Traffic Trace Info
DumpFile: 201203292345.dump
FileSize: 2656.31MB
Id: 201203292345
StartTime: Thu Mar 29 23:45:01 2012
EndTime: Fri Mar 30 00:00:00 2012
TotalTime: 899.50 seconds
TotalCapSize: -2003.50MB CapLen: 96 bytes
# of packets: 36949701 (27780.31MB)
AvgRate: 259.13Mbps stddev:53.26M
IP flow (unique src/dst pair) Information
# of flows: 1958519 (avg. 18.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 6.0% 4.7% 3.3% 1.9% 1.7% 1.6% 1.5% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 1473233
Top 10 bandwidth usage (bytes/total in %):
15.0% 9.3% 7.9% 7.1% 6.3% 6.2% 6.1% 5.7% 4.8% 4.8%
# of IPv6 addresses: 7059
Top 10 bandwidth usage (bytes/total in %):
80.2% 74.5% 2.6% 2.5% 2.0% 2.0% 1.8% 1.4% 1.4% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203292345.pktlen.png)
detailed numbers
[ 32- 63]: 6927617
[ 64- 127]: 8551848
[ 128- 255]: 1527026
[ 256- 511]: 840170
[ 512- 1023]: 948349
[ 1024- 2047]: 18154691
Protocol Breakdown
![[protocol breakdown chart]](201203292345.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36949701 (100.00%) 29129763259 (100.00%) 788.36
ip 36593702 ( 99.04%) 28906717195 ( 99.23%) 789.94
tcp 29801973 ( 80.66%) 26209453876 ( 89.97%) 879.45
http(s) 13881346 ( 37.57%) 19245171830 ( 66.07%) 1386.41
http(c) 7482113 ( 20.25%) 1343152672 ( 4.61%) 179.52
squid 1427169 ( 3.86%) 1528944758 ( 5.25%) 1071.31
smtp 51703 ( 0.14%) 20941895 ( 0.07%) 405.04
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 41811 ( 0.11%) 3465808 ( 0.01%) 82.89
pop3 957 ( 0.00%) 167659 ( 0.00%) 175.19
imap 2280 ( 0.01%) 915822 ( 0.00%) 401.68
telnet 2125 ( 0.01%) 155952 ( 0.00%) 73.39
ssh 1352308 ( 3.66%) 213342978 ( 0.73%) 157.76
dns 2828 ( 0.01%) 423826 ( 0.00%) 149.87
bgp 642 ( 0.00%) 125415 ( 0.00%) 195.35
napster 73 ( 0.00%) 7643 ( 0.00%) 104.70
realaud 371 ( 0.00%) 25846 ( 0.00%) 69.67
rtsp 4 ( 0.00%) 248 ( 0.00%) 62.00
icecast 11320 ( 0.03%) 6194724 ( 0.02%) 547.24
hotline 35 ( 0.00%) 4436 ( 0.00%) 126.74
other 5544882 ( 15.01%) 3846411990 ( 13.20%) 693.69
udp 3282723 ( 8.88%) 1363344602 ( 4.68%) 415.31
dns 448899 ( 1.21%) 157107154 ( 0.54%) 349.98
realaud 18 ( 0.00%) 3955 ( 0.00%) 219.72
halflif 28 ( 0.00%) 3599 ( 0.00%) 128.54
starcra 6 ( 0.00%) 1184 ( 0.00%) 197.33
everque 475 ( 0.00%) 164515 ( 0.00%) 346.35
unreal 155 ( 0.00%) 61440 ( 0.00%) 396.39
quake 20 ( 0.00%) 2289 ( 0.00%) 114.45
cuseeme 2 ( 0.00%) 177 ( 0.00%) 88.50
other 2789623 ( 7.55%) 1202170478 ( 4.13%) 430.94
icmp 2037269 ( 5.51%) 188841131 ( 0.65%) 92.69
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2612 ( 0.01%) 841576 ( 0.00%) 322.20
ip6 1452532 ( 3.93%) 1141617266 ( 3.92%) 785.95
pim 184 ( 0.00%) 11040 ( 0.00%) 60.00
other 16225 ( 0.04%) 2588544 ( 0.01%) 159.54
frag 145243 ( 0.39%) 136352743 ( 0.47%) 938.79
ip6 355999 ( 0.96%) 223046064 ( 0.77%) 626.54
tcp6 251872 ( 0.68%) 192823273 ( 0.66%) 765.56
http(s) 119013 ( 0.32%) 173243812 ( 0.59%) 1455.67
http(c) 70828 ( 0.19%) 6245225 ( 0.02%) 88.17
smtp 961 ( 0.00%) 1022344 ( 0.00%) 1063.83
dns 355 ( 0.00%) 117547 ( 0.00%) 331.12
bgp 87 ( 0.00%) 15250 ( 0.00%) 175.29
other 60628 ( 0.16%) 12179095 ( 0.04%) 200.88
udp6 50942 ( 0.14%) 11213372 ( 0.04%) 220.12
dns 45411 ( 0.12%) 10403375 ( 0.04%) 229.09
realaud 2 ( 0.00%) 210 ( 0.00%) 105.00
starcra 2 ( 0.00%) 204 ( 0.00%) 102.00
everque 2 ( 0.00%) 214 ( 0.00%) 107.00
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 2 ( 0.00%) 219 ( 0.00%) 109.50
other 5522 ( 0.01%) 809044 ( 0.00%) 146.51
icmp6 40451 ( 0.11%) 5095439 ( 0.02%) 125.97
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12621 ( 0.03%) 13898606 ( 0.05%) 1101.23
tcpdump file: 201203292345.dump.gz (862.44 MB)