Traffic Trace Info
DumpFile: 201203312245.dump
FileSize: 2181.77MB
Id: 201203312245
StartTime: Sat Mar 31 22:45:00 2012
EndTime: Sat Mar 31 23:00:00 2012
TotalTime: 900.44 seconds
TotalCapSize: 1710.63MB CapLen: 96 bytes
# of packets: 30876263 (22377.34MB)
AvgRate: 208.44Mbps stddev:39.38M
IP flow (unique src/dst pair) Information
# of flows: 2026660 (avg. 15.24 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 6.7% 2.9% 1.6% 1.5% 1.1% 1.1% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1537201
Top 10 bandwidth usage (bytes/total in %):
21.3% 16.4% 11.7% 7.0% 6.7% 4.9% 3.9% 3.0% 3.0% 2.9%
# of IPv6 addresses: 6357
Top 10 bandwidth usage (bytes/total in %):
24.4% 16.6% 16.2% 11.2% 10.5% 10.2% 7.3% 6.1% 6.0% 5.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203312245.pktlen.png)
detailed numbers
[ 32- 63]: 5495034
[ 64- 127]: 7950999
[ 128- 255]: 1294802
[ 256- 511]: 655012
[ 512- 1023]: 885213
[ 1024- 2047]: 14595203
Protocol Breakdown
![[protocol breakdown chart]](201203312245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30876263 (100.00%) 23464342519 (100.00%) 759.95
ip 30629388 ( 99.20%) 23383316611 ( 99.65%) 763.43
tcp 21188980 ( 68.63%) 19217343441 ( 81.90%) 906.95
http(s) 10389601 ( 33.65%) 14277968916 ( 60.85%) 1374.26
http(c) 4087483 ( 13.24%) 397097239 ( 1.69%) 97.15
squid 129105 ( 0.42%) 95389687 ( 0.41%) 738.85
smtp 35161 ( 0.11%) 6939501 ( 0.03%) 197.36
nntp 20 ( 0.00%) 1242 ( 0.00%) 62.10
ftp 8191 ( 0.03%) 791032 ( 0.00%) 96.57
pop3 3628 ( 0.01%) 436243 ( 0.00%) 120.24
imap 621 ( 0.00%) 78529 ( 0.00%) 126.46
telnet 39858 ( 0.13%) 2794983 ( 0.01%) 70.12
ssh 524081 ( 1.70%) 56929346 ( 0.24%) 108.63
dns 2373 ( 0.01%) 209109 ( 0.00%) 88.12
bgp 639 ( 0.00%) 113085 ( 0.00%) 176.97
napster 53 ( 0.00%) 4730 ( 0.00%) 89.25
realaud 455 ( 0.00%) 46205 ( 0.00%) 101.55
rtsp 14 ( 0.00%) 1323 ( 0.00%) 94.50
icecast 963 ( 0.00%) 125640 ( 0.00%) 130.47
hotline 7 ( 0.00%) 924 ( 0.00%) 132.00
other 5966727 ( 19.32%) 4378415707 ( 18.66%) 733.81
udp 5483281 ( 17.76%) 2655644916 ( 11.32%) 484.32
dns 306282 ( 0.99%) 66616613 ( 0.28%) 217.50
realaud 6 ( 0.00%) 809 ( 0.00%) 134.83
halflif 53 ( 0.00%) 5400 ( 0.00%) 101.89
starcra 34 ( 0.00%) 4583 ( 0.00%) 134.79
everque 719 ( 0.00%) 458589 ( 0.00%) 637.82
unreal 204 ( 0.00%) 65306 ( 0.00%) 320.13
quake 63 ( 0.00%) 27739 ( 0.00%) 440.30
cuseeme 6 ( 0.00%) 1123 ( 0.00%) 187.17
other 5172984 ( 16.75%) 2588258406 ( 11.03%) 500.34
icmp 2310972 ( 7.48%) 243357266 ( 1.04%) 105.31
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2872 ( 0.01%) 982176 ( 0.00%) 341.98
ip6 1622573 ( 5.26%) 1263309318 ( 5.38%) 778.58
pim 344 ( 0.00%) 20640 ( 0.00%) 60.00
other 20181 ( 0.07%) 2639584 ( 0.01%) 130.80
frag 11909 ( 0.04%) 8951342 ( 0.04%) 751.65
ip6 246875 ( 0.80%) 81025908 ( 0.35%) 328.21
tcp6 141309 ( 0.46%) 51391046 ( 0.22%) 363.68
http(s) 4035 ( 0.01%) 3900226 ( 0.02%) 966.60
http(c) 20447 ( 0.07%) 1892236 ( 0.01%) 92.54
smtp 127 ( 0.00%) 21694 ( 0.00%) 170.82
ftp 23 ( 0.00%) 2211 ( 0.00%) 96.13
dns 208 ( 0.00%) 33161 ( 0.00%) 159.43
bgp 90 ( 0.00%) 15224 ( 0.00%) 169.16
other 116379 ( 0.38%) 45526294 ( 0.19%) 391.19
udp6 72245 ( 0.23%) 24408050 ( 0.10%) 337.85
dns 44591 ( 0.14%) 10235271 ( 0.04%) 229.54
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 3 ( 0.00%) 307 ( 0.00%) 102.33
other 27650 ( 0.09%) 14172365 ( 0.06%) 512.56
icmp6 32105 ( 0.10%) 4334313 ( 0.02%) 135.00
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 1103 ( 0.00%) 877107 ( 0.00%) 795.20
tcpdump file: 201203312245.dump.gz (721.38 MB)