Traffic Trace Info
DumpFile: 201203300000.dump
FileSize: 2716.32MB
Id: 201203300000
StartTime: Fri Mar 30 00:00:00 2012
EndTime: Fri Mar 30 00:15:00 2012
TotalTime: 900.03 seconds
TotalCapSize: -1954.35MB CapLen: 96 bytes
# of packets: 37661325 (29103.59MB)
AvgRate: 271.11Mbps stddev:46.81M
IP flow (unique src/dst pair) Information
# of flows: 1949698 (avg. 19.32 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.0% 4.3% 3.2% 2.1% 1.9% 1.4% 1.3% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 1494673
Top 10 bandwidth usage (bytes/total in %):
14.6% 9.2% 9.2% 9.2% 9.1% 5.6% 4.9% 4.4% 4.4% 4.0%
# of IPv6 addresses: 7254
Top 10 bandwidth usage (bytes/total in %):
41.9% 40.0% 15.7% 8.6% 5.8% 4.5% 3.7% 3.2% 3.2% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300000.pktlen.png)
detailed numbers
[ 32- 63]: 6776481
[ 64- 127]: 8508232
[ 128- 255]: 1502022
[ 256- 511]: 851203
[ 512- 1023]: 952099
[ 1024- 2047]: 19071288
Protocol Breakdown
![[protocol breakdown chart]](201203300000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37661325 (100.00%) 30517322595 (100.00%) 810.31
ip 37439197 ( 99.41%) 30413585068 ( 99.66%) 812.35
tcp 30806865 ( 81.80%) 27739499329 ( 90.90%) 900.43
http(s) 15222569 ( 40.42%) 21330527354 ( 69.90%) 1401.24
http(c) 8342075 ( 22.15%) 1502548699 ( 4.92%) 180.12
squid 1328178 ( 3.53%) 1446223925 ( 4.74%) 1088.88
smtp 57743 ( 0.15%) 15240967 ( 0.05%) 263.94
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 42535 ( 0.11%) 3555063 ( 0.01%) 83.58
pop3 1030 ( 0.00%) 161716 ( 0.00%) 157.01
imap 1521 ( 0.00%) 487737 ( 0.00%) 320.67
telnet 2928 ( 0.01%) 215482 ( 0.00%) 73.59
ssh 1039996 ( 2.76%) 158879541 ( 0.52%) 152.77
dns 2756 ( 0.01%) 406559 ( 0.00%) 147.52
bgp 643 ( 0.00%) 119344 ( 0.00%) 185.60
napster 93 ( 0.00%) 7129 ( 0.00%) 76.66
realaud 44 ( 0.00%) 3737 ( 0.00%) 84.93
rtsp 20 ( 0.00%) 1200 ( 0.00%) 60.00
icecast 11885 ( 0.03%) 6687407 ( 0.02%) 562.68
other 4752837 ( 12.62%) 3274432721 ( 10.73%) 688.94
udp 3026339 ( 8.04%) 1165156850 ( 3.82%) 385.01
dns 463266 ( 1.23%) 156588323 ( 0.51%) 338.01
rip 2 ( 0.00%) 157 ( 0.00%) 78.50
realaud 18 ( 0.00%) 4688 ( 0.00%) 260.44
halflif 47 ( 0.00%) 6031 ( 0.00%) 128.32
starcra 22 ( 0.00%) 2592 ( 0.00%) 117.82
everque 406 ( 0.00%) 79271 ( 0.00%) 195.25
unreal 189 ( 0.00%) 118252 ( 0.00%) 625.67
quake 8 ( 0.00%) 959 ( 0.00%) 119.88
cuseeme 5 ( 0.00%) 377 ( 0.00%) 75.40
other 2559989 ( 6.80%) 1007098015 ( 3.30%) 393.40
icmp 2020539 ( 5.37%) 186448744 ( 0.61%) 92.28
ipip 183 ( 0.00%) 19062 ( 0.00%) 104.16
ipsec 2442 ( 0.01%) 774380 ( 0.00%) 317.11
ip6 1564962 ( 4.16%) 1317271699 ( 4.32%) 841.73
pim 193 ( 0.00%) 11580 ( 0.00%) 60.00
other 17674 ( 0.05%) 4403424 ( 0.01%) 249.15
frag 54439 ( 0.14%) 66135220 ( 0.22%) 1214.85
ip6 222128 ( 0.59%) 103737527 ( 0.34%) 467.02
tcp6 119223 ( 0.32%) 74058393 ( 0.24%) 621.18
http(s) 40057 ( 0.11%) 56010416 ( 0.18%) 1398.27
http(c) 21377 ( 0.06%) 1971463 ( 0.01%) 92.22
smtp 950 ( 0.00%) 791143 ( 0.00%) 832.78
dns 548 ( 0.00%) 234068 ( 0.00%) 427.13
bgp 96 ( 0.00%) 20229 ( 0.00%) 210.72
other 56195 ( 0.15%) 15031074 ( 0.05%) 267.48
udp6 50506 ( 0.13%) 11167442 ( 0.04%) 221.11
dns 47813 ( 0.13%) 10743745 ( 0.04%) 224.70
realaud 1 ( 0.00%) 102 ( 0.00%) 102.00
halflif 4 ( 0.00%) 368 ( 0.00%) 92.00
unreal 18 ( 0.00%) 3335 ( 0.00%) 185.28
other 2670 ( 0.01%) 419892 ( 0.00%) 157.26
icmp6 40589 ( 0.11%) 5176450 ( 0.02%) 127.53
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 11696 ( 0.03%) 13319732 ( 0.04%) 1138.83
tcpdump file: 201203300000.dump.gz (886.58 MB)