Traffic Trace Info
DumpFile: 201203300130.dump
FileSize: 2667.38MB
Id: 201203300130
StartTime: Fri Mar 30 01:30:00 2012
EndTime: Fri Mar 30 01:45:00 2012
TotalTime: 899.67 seconds
TotalCapSize: -1990.55MB CapLen: 96 bytes
# of packets: 36825830 (28329.17MB)
AvgRate: 264.13Mbps stddev:43.07M
IP flow (unique src/dst pair) Information
# of flows: 1859917 (avg. 19.80 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.0% 6.0% 4.5% 2.6% 2.2% 2.1% 1.8% 1.6% 1.5% 1.5%
IP address Information
# of IPv4 addresses: 1428766
Top 10 bandwidth usage (bytes/total in %):
18.8% 11.9% 9.8% 7.3% 6.3% 6.3% 5.8% 4.7% 4.7% 3.5%
# of IPv6 addresses: 7181
Top 10 bandwidth usage (bytes/total in %):
74.3% 74.3% 18.7% 17.7% 1.1% 1.0% 0.8% 0.7% 0.7% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300130.pktlen.png)
detailed numbers
[ 32- 63]: 6981710
[ 64- 127]: 8063020
[ 128- 255]: 1459868
[ 256- 511]: 784068
[ 512- 1023]: 943756
[ 1024- 2047]: 18593408
Protocol Breakdown
![[protocol breakdown chart]](201203300130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36825830 (100.00%) 29705283538 (100.00%) 806.64
ip 36103446 ( 98.04%) 28883975816 ( 97.24%) 800.03
tcp 28546627 ( 77.52%) 25693590334 ( 86.50%) 900.06
http(s) 12064732 ( 32.76%) 16768878428 ( 56.45%) 1389.91
http(c) 7375487 ( 20.03%) 1915144682 ( 6.45%) 259.66
squid 1597907 ( 4.34%) 1781612332 ( 6.00%) 1114.97
smtp 34153 ( 0.09%) 6325106 ( 0.02%) 185.20
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 6284 ( 0.02%) 619469 ( 0.00%) 98.58
pop3 896 ( 0.00%) 146156 ( 0.00%) 163.12
imap 2051 ( 0.01%) 810002 ( 0.00%) 394.93
telnet 774 ( 0.00%) 51774 ( 0.00%) 66.89
ssh 745194 ( 2.02%) 111162498 ( 0.37%) 149.17
dns 2406 ( 0.01%) 392685 ( 0.00%) 163.21
bgp 624 ( 0.00%) 109718 ( 0.00%) 175.83
napster 726 ( 0.00%) 45328 ( 0.00%) 62.44
realaud 30 ( 0.00%) 2452 ( 0.00%) 81.73
rtsp 128 ( 0.00%) 22684 ( 0.00%) 177.22
icecast 827 ( 0.00%) 533886 ( 0.00%) 645.57
hotline 14 ( 0.00%) 868 ( 0.00%) 62.00
other 6714388 ( 18.23%) 5107731892 ( 17.19%) 760.71
udp 3985481 ( 10.82%) 1903941950 ( 6.41%) 477.72
dns 517156 ( 1.40%) 165831976 ( 0.56%) 320.66
rip 2 ( 0.00%) 139 ( 0.00%) 69.50
realaud 9 ( 0.00%) 1010 ( 0.00%) 112.22
halflif 45 ( 0.00%) 7595 ( 0.00%) 168.78
starcra 32 ( 0.00%) 3105 ( 0.00%) 97.03
everque 1531 ( 0.00%) 1302437 ( 0.00%) 850.71
unreal 33 ( 0.00%) 4306 ( 0.00%) 130.48
quake 14 ( 0.00%) 1187 ( 0.00%) 84.79
cuseeme 12 ( 0.00%) 1952 ( 0.00%) 162.67
other 3173035 ( 8.62%) 1718113803 ( 5.78%) 541.47
icmp 1766283 ( 4.80%) 163435233 ( 0.55%) 92.53
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 5260 ( 0.01%) 1830504 ( 0.01%) 348.00
ip6 1782770 ( 4.84%) 1118509801 ( 3.77%) 627.40
pim 243 ( 0.00%) 14580 ( 0.00%) 60.00
other 16597 ( 0.05%) 2634144 ( 0.01%) 158.71
frag 678758 ( 1.84%) 541007648 ( 1.82%) 797.06
ip6 722384 ( 1.96%) 821307722 ( 2.76%) 1136.94
tcp6 625327 ( 1.70%) 793697432 ( 2.67%) 1269.25
http(s) 4758 ( 0.01%) 4942583 ( 0.02%) 1038.79
http(c) 22616 ( 0.06%) 1958766 ( 0.01%) 86.61
smtp 844 ( 0.00%) 318510 ( 0.00%) 377.38
dns 376 ( 0.00%) 136960 ( 0.00%) 364.26
bgp 95 ( 0.00%) 15891 ( 0.00%) 167.27
other 596638 ( 1.62%) 786324722 ( 2.65%) 1317.93
udp6 42693 ( 0.12%) 9339656 ( 0.03%) 218.76
dns 39680 ( 0.11%) 8892094 ( 0.03%) 224.10
realaud 1 ( 0.00%) 118 ( 0.00%) 118.00
halflif 1 ( 0.00%) 109 ( 0.00%) 109.00
starcra 1 ( 0.00%) 101 ( 0.00%) 101.00
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
cuseeme 1 ( 0.00%) 118 ( 0.00%) 118.00
other 3007 ( 0.01%) 446900 ( 0.00%) 148.62
icmp6 43053 ( 0.12%) 5438352 ( 0.02%) 126.32
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 11199 ( 0.03%) 12817026 ( 0.04%) 1144.48
tcpdump file: 201203300130.dump.gz (834.70 MB)