Traffic Trace Info
DumpFile: 201203300015.dump
FileSize: 2792.49MB
Id: 201203300015
StartTime: Fri Mar 30 00:15:00 2012
EndTime: Fri Mar 30 00:30:00 2012
TotalTime: 899.80 seconds
TotalCapSize: -1894.55MB CapLen: 96 bytes
# of packets: 38734068 (29754.77MB)
AvgRate: 277.38Mbps stddev:58.15M
IP flow (unique src/dst pair) Information
# of flows: 2054512 (avg. 18.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 3.3% 3.0% 2.7% 2.1% 2.1% 1.7% 1.5% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 1510868
Top 10 bandwidth usage (bytes/total in %):
13.7% 10.1% 9.6% 7.1% 7.0% 5.7% 4.4% 4.4% 3.4% 3.4%
# of IPv6 addresses: 7111
Top 10 bandwidth usage (bytes/total in %):
77.0% 77.0% 9.6% 9.1% 4.7% 1.5% 1.4% 1.2% 0.9% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300015.pktlen.png)
detailed numbers
[ 32- 63]: 7076402
[ 64- 127]: 8829221
[ 128- 255]: 1510185
[ 256- 511]: 854263
[ 512- 1023]: 968204
[ 1024- 2047]: 19495793
Protocol Breakdown
![[protocol breakdown chart]](201203300015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38734068 (100.00%) 31200139114 (100.00%) 805.50
ip 38273143 ( 98.81%) 30735172379 ( 98.51%) 803.05
tcp 31434194 ( 81.15%) 27838630601 ( 89.23%) 885.62
http(s) 13897030 ( 35.88%) 19354180144 ( 62.03%) 1392.68
http(c) 8254639 ( 21.31%) 1403238012 ( 4.50%) 169.99
squid 1860425 ( 4.80%) 2080007972 ( 6.67%) 1118.03
smtp 41654 ( 0.11%) 10466929 ( 0.03%) 251.28
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 41077 ( 0.11%) 3399435 ( 0.01%) 82.76
pop3 1035 ( 0.00%) 162182 ( 0.00%) 156.70
imap 2688 ( 0.01%) 1164534 ( 0.00%) 433.23
telnet 7520 ( 0.02%) 4709508 ( 0.02%) 626.26
ssh 944420 ( 2.44%) 143900932 ( 0.46%) 152.37
dns 2770 ( 0.01%) 399553 ( 0.00%) 144.24
bgp 655 ( 0.00%) 128798 ( 0.00%) 196.64
napster 33 ( 0.00%) 2538 ( 0.00%) 76.91
realaud 37 ( 0.00%) 3885 ( 0.00%) 105.00
rtsp 71 ( 0.00%) 17518 ( 0.00%) 246.73
icecast 3678 ( 0.01%) 1797360 ( 0.01%) 488.68
hotline 16 ( 0.00%) 1376 ( 0.00%) 86.00
other 6376434 ( 16.46%) 4835049177 ( 15.50%) 758.27
udp 3294346 ( 8.51%) 1574871004 ( 5.05%) 478.05
dns 441724 ( 1.14%) 152719190 ( 0.49%) 345.73
realaud 66 ( 0.00%) 7266 ( 0.00%) 110.09
halflif 87 ( 0.00%) 13832 ( 0.00%) 158.99
starcra 43 ( 0.00%) 9094 ( 0.00%) 211.49
everque 397 ( 0.00%) 69493 ( 0.00%) 175.05
unreal 230 ( 0.00%) 160085 ( 0.00%) 696.02
quake 19 ( 0.00%) 2153 ( 0.00%) 113.32
cuseeme 2 ( 0.00%) 885 ( 0.00%) 442.50
other 2850669 ( 7.36%) 1420642302 ( 4.55%) 498.35
icmp 1901456 ( 4.91%) 176187585 ( 0.56%) 92.66
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2644 ( 0.01%) 849992 ( 0.00%) 321.48
ip6 1622450 ( 4.19%) 1140353168 ( 3.65%) 702.86
pim 244 ( 0.00%) 14640 ( 0.00%) 60.00
other 17624 ( 0.05%) 4246119 ( 0.01%) 240.93
frag 45009 ( 0.12%) 58717013 ( 0.19%) 1304.56
ip6 460925 ( 1.19%) 464966735 ( 1.49%) 1008.77
tcp6 359772 ( 0.93%) 435692695 ( 1.40%) 1211.02
http(s) 43553 ( 0.11%) 61234595 ( 0.20%) 1405.98
http(c) 24204 ( 0.06%) 2279840 ( 0.01%) 94.19
smtp 442 ( 0.00%) 252750 ( 0.00%) 571.83
dns 348 ( 0.00%) 155338 ( 0.00%) 446.37
bgp 87 ( 0.00%) 17514 ( 0.00%) 201.31
other 291138 ( 0.75%) 371752658 ( 1.19%) 1276.90
udp6 48843 ( 0.13%) 10533495 ( 0.03%) 215.66
dns 45697 ( 0.12%) 10049762 ( 0.03%) 219.92
realaud 1 ( 0.00%) 103 ( 0.00%) 103.00
halflif 5 ( 0.00%) 477 ( 0.00%) 95.40
everque 2 ( 0.00%) 206 ( 0.00%) 103.00
cuseeme 1 ( 0.00%) 99 ( 0.00%) 99.00
other 3137 ( 0.01%) 482848 ( 0.00%) 153.92
icmp6 39855 ( 0.10%) 5037693 ( 0.02%) 126.40
ip6 86 ( 0.00%) 11698 ( 0.00%) 136.02
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12339 ( 0.03%) 13687074 ( 0.04%) 1109.25
tcpdump file: 201203300015.dump.gz (905.27 MB)