Traffic Trace Info
DumpFile: 201203300030.dump
FileSize: 2741.02MB
Id: 201203300030
StartTime: Fri Mar 30 00:30:00 2012
EndTime: Fri Mar 30 00:45:00 2012
TotalTime: 900.05 seconds
TotalCapSize: -1937.01MB CapLen: 96 bytes
# of packets: 38143104 (29818.91MB)
AvgRate: 277.91Mbps stddev:36.35M
IP flow (unique src/dst pair) Information
# of flows: 1922825 (avg. 19.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.6% 4.1% 3.3% 3.2% 3.0% 1.6% 1.4% 1.3% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1470515
Top 10 bandwidth usage (bytes/total in %):
18.2% 13.3% 12.8% 6.7% 6.5% 5.8% 4.3% 4.2% 4.2% 3.3%
# of IPv6 addresses: 7319
Top 10 bandwidth usage (bytes/total in %):
45.4% 42.2% 7.6% 6.7% 6.5% 4.7% 3.9% 3.4% 3.4% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300030.pktlen.png)
detailed numbers
[ 32- 63]: 6955449
[ 64- 127]: 8429663
[ 128- 255]: 1431695
[ 256- 511]: 737246
[ 512- 1023]: 1056118
[ 1024- 2047]: 19532933
Protocol Breakdown
![[protocol breakdown chart]](201203300030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38143104 (100.00%) 31267398107 (100.00%) 819.74
ip 37925019 ( 99.43%) 31176615565 ( 99.71%) 822.06
tcp 31498412 ( 82.58%) 28472890369 ( 91.06%) 903.95
http(s) 14630846 ( 38.36%) 20491399254 ( 65.54%) 1400.56
http(c) 7985083 ( 20.93%) 1360546384 ( 4.35%) 170.39
squid 1768024 ( 4.64%) 1969213417 ( 6.30%) 1113.79
smtp 40310 ( 0.11%) 9469044 ( 0.03%) 234.91
ftp 41437 ( 0.11%) 3409648 ( 0.01%) 82.29
pop3 1895 ( 0.00%) 439932 ( 0.00%) 232.15
imap 1830 ( 0.00%) 536970 ( 0.00%) 293.43
telnet 2333 ( 0.01%) 170905 ( 0.00%) 73.26
ssh 948877 ( 2.49%) 144691999 ( 0.46%) 152.49
dns 2935 ( 0.01%) 433499 ( 0.00%) 147.70
bgp 646 ( 0.00%) 127904 ( 0.00%) 197.99
napster 234 ( 0.00%) 14884 ( 0.00%) 63.61
realaud 40 ( 0.00%) 4204 ( 0.00%) 105.10
icecast 923 ( 0.00%) 536702 ( 0.00%) 581.48
hotline 56 ( 0.00%) 4303 ( 0.00%) 76.84
other 6072943 ( 15.92%) 4491891320 ( 14.37%) 739.66
udp 3202068 ( 8.39%) 1533987668 ( 4.91%) 479.06
dns 412777 ( 1.08%) 156451777 ( 0.50%) 379.02
realaud 6 ( 0.00%) 1257 ( 0.00%) 209.50
halflif 115 ( 0.00%) 20910 ( 0.00%) 181.83
starcra 16 ( 0.00%) 1651 ( 0.00%) 103.19
everque 388 ( 0.00%) 83469 ( 0.00%) 215.13
unreal 176 ( 0.00%) 74919 ( 0.00%) 425.68
quake 17 ( 0.00%) 1777 ( 0.00%) 104.53
cuseeme 2 ( 0.00%) 191 ( 0.00%) 95.50
other 2787413 ( 7.31%) 1375966862 ( 4.40%) 493.64
icmp 1827663 ( 4.79%) 169247438 ( 0.54%) 92.60
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2622 ( 0.01%) 855124 ( 0.00%) 326.13
ip6 1376799 ( 3.61%) 996050994 ( 3.19%) 723.45
pim 301 ( 0.00%) 18060 ( 0.00%) 60.00
other 16969 ( 0.04%) 3546642 ( 0.01%) 209.01
frag 61237 ( 0.16%) 76559378 ( 0.24%) 1250.21
ip6 218083 ( 0.57%) 90782422 ( 0.29%) 416.27
tcp6 117693 ( 0.31%) 61058178 ( 0.20%) 518.79
http(s) 34098 ( 0.09%) 46881918 ( 0.15%) 1374.92
http(c) 31441 ( 0.08%) 2734219 ( 0.01%) 86.96
smtp 252 ( 0.00%) 143887 ( 0.00%) 570.98
dns 389 ( 0.00%) 150877 ( 0.00%) 387.86
bgp 92 ( 0.00%) 15771 ( 0.00%) 171.42
icecast 3 ( 0.00%) 254 ( 0.00%) 84.67
other 51418 ( 0.13%) 11131252 ( 0.04%) 216.49
udp6 48464 ( 0.13%) 11009036 ( 0.04%) 227.16
dns 44943 ( 0.12%) 9993682 ( 0.03%) 222.36
halflif 1 ( 0.00%) 113 ( 0.00%) 113.00
everque 1 ( 0.00%) 104 ( 0.00%) 104.00
unreal 1 ( 0.00%) 113 ( 0.00%) 113.00
other 3518 ( 0.01%) 1015024 ( 0.00%) 288.52
icmp6 39842 ( 0.10%) 5052827 ( 0.02%) 126.82
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 11972 ( 0.03%) 13647125 ( 0.04%) 1139.92
tcpdump file: 201203300030.dump.gz (895.95 MB)