Traffic Trace Info
DumpFile: 201203300200.dump
FileSize: 2553.35MB
Id: 201203300200
StartTime: Fri Mar 30 02:00:01 2012
EndTime: Fri Mar 30 02:15:00 2012
TotalTime: 899.60 seconds
TotalCapSize: 2016.73MB CapLen: 96 bytes
# of packets: 35167331 (26698.27MB)
AvgRate: 248.90Mbps stddev:36.07M
IP flow (unique src/dst pair) Information
# of flows: 2205660 (avg. 15.94 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 4.6% 4.4% 3.1% 3.0% 2.3% 2.1% 2.0% 1.9% 1.6%
IP address Information
# of IPv4 addresses: 1533849
Top 10 bandwidth usage (bytes/total in %):
14.4% 13.4% 7.2% 6.6% 6.4% 5.7% 4.8% 4.7% 4.7% 4.3%
# of IPv6 addresses: 6852
Top 10 bandwidth usage (bytes/total in %):
83.7% 83.7% 3.5% 2.6% 2.5% 2.5% 1.9% 1.5% 1.5% 1.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300200.pktlen.png)
detailed numbers
[ 32- 63]: 6553458
[ 64- 127]: 7943295
[ 128- 255]: 1554278
[ 256- 511]: 856329
[ 512- 1023]: 789450
[ 1024- 2047]: 17470521
Protocol Breakdown
![[protocol breakdown chart]](201203300200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35167331 (100.00%) 27995161203 (100.00%) 796.06
ip 34568809 ( 98.30%) 27359775151 ( 97.73%) 791.46
tcp 28123379 ( 79.97%) 24775461138 ( 88.50%) 880.96
http(s) 11453489 ( 32.57%) 15658197318 ( 55.93%) 1367.11
http(c) 6978658 ( 19.84%) 1654929604 ( 5.91%) 237.14
squid 1122064 ( 3.19%) 1166560083 ( 4.17%) 1039.66
smtp 37205 ( 0.11%) 7355538 ( 0.03%) 197.70
nntp 7 ( 0.00%) 434 ( 0.00%) 62.00
ftp 6755 ( 0.02%) 687744 ( 0.00%) 101.81
pop3 860 ( 0.00%) 201884 ( 0.00%) 234.75
imap 2224 ( 0.01%) 726291 ( 0.00%) 326.57
telnet 5379 ( 0.02%) 388206 ( 0.00%) 72.17
ssh 555787 ( 1.58%) 84519547 ( 0.30%) 152.07
dns 2715 ( 0.01%) 335008 ( 0.00%) 123.39
bgp 684 ( 0.00%) 152531 ( 0.00%) 223.00
napster 264 ( 0.00%) 16628 ( 0.00%) 62.98
realaud 22 ( 0.00%) 1986 ( 0.00%) 90.27
rtsp 9 ( 0.00%) 548 ( 0.00%) 60.89
icecast 945 ( 0.00%) 530404 ( 0.00%) 561.27
hotline 31 ( 0.00%) 2851 ( 0.00%) 91.97
other 7956281 ( 22.62%) 6200854533 ( 22.15%) 779.37
udp 3061463 ( 8.71%) 1336671508 ( 4.77%) 436.61
dns 433981 ( 1.23%) 88012775 ( 0.31%) 202.80
rip 1 ( 0.00%) 69 ( 0.00%) 69.00
realaud 19 ( 0.00%) 2060 ( 0.00%) 108.42
halflif 133 ( 0.00%) 23261 ( 0.00%) 174.89
starcra 45 ( 0.00%) 4288 ( 0.00%) 95.29
everque 6966 ( 0.02%) 6310060 ( 0.02%) 905.84
unreal 60 ( 0.00%) 19017 ( 0.00%) 316.95
quake 23 ( 0.00%) 2572 ( 0.00%) 111.83
cuseeme 1 ( 0.00%) 87 ( 0.00%) 87.00
other 2619720 ( 7.45%) 1242033582 ( 4.44%) 474.11
icmp 1721634 ( 4.90%) 162439204 ( 0.58%) 94.35
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 10837 ( 0.03%) 4600334 ( 0.02%) 424.50
ip6 1569425 ( 4.46%) 978217864 ( 3.49%) 623.30
pim 239 ( 0.00%) 14340 ( 0.00%) 60.00
other 81648 ( 0.23%) 102351603 ( 0.37%) 1253.57
frag 1993 ( 0.01%) 1893009 ( 0.01%) 949.83
ip6 598522 ( 1.70%) 635386052 ( 2.27%) 1061.59
tcp6 515515 ( 1.47%) 617114775 ( 2.20%) 1197.08
http(s) 12033 ( 0.03%) 16011614 ( 0.06%) 1330.64
http(c) 23138 ( 0.07%) 2019271 ( 0.01%) 87.27
smtp 811 ( 0.00%) 374111 ( 0.00%) 461.30
ftp 40 ( 0.00%) 7729 ( 0.00%) 193.22
dns 350 ( 0.00%) 82124 ( 0.00%) 234.64
bgp 87 ( 0.00%) 14697 ( 0.00%) 168.93
other 479056 ( 1.36%) 598605229 ( 2.14%) 1249.55
udp6 45180 ( 0.13%) 11504621 ( 0.04%) 254.64
dns 41479 ( 0.12%) 10573805 ( 0.04%) 254.92
halflif 2 ( 0.00%) 184 ( 0.00%) 92.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 3697 ( 0.01%) 930417 ( 0.00%) 251.67
icmp6 35615 ( 0.10%) 4588146 ( 0.02%) 128.83
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2099 ( 0.01%) 2163086 ( 0.01%) 1030.53
tcpdump file: 201203300200.dump.gz (804.54 MB)