Traffic Trace Info
DumpFile: 201203300115.dump
FileSize: 2944.66MB
Id: 201203300115
StartTime: Fri Mar 30 01:15:01 2012
EndTime: Fri Mar 30 01:30:00 2012
TotalTime: 899.72 seconds
TotalCapSize: -1751.72MB CapLen: 96 bytes
# of packets: 39346225 (32029.18MB)
AvgRate: 298.63Mbps stddev:71.49M
IP flow (unique src/dst pair) Information
# of flows: 1941165 (avg. 20.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.2% 5.3% 3.8% 2.0% 2.0% 1.8% 1.4% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1472478
Top 10 bandwidth usage (bytes/total in %):
17.6% 14.7% 9.1% 8.6% 6.4% 4.6% 4.6% 4.2% 3.1% 3.0%
# of IPv6 addresses: 7320
Top 10 bandwidth usage (bytes/total in %):
91.6% 78.7% 12.8% 4.7% 4.7% 1.3% 1.3% 1.2% 1.2% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300115.pktlen.png)
detailed numbers
[ 32- 63]: 6222012
[ 64- 127]: 8642743
[ 128- 255]: 1412335
[ 256- 511]: 782078
[ 512- 1023]: 1060440
[ 1024- 2047]: 21226617
Protocol Breakdown
![[protocol breakdown chart]](201203300115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39346225 (100.00%) 33585029383 (100.00%) 853.58
ip 35593478 ( 90.46%) 28399550959 ( 84.56%) 797.89
tcp 28955626 ( 73.59%) 25860627631 ( 77.00%) 893.11
http(s) 11679142 ( 29.68%) 16255852886 ( 48.40%) 1391.87
http(c) 6921879 ( 17.59%) 1618132185 ( 4.82%) 233.77
squid 2100945 ( 5.34%) 2397426588 ( 7.14%) 1141.12
smtp 39486 ( 0.10%) 8098268 ( 0.02%) 205.09
nntp 7 ( 0.00%) 434 ( 0.00%) 62.00
ftp 5930 ( 0.02%) 551250 ( 0.00%) 92.96
pop3 918 ( 0.00%) 183488 ( 0.00%) 199.88
imap 1583 ( 0.00%) 354483 ( 0.00%) 223.93
telnet 678 ( 0.00%) 47680 ( 0.00%) 70.32
ssh 794026 ( 2.02%) 116354568 ( 0.35%) 146.54
dns 2705 ( 0.01%) 417310 ( 0.00%) 154.27
bgp 632 ( 0.00%) 111233 ( 0.00%) 176.00
napster 78 ( 0.00%) 6052 ( 0.00%) 77.59
realaud 18 ( 0.00%) 1224 ( 0.00%) 68.00
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 339 ( 0.00%) 57780 ( 0.00%) 170.44
hotline 95 ( 0.00%) 6283 ( 0.00%) 66.14
other 7407163 ( 18.83%) 5463025799 ( 16.27%) 737.53
udp 3258622 ( 8.28%) 1344375305 ( 4.00%) 412.56
dns 526044 ( 1.34%) 175554486 ( 0.52%) 333.73
rip 1 ( 0.00%) 69 ( 0.00%) 69.00
realaud 18 ( 0.00%) 2948 ( 0.00%) 163.78
halflif 61 ( 0.00%) 8156 ( 0.00%) 133.70
starcra 14 ( 0.00%) 1375 ( 0.00%) 98.21
everque 657 ( 0.00%) 171965 ( 0.00%) 261.74
unreal 252 ( 0.00%) 123273 ( 0.00%) 489.18
quake 14 ( 0.00%) 1465 ( 0.00%) 104.64
cuseeme 2 ( 0.00%) 295 ( 0.00%) 147.50
other 2711160 ( 6.89%) 1166140150 ( 3.47%) 430.13
icmp 1725234 ( 4.38%) 164619514 ( 0.49%) 95.42
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 5029 ( 0.01%) 1688366 ( 0.01%) 335.73
ip6 1629927 ( 4.14%) 1023641427 ( 3.05%) 628.03
pim 185 ( 0.00%) 11100 ( 0.00%) 60.00
other 18670 ( 0.05%) 4568346 ( 0.01%) 244.69
frag 100621 ( 0.26%) 106148573 ( 0.32%) 1054.93
ip6 3752747 ( 9.54%) 5185478424 ( 15.44%) 1381.78
tcp6 3652584 ( 9.28%) 5156566616 ( 15.35%) 1411.76
http(s) 10526 ( 0.03%) 12750093 ( 0.04%) 1211.30
http(c) 32809 ( 0.08%) 2842772 ( 0.01%) 86.65
smtp 2147 ( 0.01%) 1608285 ( 0.00%) 749.08
ftp 36 ( 0.00%) 3603 ( 0.00%) 100.08
dns 195 ( 0.00%) 85860 ( 0.00%) 440.31
bgp 92 ( 0.00%) 18478 ( 0.00%) 200.85
other 3606779 ( 9.17%) 5139257525 ( 15.30%) 1424.89
udp6 47086 ( 0.12%) 10765462 ( 0.03%) 228.63
dns 44191 ( 0.11%) 10321664 ( 0.03%) 233.57
realaud 1 ( 0.00%) 105 ( 0.00%) 105.00
halflif 2 ( 0.00%) 184 ( 0.00%) 92.00
starcra 1 ( 0.00%) 108 ( 0.00%) 108.00
everque 1 ( 0.00%) 96 ( 0.00%) 96.00
unreal 1 ( 0.00%) 103 ( 0.00%) 103.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
other 2888 ( 0.01%) 443094 ( 0.00%) 153.43
icmp6 41672 ( 0.11%) 5232362 ( 0.02%) 125.56
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 11289 ( 0.03%) 12898188 ( 0.04%) 1142.54
tcpdump file: 201203300115.dump.gz (903.85 MB)