Traffic Trace Info
DumpFile: 201203300100.dump
FileSize: 2757.80MB
Id: 201203300100
StartTime: Fri Mar 30 01:00:01 2012
EndTime: Fri Mar 30 01:15:01 2012
TotalTime: 899.80 seconds
TotalCapSize: -1907.44MB CapLen: 96 bytes
# of packets: 37304952 (29025.69MB)
AvgRate: 270.63Mbps stddev:48.39M
IP flow (unique src/dst pair) Information
# of flows: 2008852 (avg. 18.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.0% 5.8% 4.2% 3.4% 3.3% 2.7% 1.2% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 1510675
Top 10 bandwidth usage (bytes/total in %):
21.3% 15.7% 7.3% 6.4% 6.4% 6.4% 4.6% 4.6% 3.7% 3.6%
# of IPv6 addresses: 7386
Top 10 bandwidth usage (bytes/total in %):
91.3% 82.0% 8.2% 3.3% 3.2% 2.2% 2.2% 0.9% 0.6% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300100.pktlen.png)
detailed numbers
[ 32- 63]: 6036885
[ 64- 127]: 9108640
[ 128- 255]: 1381737
[ 256- 511]: 691308
[ 512- 1023]: 1080194
[ 1024- 2047]: 19006188
Protocol Breakdown
![[protocol breakdown chart]](201203300100.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37304952 (100.00%) 30435646388 (100.00%) 815.86
ip 35654163 ( 95.57%) 28227199082 ( 92.74%) 791.69
tcp 28678749 ( 76.88%) 25561099865 ( 83.98%) 891.29
http(s) 12761377 ( 34.21%) 17684868917 ( 58.11%) 1385.81
http(c) 6965670 ( 18.67%) 1387713411 ( 4.56%) 199.22
squid 1530110 ( 4.10%) 1783398380 ( 5.86%) 1165.54
smtp 44554 ( 0.12%) 9909373 ( 0.03%) 222.41
ftp 7562 ( 0.02%) 687723 ( 0.00%) 90.94
pop3 1160 ( 0.00%) 237529 ( 0.00%) 204.77
imap 2792 ( 0.01%) 1245298 ( 0.00%) 446.02
telnet 942 ( 0.00%) 67102 ( 0.00%) 71.23
ssh 784071 ( 2.10%) 119176971 ( 0.39%) 152.00
dns 2946 ( 0.01%) 379407 ( 0.00%) 128.79
bgp 635 ( 0.00%) 112170 ( 0.00%) 176.65
napster 50 ( 0.00%) 4370 ( 0.00%) 87.40
realaud 24 ( 0.00%) 1492 ( 0.00%) 62.17
icecast 818 ( 0.00%) 517660 ( 0.00%) 632.84
hotline 13 ( 0.00%) 848 ( 0.00%) 65.23
other 6576023 ( 17.63%) 4572779094 ( 15.02%) 695.37
udp 3411080 ( 9.14%) 1525828642 ( 5.01%) 447.32
dns 482523 ( 1.29%) 169879291 ( 0.56%) 352.06
rip 1 ( 0.00%) 68 ( 0.00%) 68.00
realaud 6 ( 0.00%) 508 ( 0.00%) 84.67
halflif 39 ( 0.00%) 4881 ( 0.00%) 125.15
starcra 23 ( 0.00%) 2387 ( 0.00%) 103.78
everque 395 ( 0.00%) 97918 ( 0.00%) 247.89
unreal 503 ( 0.00%) 406445 ( 0.00%) 808.04
quake 16 ( 0.00%) 1342 ( 0.00%) 83.88
cuseeme 6 ( 0.00%) 390 ( 0.00%) 65.00
other 2920778 ( 7.83%) 1353970549 ( 4.45%) 463.57
icmp 1687779 ( 4.52%) 161383537 ( 0.53%) 95.62
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 5096 ( 0.01%) 1822480 ( 0.01%) 357.63
ip6 1852712 ( 4.97%) 972293972 ( 3.19%) 524.79
pim 232 ( 0.00%) 13920 ( 0.00%) 60.00
other 18331 ( 0.05%) 4737506 ( 0.02%) 258.44
frag 73881 ( 0.20%) 86369287 ( 0.28%) 1169.03
ip6 1650789 ( 4.43%) 2208447306 ( 7.26%) 1337.81
tcp6 1490218 ( 3.99%) 2105006185 ( 6.92%) 1412.55
http(s) 25148 ( 0.07%) 33355701 ( 0.11%) 1326.38
http(c) 21880 ( 0.06%) 2116765 ( 0.01%) 96.74
smtp 867 ( 0.00%) 411418 ( 0.00%) 474.53
dns 444 ( 0.00%) 141759 ( 0.00%) 319.28
bgp 95 ( 0.00%) 18703 ( 0.00%) 196.87
other 1441784 ( 3.86%) 2068961839 ( 6.80%) 1435.00
udp6 107229 ( 0.29%) 83990178 ( 0.28%) 783.28
dns 48704 ( 0.13%) 11856669 ( 0.04%) 243.44
realaud 1 ( 0.00%) 105 ( 0.00%) 105.00
halflif 3 ( 0.00%) 291 ( 0.00%) 97.00
starcra 1 ( 0.00%) 97 ( 0.00%) 97.00
unreal 1 ( 0.00%) 133 ( 0.00%) 133.00
other 58519 ( 0.16%) 72132883 ( 0.24%) 1232.64
icmp6 40611 ( 0.11%) 5162067 ( 0.02%) 127.11
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12617 ( 0.03%) 14273384 ( 0.05%) 1131.28
tcpdump file: 201203300100.dump.gz (874.38 MB)