Traffic Trace Info
DumpFile: 201203312330.dump
FileSize: 2899.17MB
Id: 201203312330
StartTime: Sat Mar 31 23:30:01 2012
EndTime: Sat Mar 31 23:45:01 2012
TotalTime: 899.93 seconds
TotalCapSize: -1839.98MB CapLen: 96 bytes
# of packets: 42148437 (30434.47MB)
AvgRate: 283.63Mbps stddev:53.25M
IP flow (unique src/dst pair) Information
# of flows: 1932636 (avg. 21.81 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.1% 4.9% 2.9% 2.4% 1.7% 1.5% 1.4% 1.3% 1.2% 1.0%
IP address Information
# of IPv4 addresses: 1482866
Top 10 bandwidth usage (bytes/total in %):
12.8% 12.4% 10.6% 10.3% 8.5% 5.4% 4.9% 4.9% 4.4% 4.2%
# of IPv6 addresses: 6533
Top 10 bandwidth usage (bytes/total in %):
98.0% 97.8% 0.6% 0.5% 0.4% 0.3% 0.2% 0.2% 0.1% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203312330.pktlen.png)
detailed numbers
[ 32- 63]: 6284355
[ 64- 127]: 11937543
[ 128- 255]: 1401776
[ 256- 511]: 701563
[ 512- 1023]: 1713980
[ 1024- 2047]: 20109220
Protocol Breakdown
![[protocol breakdown chart]](201203312330.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42148437 (100.00%) 31912857967 (100.00%) 757.15
ip 40372683 ( 95.79%) 29584463294 ( 92.70%) 732.78
tcp 23242288 ( 55.14%) 20021336679 ( 62.74%) 861.42
http(s) 9859322 ( 23.39%) 13436341834 ( 42.10%) 1362.81
http(c) 5149073 ( 12.22%) 458851131 ( 1.44%) 89.11
squid 75978 ( 0.18%) 46010951 ( 0.14%) 605.58
smtp 32294 ( 0.08%) 5681127 ( 0.02%) 175.92
nntp 30 ( 0.00%) 1870 ( 0.00%) 62.33
ftp 10735 ( 0.03%) 1016944 ( 0.00%) 94.73
pop3 1749 ( 0.00%) 362924 ( 0.00%) 207.50
imap 838 ( 0.00%) 144442 ( 0.00%) 172.37
telnet 4825 ( 0.01%) 354071 ( 0.00%) 73.38
ssh 638507 ( 1.51%) 347237410 ( 1.09%) 543.83
dns 2681 ( 0.01%) 305470 ( 0.00%) 113.94
bgp 629 ( 0.00%) 104885 ( 0.00%) 166.75
napster 24 ( 0.00%) 2434 ( 0.00%) 101.42
realaud 478 ( 0.00%) 45537 ( 0.00%) 95.27
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 693 ( 0.00%) 141374 ( 0.00%) 204.00
hotline 12 ( 0.00%) 742 ( 0.00%) 61.83
other 7464418 ( 17.71%) 5724733413 ( 17.94%) 766.94
udp 13229082 ( 31.39%) 7949068354 ( 24.91%) 600.88
dns 418897 ( 0.99%) 84134460 ( 0.26%) 200.85
realaud 105 ( 0.00%) 20623 ( 0.00%) 196.41
halflif 198 ( 0.00%) 41589 ( 0.00%) 210.05
starcra 97 ( 0.00%) 14867 ( 0.00%) 153.27
everque 1307 ( 0.00%) 1104717 ( 0.00%) 845.23
unreal 990 ( 0.00%) 822563 ( 0.00%) 830.87
quake 25 ( 0.00%) 2844 ( 0.00%) 113.76
cuseeme 26 ( 0.00%) 3416 ( 0.00%) 131.38
other 12805510 ( 30.38%) 7862759793 ( 24.64%) 614.01
icmp 2124323 ( 5.04%) 227021870 ( 0.71%) 106.87
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2947 ( 0.01%) 1031138 ( 0.00%) 349.89
ip6 1751022 ( 4.15%) 1383057772 ( 4.33%) 789.86
pim 323 ( 0.00%) 19380 ( 0.00%) 60.00
other 22513 ( 0.05%) 2908831 ( 0.01%) 129.21
frag 6773 ( 0.02%) 5297740 ( 0.02%) 782.19
ip6 1775754 ( 4.21%) 2328394673 ( 7.30%) 1311.21
tcp6 1670461 ( 3.96%) 2299366750 ( 7.21%) 1376.49
http(s) 5306 ( 0.01%) 4997592 ( 0.02%) 941.88
http(c) 13333 ( 0.03%) 1184239 ( 0.00%) 88.82
smtp 775 ( 0.00%) 255189 ( 0.00%) 329.28
ftp 24 ( 0.00%) 1890 ( 0.00%) 78.75
dns 200 ( 0.00%) 48370 ( 0.00%) 241.85
bgp 91 ( 0.00%) 17090 ( 0.00%) 187.80
other 1650732 ( 3.92%) 2292862380 ( 7.18%) 1389.00
udp6 55089 ( 0.13%) 12253349 ( 0.04%) 222.43
dns 44101 ( 0.10%) 9600954 ( 0.03%) 217.70
quake 2 ( 0.00%) 219 ( 0.00%) 109.50
other 10986 ( 0.03%) 2652176 ( 0.01%) 241.41
icmp6 32472 ( 0.08%) 4296972 ( 0.01%) 132.33
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 17620 ( 0.04%) 12462346 ( 0.04%) 707.28
tcpdump file: 201203312330.dump.gz (922.27 MB)