Traffic Trace Info
DumpFile: 201203312300.dump
FileSize: 2534.92MB
Id: 201203312300
StartTime: Sat Mar 31 23:00:00 2012
EndTime: Sat Mar 31 23:15:01 2012
TotalTime: 900.37 seconds
TotalCapSize: 1977.20MB CapLen: 96 bytes
# of packets: 36549962 (26862.12MB)
AvgRate: 250.25Mbps stddev:52.94M
IP flow (unique src/dst pair) Information
# of flows: 1970625 (avg. 18.55 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.7% 5.4% 4.0% 3.6% 2.9% 1.4% 1.2% 1.2% 0.9% 0.8%
IP address Information
# of IPv4 addresses: 1507457
Top 10 bandwidth usage (bytes/total in %):
19.1% 13.5% 8.9% 8.6% 7.1% 5.9% 5.6% 4.6% 4.5% 4.0%
# of IPv6 addresses: 6617
Top 10 bandwidth usage (bytes/total in %):
49.7% 49.7% 17.9% 14.9% 7.7% 3.6% 3.5% 3.5% 3.4% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203312300.pktlen.png)
detailed numbers
[ 32- 63]: 6389354
[ 64- 127]: 9427867
[ 128- 255]: 1267978
[ 256- 511]: 665335
[ 512- 1023]: 1074360
[ 1024- 2047]: 17725068
Protocol Breakdown
![[protocol breakdown chart]](201203312300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36549962 (100.00%) 28166975396 (100.00%) 770.64
ip 36207461 ( 99.06%) 27925520032 ( 99.14%) 771.26
tcp 23892209 ( 65.37%) 21693759811 ( 77.02%) 907.98
http(s) 11758727 ( 32.17%) 16116445167 ( 57.22%) 1370.59
http(c) 5245122 ( 14.35%) 692529151 ( 2.46%) 132.03
squid 140582 ( 0.38%) 106872761 ( 0.38%) 760.22
smtp 36892 ( 0.10%) 6603332 ( 0.02%) 178.99
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 9205 ( 0.03%) 887726 ( 0.00%) 96.44
pop3 1720 ( 0.00%) 313915 ( 0.00%) 182.51
imap 1265 ( 0.00%) 432153 ( 0.00%) 341.62
telnet 6278 ( 0.02%) 454157 ( 0.00%) 72.34
ssh 85238 ( 0.23%) 19313607 ( 0.07%) 226.58
dns 2514 ( 0.01%) 226165 ( 0.00%) 89.96
bgp 642 ( 0.00%) 120727 ( 0.00%) 188.05
napster 284 ( 0.00%) 18208 ( 0.00%) 64.11
realaud 105 ( 0.00%) 10277 ( 0.00%) 97.88
rtsp 4 ( 0.00%) 240 ( 0.00%) 60.00
icecast 934 ( 0.00%) 310275 ( 0.00%) 332.20
hotline 1 ( 0.00%) 78 ( 0.00%) 78.00
other 6602684 ( 18.06%) 4749221124 ( 16.86%) 719.29
udp 8390702 ( 22.96%) 4640956614 ( 16.48%) 553.11
dns 389424 ( 1.07%) 80418038 ( 0.29%) 206.51
rip 6 ( 0.00%) 388 ( 0.00%) 64.67
realaud 7 ( 0.00%) 808 ( 0.00%) 115.43
halflif 44 ( 0.00%) 5296 ( 0.00%) 120.36
starcra 26 ( 0.00%) 3562 ( 0.00%) 137.00
everque 470 ( 0.00%) 244222 ( 0.00%) 519.62
unreal 88 ( 0.00%) 64330 ( 0.00%) 731.02
quake 20 ( 0.00%) 3273 ( 0.00%) 163.65
cuseeme 6 ( 0.00%) 1124 ( 0.00%) 187.33
other 8000158 ( 21.89%) 4560134913 ( 16.19%) 570.01
icmp 2173324 ( 5.95%) 239168551 ( 0.85%) 110.05
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2952 ( 0.01%) 1042928 ( 0.00%) 353.30
ip6 1724572 ( 4.72%) 1347552022 ( 4.78%) 781.38
pim 263 ( 0.00%) 15780 ( 0.00%) 60.00
other 23254 ( 0.06%) 3005056 ( 0.01%) 129.23
frag 1973 ( 0.01%) 1628968 ( 0.01%) 825.63
ip6 342501 ( 0.94%) 241455364 ( 0.86%) 704.98
tcp6 232181 ( 0.64%) 208394135 ( 0.74%) 897.55
http(s) 84878 ( 0.23%) 126166960 ( 0.45%) 1486.45
http(c) 18924 ( 0.05%) 1691520 ( 0.01%) 89.38
smtp 168 ( 0.00%) 37566 ( 0.00%) 223.61
dns 242 ( 0.00%) 47230 ( 0.00%) 195.17
bgp 86 ( 0.00%) 14605 ( 0.00%) 169.83
other 127883 ( 0.35%) 80436254 ( 0.29%) 628.98
udp6 68792 ( 0.19%) 22813193 ( 0.08%) 331.63
dns 45501 ( 0.12%) 10288287 ( 0.04%) 226.11
halflif 3 ( 0.00%) 314 ( 0.00%) 104.67
everque 1 ( 0.00%) 159 ( 0.00%) 159.00
unreal 1 ( 0.00%) 111 ( 0.00%) 111.00
other 23286 ( 0.06%) 12524322 ( 0.04%) 537.85
icmp6 33395 ( 0.09%) 4476632 ( 0.02%) 134.05
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 8019 ( 0.02%) 5755912 ( 0.02%) 717.78
tcpdump file: 201203312300.dump.gz (822.89 MB)