257 ( 0.05%) 25703989 ( 0.09%) 1489.48
icecast 1182 ( 0.00%) 179221 ( 0.00%) 151.63
hotline 89 ( 0.00%) 7027 ( 0.00%) 78.96
other 6435342 ( 18.32%) 4972984388 ( 17.89%) 772.76
udp 4731635 ( 13.47%) 2302860568 ( 8.28%) 486.69
dns 316879 ( 0.90%) 66493139 ( 0.24%) 209.84
realaud 5 ( 0.00%) 627 ( 0.00%) 125.40
halflif 19 ( 0.00%) 2739 ( 0.00%) 144.16
starcra 60 ( 0.00%) 7435 ( 0.00%) 123.92
everque 2338 ( 0.01%) 2205344 ( 0.01%) 943.26
unreal 110 ( 0.00%) 37427 ( 0.00%) 340.25
quake 128 ( 0.00%) 82396 ( 0.00%) 643.72
cuseeme 2 ( 0.00%) 184 ( 0.00%) 92.00
other 4411986 ( 12.56%) 2234005738 ( 8.03%) 506.35
icmp 2117295 ( 6.03%) 231319169 ( 0.83%) 109.25
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2843 ( 0.01%) 985378 ( 0.00%) 346.60
ip6 1620596 ( 4.61%) 1150840668 ( 4.14%) 710.13
pim 242 ( 0.00%) 14520 ( 0.00%) 60.00
other 22942 ( 0.07%) 2971107 ( 0.01%) 129.51
frag 579 ( 0.00%) 529335 ( 0.00%) 914.22
ip6 271437 ( 0.77%) 109293336 ( 0.39%) 402.65
tcp6 159878 ( 0.46%) 79231284 ( 0.28%) 495.57
http(s) 32082 ( 0.09%) 42720927 ( 0.15%) 1331.62
http(c) 31146 ( 0.09%) 2741004 ( 0.01%) 88.01
smtp 365 ( 0.00%) 116875 ( 0.00%) 320.21
dns 236 ( 0.00%) 47069 ( 0.00%) 199.44
bgp 87 ( 0.00%) 13207 ( 0.00%) 151.80
other 95962 ( 0.27%) 33592202 ( 0.12%) 350.06
udp6 72234 ( 0.21%) 20359855 ( 0.07%) 281.86
dns 43092 ( 0.12%) 9661867 ( 0.03%) 224.21
starcra 1 ( 0.00%) 101 ( 0.00%) 101.00
everque 2 ( 0.00%) 215 ( 0.00%) 107.50
unreal 1 ( 0.00%) 91 ( 0.00%) 91.00
other 29138 ( 0.08%) 10697581 ( 0.04%) 367.14
icmp6 31723 ( 0.09%) 4318269 ( 0.02%) 136.12
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 7487 ( 0.02%) 5368268 ( 0.02%) 717.01
tcpdump file: 201203312230.dump.gz (803.07 MB)