Traffic Trace Info
DumpFile: 201203300045.dump
FileSize: 2835.84MB
Id: 201203300045
StartTime: Fri Mar 30 00:45:00 2012
EndTime: Fri Mar 30 01:00:01 2012
TotalTime: 900.81 seconds
TotalCapSize: -1867.69MB CapLen: 96 bytes
# of packets: 39814737 (31588.89MB)
AvgRate: 294.16Mbps stddev:43.54M
IP flow (unique src/dst pair) Information
# of flows: 1973169 (avg. 20.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.3% 5.3% 3.8% 3.6% 3.4% 3.1% 3.0% 2.9% 2.9% 1.3%
IP address Information
# of IPv4 addresses: 1506819
Top 10 bandwidth usage (bytes/total in %):
17.6% 17.1% 11.1% 9.0% 6.8% 5.5% 5.4% 5.0% 3.9% 3.9%
# of IPv6 addresses: 7347
Top 10 bandwidth usage (bytes/total in %):
27.2% 22.2% 21.6% 19.4% 14.0% 5.1% 5.0% 4.8% 4.3% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300045.pktlen.png)
detailed numbers
[ 32- 63]: 7848571
[ 64- 127]: 7907299
[ 128- 255]: 1405264
[ 256- 511]: 755514
[ 512- 1023]: 1049137
[ 1024- 2047]: 20848952
Protocol Breakdown
![[protocol breakdown chart]](201203300045.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39814737 (100.00%) 33123350419 (100.00%) 831.94
ip 39568617 ( 99.38%) 33002677508 ( 99.64%) 834.06
tcp 33167283 ( 83.30%) 30339827172 ( 91.60%) 914.75
http(s) 15960776 ( 40.09%) 22378398337 ( 67.56%) 1402.09
http(c) 8295916 ( 20.84%) 1330718495 ( 4.02%) 160.41
squid 1865383 ( 4.69%) 2161452666 ( 6.53%) 1158.72
smtp 47082 ( 0.12%) 11462960 ( 0.03%) 243.47
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 37949 ( 0.10%) 3127686 ( 0.01%) 82.42
pop3 1360 ( 0.00%) 186840 ( 0.00%) 137.38
imap 2330 ( 0.01%) 753023 ( 0.00%) 323.19
telnet 1788 ( 0.00%) 130954 ( 0.00%) 73.24
ssh 913033 ( 2.29%) 140399550 ( 0.42%) 153.77
dns 2715 ( 0.01%) 358881 ( 0.00%) 132.18
bgp 639 ( 0.00%) 111963 ( 0.00%) 175.22
napster 36 ( 0.00%) 3370 ( 0.00%) 93.61
rtsp 7 ( 0.00%) 420 ( 0.00%) 60.00
icecast 1044 ( 0.00%) 575482 ( 0.00%) 551.23
hotline 39 ( 0.00%) 4112 ( 0.00%) 105.44
other 6037174 ( 15.16%) 4312141685 ( 13.02%) 714.26
udp 3373000 ( 8.47%) 1575124972 ( 4.76%) 466.98
dns 494523 ( 1.24%) 174412338 ( 0.53%) 352.69
realaud 10 ( 0.00%) 1027 ( 0.00%) 102.70
halflif 73 ( 0.00%) 12447 ( 0.00%) 170.51
starcra 12 ( 0.00%) 1004 ( 0.00%) 83.67
everque 424 ( 0.00%) 87628 ( 0.00%) 206.67
unreal 117 ( 0.00%) 39139 ( 0.00%) 334.52
quake 13 ( 0.00%) 1391 ( 0.00%) 107.00
cuseeme 10 ( 0.00%) 2304 ( 0.00%) 230.40
other 2876706 ( 7.23%) 1399321263 ( 4.22%) 486.43
icmp 1704992 ( 4.28%) 162008504 ( 0.49%) 95.02
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 2605 ( 0.01%) 833982 ( 0.00%) 320.15
ip6 1305385 ( 3.28%) 922454066 ( 2.78%) 706.65
pim 294 ( 0.00%) 17640 ( 0.00%) 60.00
other 14873 ( 0.04%) 2391902 ( 0.01%) 160.82
frag 61558 ( 0.15%) 77253908 ( 0.23%) 1254.98
ip6 246120 ( 0.62%) 120672911 ( 0.36%) 490.30
tcp6 114611 ( 0.29%) 56927359 ( 0.17%) 496.70
http(s) 27647 ( 0.07%) 37622014 ( 0.11%) 1360.80
http(c) 31728 ( 0.08%) 2720215 ( 0.01%) 85.74
squid 882 ( 0.00%) 844426 ( 0.00%) 957.40
smtp 1021 ( 0.00%) 805410 ( 0.00%) 788.84
dns 241 ( 0.00%) 83487 ( 0.00%) 346.42
bgp 97 ( 0.00%) 18518 ( 0.00%) 190.91
other 52995 ( 0.13%) 14833289 ( 0.04%) 279.90
udp6 68377 ( 0.17%) 37649798 ( 0.11%) 550.62
dns 42986 ( 0.11%) 9730335 ( 0.03%) 226.36
starcra 1 ( 0.00%) 102 ( 0.00%) 102.00
everque 4 ( 0.00%) 419 ( 0.00%) 104.75
cuseeme 1 ( 0.00%) 109 ( 0.00%) 109.00
other 25385 ( 0.06%) 27918833 ( 0.08%) 1099.82
icmp6 40601 ( 0.10%) 5101321 ( 0.02%) 125.65
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 22416 ( 0.06%) 20978805 ( 0.06%) 935.89
tcpdump file: 201203300045.dump.gz (912.25 MB)