Traffic Trace Info
DumpFile: 201203311400.dump
FileSize: 2437.75MB
Id: 201203311400
StartTime: Sat Mar 31 14:00:00 2012
EndTime: Sat Mar 31 14:15:00 2012
TotalTime: 900.12 seconds
TotalCapSize: 1913.75MB CapLen: 96 bytes
# of packets: 34340109 (27209.76MB)
AvgRate: 253.62Mbps stddev:48.08M
IP flow (unique src/dst pair) Information
# of flows: 1765080 (avg. 19.46 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 3.4% 3.0% 1.8% 1.3% 1.2% 1.2% 1.1% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1387973
Top 10 bandwidth usage (bytes/total in %):
23.5% 15.4% 9.4% 5.8% 5.5% 5.1% 5.0% 3.5% 3.1% 3.1%
# of IPv6 addresses: 5527
Top 10 bandwidth usage (bytes/total in %):
70.4% 60.3% 5.9% 5.9% 3.8% 3.6% 2.7% 2.2% 2.2% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203311400.pktlen.png)
detailed numbers
[ 32- 63]: 7621775
[ 64- 127]: 6210943
[ 128- 255]: 899620
[ 256- 511]: 708614
[ 512- 1023]: 888898
[ 1024- 2047]: 18010259
Protocol Breakdown
![[protocol breakdown chart]](201203311400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34340109 (100.00%) 28531504020 (100.00%) 830.85
ip 34103915 ( 99.31%) 28379788628 ( 99.47%) 832.16
tcp 27303085 ( 79.51%) 25121532023 ( 88.05%) 920.10
http(s) 13766645 ( 40.09%) 19182093995 ( 67.23%) 1393.37
http(c) 5927472 ( 17.26%) 530245427 ( 1.86%) 89.46
squid 139158 ( 0.41%) 96637256 ( 0.34%) 694.44
smtp 35149 ( 0.10%) 6948783 ( 0.02%) 197.70
nntp 13 ( 0.00%) 822 ( 0.00%) 63.23
ftp 6776 ( 0.02%) 688545 ( 0.00%) 101.62
pop3 1793 ( 0.01%) 558984 ( 0.00%) 311.76
imap 567 ( 0.00%) 93432 ( 0.00%) 164.78
telnet 6550 ( 0.02%) 483373 ( 0.00%) 73.80
ssh 143729 ( 0.42%) 34635989 ( 0.12%) 240.98
dns 2323 ( 0.01%) 279380 ( 0.00%) 120.27
bgp 608 ( 0.00%) 98403 ( 0.00%) 161.85
napster 93 ( 0.00%) 7252 ( 0.00%) 77.98
realaud 49 ( 0.00%) 4252 ( 0.00%) 86.78
rtsp 27097 ( 0.08%) 40355308 ( 0.14%) 1489.29
icecast 24658 ( 0.07%) 14829087 ( 0.05%) 601.39
hotline 23 ( 0.00%) 1422 ( 0.00%) 61.83
other 7220380 ( 21.03%) 5213570193 ( 18.27%) 722.06
udp 3028556 ( 8.82%) 1357807391 ( 4.76%) 448.33
dns 484415 ( 1.41%) 117554858 ( 0.41%) 242.67
realaud 6 ( 0.00%) 790 ( 0.00%) 131.67
halflif 37 ( 0.00%) 3489 ( 0.00%) 94.30
starcra 48 ( 0.00%) 4470 ( 0.00%) 93.12
everque 311 ( 0.00%) 97206 ( 0.00%) 312.56
unreal 116 ( 0.00%) 34050 ( 0.00%) 293.53
quake 10 ( 0.00%) 1070 ( 0.00%) 107.00
cuseeme 4 ( 0.00%) 804 ( 0.00%) 201.00
other 2533749 ( 7.38%) 1239462259 ( 4.34%) 489.18
icmp 1708901 ( 4.98%) 148147407 ( 0.52%) 86.69
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4802 ( 0.01%) 1964028 ( 0.01%) 409.00
ip6 1958680 ( 5.70%) 1707896153 ( 5.99%) 871.96
pim 433 ( 0.00%) 25980 ( 0.00%) 60.00
other 99273 ( 0.29%) 42396376 ( 0.15%) 427.07
frag 23374 ( 0.07%) 17799930 ( 0.06%) 761.53
ip6 236194 ( 0.69%) 151715392 ( 0.53%) 642.33
tcp6 157301 ( 0.46%) 135037474 ( 0.47%) 858.47
http(s) 15254 ( 0.04%) 17714076 ( 0.06%) 1161.27
http(c) 46447 ( 0.14%) 4126606 ( 0.01%) 88.85
smtp 38 ( 0.00%) 23162 ( 0.00%) 609.53
ftp 25 ( 0.00%) 2639 ( 0.00%) 105.56
dns 237 ( 0.00%) 49220 ( 0.00%) 207.68
bgp 92 ( 0.00%) 17967 ( 0.00%) 195.29
other 95208 ( 0.28%) 113103804 ( 0.40%) 1187.97
udp6 50070 ( 0.15%) 12342644 ( 0.04%) 246.51
dns 45417 ( 0.13%) 11058400 ( 0.04%) 243.49
realaud 1 ( 0.00%) 96 ( 0.00%) 96.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
cuseeme 1 ( 0.00%) 105 ( 0.00%) 105.00
other 4650 ( 0.01%) 1283935 ( 0.00%) 276.12
icmp6 28183 ( 0.08%) 3813769 ( 0.01%) 135.32
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 524 ( 0.00%) 505759 ( 0.00%) 965.19
tcpdump file: 201203311400.dump.gz (776.05 MB)