Traffic Trace Info
DumpFile: 201203300215.dump
FileSize: 2523.35MB
Id: 201203300215
StartTime: Fri Mar 30 02:15:00 2012
EndTime: Fri Mar 30 02:30:00 2012
TotalTime: 899.63 seconds
TotalCapSize: 1992.61MB CapLen: 96 bytes
# of packets: 34781972 (26846.64MB)
AvgRate: 250.34Mbps stddev:50.88M
IP flow (unique src/dst pair) Information
# of flows: 1963391 (avg. 17.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.5% 4.0% 3.6% 2.5% 2.5% 2.4% 1.8% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1442220
Top 10 bandwidth usage (bytes/total in %):
16.8% 12.2% 10.1% 9.0% 6.5% 6.1% 5.2% 4.3% 4.3% 3.8%
# of IPv6 addresses: 6639
Top 10 bandwidth usage (bytes/total in %):
57.7% 57.7% 23.3% 23.3% 10.3% 7.7% 2.7% 2.5% 2.5% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300215.pktlen.png)
detailed numbers
[ 32- 63]: 6441547
[ 64- 127]: 7659238
[ 128- 255]: 1415348
[ 256- 511]: 878663
[ 512- 1023]: 807069
[ 1024- 2047]: 17580107
Protocol Breakdown
![[protocol breakdown chart]](201203300215.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34781972 (100.00%) 28150737679 (100.00%) 809.35
ip 33765758 ( 97.08%) 26998325531 ( 95.91%) 799.58
tcp 27210349 ( 78.23%) 24342477868 ( 86.47%) 894.60
http(s) 11456682 ( 32.94%) 16024477005 ( 56.92%) 1398.70
http(c) 6696326 ( 19.25%) 1447270177 ( 5.14%) 216.13
squid 1278471 ( 3.68%) 1363855829 ( 4.84%) 1066.79
smtp 38848 ( 0.11%) 10008684 ( 0.04%) 257.64
ftp 5632 ( 0.02%) 558573 ( 0.00%) 99.18
pop3 736 ( 0.00%) 185838 ( 0.00%) 252.50
imap 1593 ( 0.00%) 475814 ( 0.00%) 298.69
telnet 5025 ( 0.01%) 360026 ( 0.00%) 71.65
ssh 515669 ( 1.48%) 77993743 ( 0.28%) 151.25
dns 2522 ( 0.01%) 296719 ( 0.00%) 117.65
bgp 641 ( 0.00%) 109679 ( 0.00%) 171.11
napster 98 ( 0.00%) 6186 ( 0.00%) 63.12
realaud 75 ( 0.00%) 9848 ( 0.00%) 131.31
icecast 507 ( 0.00%) 77515 ( 0.00%) 152.89
hotline 18 ( 0.00%) 1122 ( 0.00%) 62.33
other 7207506 ( 20.72%) 5416791110 ( 19.24%) 751.55
udp 3147176 ( 9.05%) 1357532686 ( 4.82%) 431.35
dns 426456 ( 1.23%) 86476849 ( 0.31%) 202.78
realaud 9 ( 0.00%) 1296 ( 0.00%) 144.00
halflif 49 ( 0.00%) 8257 ( 0.00%) 168.51
starcra 19 ( 0.00%) 1461 ( 0.00%) 76.89
everque 7123 ( 0.02%) 5018365 ( 0.02%) 704.53
unreal 130 ( 0.00%) 66491 ( 0.00%) 511.47
quake 8 ( 0.00%) 710 ( 0.00%) 88.75
cuseeme 2 ( 0.00%) 177 ( 0.00%) 88.50
other 2712965 ( 7.80%) 1265864365 ( 4.50%) 466.60
icmp 1771365 ( 5.09%) 167553119 ( 0.60%) 94.59
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 11872 ( 0.03%) 4095184 ( 0.01%) 344.94
ip6 1561354 ( 4.49%) 1052302212 ( 3.74%) 673.97
pim 228 ( 0.00%) 13680 ( 0.00%) 60.00
other 63229 ( 0.18%) 74331512 ( 0.26%) 1175.59
frag 1532 ( 0.00%) 1282175 ( 0.00%) 836.93
ip6 1016214 ( 2.92%) 1152412148 ( 4.09%) 1134.03
tcp6 792531 ( 2.28%) 1019487872 ( 3.62%) 1286.37
http(s) 3939 ( 0.01%) 4272256 ( 0.02%) 1084.60
http(c) 28486 ( 0.08%) 2322454 ( 0.01%) 81.53
smtp 601 ( 0.00%) 227856 ( 0.00%) 379.13
dns 93 ( 0.00%) 13904 ( 0.00%) 149.51
bgp 85 ( 0.00%) 13210 ( 0.00%) 155.41
other 759327 ( 2.18%) 1012638192 ( 3.60%) 1333.60
udp6 65953 ( 0.19%) 41573831 ( 0.15%) 630.36
dns 37159 ( 0.11%) 8828185 ( 0.03%) 237.58
realaud 2 ( 0.00%) 214 ( 0.00%) 107.00
starcra 1 ( 0.00%) 115 ( 0.00%) 115.00
everque 2 ( 0.00%) 213 ( 0.00%) 106.50
other 28789 ( 0.08%) 32745104 ( 0.12%) 1137.42
icmp6 33708 ( 0.10%) 4291570 ( 0.02%) 127.32
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 123908 ( 0.36%) 87043365 ( 0.31%) 702.48
tcpdump file: 201203300215.dump.gz (789.91 MB)