Traffic Trace Info
DumpFile: 201203312315.dump
FileSize: 3344.43MB
Id: 201203312315
StartTime: Sat Mar 31 23:15:01 2012
EndTime: Sat Mar 31 23:30:01 2012
TotalTime: 900.01 seconds
TotalCapSize: -1479.09MB CapLen: 96 bytes
# of packets: 47678224 (36875.17MB)
AvgRate: 343.70Mbps stddev:57.39M
IP flow (unique src/dst pair) Information
# of flows: 2126671 (avg. 22.42 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.3% 3.7% 3.2% 3.1% 2.7% 1.6% 1.5% 1.3% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 1604808
Top 10 bandwidth usage (bytes/total in %):
14.3% 12.3% 9.5% 8.3% 7.9% 6.7% 4.9% 4.3% 3.7% 3.7%
# of IPv6 addresses: 6311
Top 10 bandwidth usage (bytes/total in %):
97.8% 97.7% 1.0% 1.0% 0.3% 0.3% 0.2% 0.2% 0.1% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203312315.pktlen.png)
detailed numbers
[ 32- 63]: 7048516
[ 64- 127]: 12454944
[ 128- 255]: 1386005
[ 256- 511]: 712867
[ 512- 1023]: 1308602
[ 1024- 2047]: 24767290
Protocol Breakdown
![[protocol breakdown chart]](201203312315.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 47678224 (100.00%) 38666414188 (100.00%) 810.99
ip 44407416 ( 93.14%) 34200076565 ( 88.45%) 770.14
tcp 27639655 ( 57.97%) 24873016545 ( 64.33%) 899.90
http(s) 12974856 ( 27.21%) 17905873187 ( 46.31%) 1380.04
http(c) 6431014 ( 13.49%) 652176587 ( 1.69%) 101.41
squid 102776 ( 0.22%) 79841059 ( 0.21%) 776.85
smtp 36807 ( 0.08%) 5792204 ( 0.01%) 157.37
nntp 38 ( 0.00%) 2366 ( 0.00%) 62.26
ftp 9300 ( 0.02%) 901198 ( 0.00%) 96.90
pop3 1780 ( 0.00%) 713309 ( 0.00%) 400.74
imap 1341 ( 0.00%) 678526 ( 0.00%) 505.99
telnet 23701 ( 0.05%) 1743346 ( 0.00%) 73.56
ssh 123652 ( 0.26%) 25610973 ( 0.07%) 207.12
dns 1798 ( 0.00%) 129592 ( 0.00%) 72.08
bgp 629 ( 0.00%) 111291 ( 0.00%) 176.93
napster 27 ( 0.00%) 2724 ( 0.00%) 100.89
realaud 494 ( 0.00%) 55004 ( 0.00%) 111.34
icecast 1035 ( 0.00%) 127924 ( 0.00%) 123.60
hotline 2 ( 0.00%) 122 ( 0.00%) 61.00
other 7930405 ( 16.63%) 6199257133 ( 16.03%) 781.71
udp 12840022 ( 26.93%) 7737041999 ( 20.01%) 602.57
dns 364122 ( 0.76%) 73941688 ( 0.19%) 203.07
rip 1 ( 0.00%) 186 ( 0.00%) 186.00
realaud 9 ( 0.00%) 781 ( 0.00%) 86.78
halflif 64 ( 0.00%) 10247 ( 0.00%) 160.11
starcra 62 ( 0.00%) 10488 ( 0.00%) 169.16
everque 261 ( 0.00%) 63852 ( 0.00%) 244.64
unreal 469 ( 0.00%) 315683 ( 0.00%) 673.10
quake 11 ( 0.00%) 1082 ( 0.00%) 98.36
cuseeme 33 ( 0.00%) 5765 ( 0.00%) 174.70
other 12462547 ( 26.14%) 7661885858 ( 19.82%) 614.79
icmp 2169499 ( 4.55%) 236494425 ( 0.61%) 109.01
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2876 ( 0.01%) 991512 ( 0.00%) 344.75
ip6 1730195 ( 3.63%) 1349222633 ( 3.49%) 779.81
pim 280 ( 0.00%) 16800 ( 0.00%) 60.00
other 24705 ( 0.05%) 3273491 ( 0.01%) 132.50
frag 33404 ( 0.07%) 25525498 ( 0.07%) 764.14
ip6 3270808 ( 6.86%) 4466337623 ( 11.55%) 1365.52
tcp6 3170721 ( 6.65%) 4438009737 ( 11.48%) 1399.68
http(s) 10554 ( 0.02%) 13068859 ( 0.03%) 1238.28
http(c) 20956 ( 0.04%) 1768809 ( 0.00%) 84.41
smtp 449 ( 0.00%) 142574 ( 0.00%) 317.54
ftp 20 ( 0.00%) 2254 ( 0.00%) 112.70
dns 152 ( 0.00%) 21451 ( 0.00%) 141.12
bgp 93 ( 0.00%) 17195 ( 0.00%) 184.89
other 3138497 ( 6.58%) 4422988595 ( 11.44%) 1409.27
udp6 51267 ( 0.11%) 12224041 ( 0.03%) 238.44
dns 43133 ( 0.09%) 9729713 ( 0.03%) 225.57
realaud 1 ( 0.00%) 119 ( 0.00%) 119.00
halflif 1 ( 0.00%) 102 ( 0.00%) 102.00
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
other 8131 ( 0.02%) 2494003 ( 0.01%) 306.73
icmp6 32066 ( 0.07%) 4280829 ( 0.01%) 133.50
ip6 87 ( 0.00%) 11816 ( 0.00%) 135.82
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 16636 ( 0.03%) 11806984 ( 0.03%) 709.72
tcpdump file: 201203312315.dump.gz (1030.40 MB)