Traffic Trace Info
DumpFile: 201203300145.dump
FileSize: 2531.57MB
Id: 201203300145
StartTime: Fri Mar 30 01:45:00 2012
EndTime: Fri Mar 30 02:00:01 2012
TotalTime: 900.76 seconds
TotalCapSize: 1999.91MB CapLen: 96 bytes
# of packets: 34842687 (26489.88MB)
AvgRate: 246.66Mbps stddev:28.25M
IP flow (unique src/dst pair) Information
# of flows: 2045902 (avg. 17.03 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.0% 6.4% 5.0% 2.8% 2.3% 1.7% 1.7% 1.4% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 1450682
Top 10 bandwidth usage (bytes/total in %):
17.9% 14.7% 14.0% 12.5% 6.7% 5.2% 5.2% 5.2% 3.9% 3.5%
# of IPv6 addresses: 6924
Top 10 bandwidth usage (bytes/total in %):
78.7% 78.7% 11.3% 9.5% 3.0% 3.0% 1.6% 1.4% 0.9% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300145.pktlen.png)
detailed numbers
[ 32- 63]: 6634875
[ 64- 127]: 7766061
[ 128- 255]: 1573431
[ 256- 511]: 604690
[ 512- 1023]: 862776
[ 1024- 2047]: 17400854
Protocol Breakdown
![[protocol breakdown chart]](201203300145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34842687 (100.00%) 27776653143 (100.00%) 797.20
ip 34107514 ( 97.89%) 26950431609 ( 97.03%) 790.16
tcp 27437284 ( 78.75%) 24299273158 ( 87.48%) 885.63
http(s) 11946662 ( 34.29%) 16407552655 ( 59.07%) 1373.40
http(c) 7245218 ( 20.79%) 1604657602 ( 5.78%) 221.48
squid 1278705 ( 3.67%) 1394127565 ( 5.02%) 1090.27
smtp 35873 ( 0.10%) 6117715 ( 0.02%) 170.54
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 6167 ( 0.02%) 619518 ( 0.00%) 100.46
pop3 946 ( 0.00%) 158517 ( 0.00%) 167.57
imap 1559 ( 0.00%) 496376 ( 0.00%) 318.39
telnet 977 ( 0.00%) 64892 ( 0.00%) 66.42
ssh 672583 ( 1.93%) 102205041 ( 0.37%) 151.96
dns 2080 ( 0.01%) 255823 ( 0.00%) 122.99
bgp 617 ( 0.00%) 106023 ( 0.00%) 171.84
napster 161 ( 0.00%) 10760 ( 0.00%) 66.83
realaud 1 ( 0.00%) 70 ( 0.00%) 70.00
rtsp 8 ( 0.00%) 488 ( 0.00%) 61.00
icecast 10246 ( 0.03%) 784655 ( 0.00%) 76.58
hotline 5 ( 0.00%) 312 ( 0.00%) 62.40
other 6235475 ( 17.90%) 4782115086 ( 17.22%) 766.92
udp 3031786 ( 8.70%) 1406114527 ( 5.06%) 463.79
dns 302169 ( 0.87%) 69897034 ( 0.25%) 231.32
realaud 4 ( 0.00%) 644 ( 0.00%) 161.00
halflif 60 ( 0.00%) 11577 ( 0.00%) 192.95
starcra 23 ( 0.00%) 1829 ( 0.00%) 79.52
everque 716 ( 0.00%) 290693 ( 0.00%) 406.00
unreal 16 ( 0.00%) 4170 ( 0.00%) 260.62
quake 18 ( 0.00%) 1762 ( 0.00%) 97.89
cuseeme 5 ( 0.00%) 1398 ( 0.00%) 279.60
other 2728380 ( 7.83%) 1335676303 ( 4.81%) 489.55
icmp 1703301 ( 4.89%) 159172200 ( 0.57%) 93.45
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 12066 ( 0.03%) 5708860 ( 0.02%) 473.14
ip6 1907652 ( 5.48%) 1077754852 ( 3.88%) 564.96
pim 200 ( 0.00%) 12000 ( 0.00%) 60.00
other 15040 ( 0.04%) 2376742 ( 0.01%) 158.03
frag 5001 ( 0.01%) 6035747 ( 0.02%) 1206.91
ip6 735173 ( 2.11%) 826221534 ( 2.97%) 1123.85
tcp6 649472 ( 1.86%) 809302985 ( 2.91%) 1246.09
http(s) 8205 ( 0.02%) 9667617 ( 0.03%) 1178.26
http(c) 17146 ( 0.05%) 1486669 ( 0.01%) 86.71
smtp 1032 ( 0.00%) 386313 ( 0.00%) 374.33
dns 193 ( 0.00%) 53478 ( 0.00%) 277.09
bgp 95 ( 0.00%) 16348 ( 0.00%) 172.08
other 622801 ( 1.79%) 797692560 ( 2.87%) 1280.81
udp6 41222 ( 0.12%) 9404511 ( 0.03%) 228.14
dns 38277 ( 0.11%) 8943535 ( 0.03%) 233.65
realaud 1 ( 0.00%) 114 ( 0.00%) 114.00
halflif 4 ( 0.00%) 399 ( 0.00%) 99.75
unreal 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 2 ( 0.00%) 208 ( 0.00%) 104.00
other 2937 ( 0.01%) 460148 ( 0.00%) 156.67
icmp6 42449 ( 0.12%) 5356869 ( 0.02%) 126.20
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1914 ( 0.01%) 2141441 ( 0.01%) 1118.83
tcpdump file: 201203300145.dump.gz (789.73 MB)