Traffic Trace Info
DumpFile: 201203300230.dump
FileSize: 2202.15MB
Id: 201203300230
StartTime: Fri Mar 30 02:30:00 2012
EndTime: Fri Mar 30 02:45:00 2012
TotalTime: 900.38 seconds
TotalCapSize: 1738.63MB CapLen: 96 bytes
# of packets: 30377252 (22307.76MB)
AvgRate: 207.83Mbps stddev:32.86M
IP flow (unique src/dst pair) Information
# of flows: 1920108 (avg. 15.82 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 4.6% 3.1% 2.5% 2.4% 2.3% 1.5% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1491398
Top 10 bandwidth usage (bytes/total in %):
11.3% 9.7% 8.4% 8.0% 7.8% 5.9% 4.9% 4.9% 4.9% 4.8%
# of IPv6 addresses: 6643
Top 10 bandwidth usage (bytes/total in %):
75.0% 75.0% 13.0% 10.7% 4.0% 4.0% 2.1% 1.6% 1.5% 1.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300230.pktlen.png)
detailed numbers
[ 32- 63]: 5790388
[ 64- 127]: 7203609
[ 128- 255]: 1374570
[ 256- 511]: 770685
[ 512- 1023]: 609207
[ 1024- 2047]: 14628793
Protocol Breakdown
![[protocol breakdown chart]](201203300230.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30377252 (100.00%) 23391381715 (100.00%) 770.03
ip 29621672 ( 97.51%) 22624292437 ( 96.72%) 763.77
tcp 22709643 ( 74.76%) 19540855345 ( 83.54%) 860.47
http(s) 9438504 ( 31.07%) 13195553100 ( 56.41%) 1398.06
http(c) 5855827 ( 19.28%) 1228322198 ( 5.25%) 209.76
squid 1196381 ( 3.94%) 1307853644 ( 5.59%) 1093.17
smtp 69614 ( 0.23%) 8226285 ( 0.04%) 118.17
nntp 7 ( 0.00%) 434 ( 0.00%) 62.00
ftp 8750 ( 0.03%) 818858 ( 0.00%) 93.58
pop3 722 ( 0.00%) 180013 ( 0.00%) 249.33
imap 1179 ( 0.00%) 185890 ( 0.00%) 157.67
telnet 5455 ( 0.02%) 388127 ( 0.00%) 71.15
ssh 459280 ( 1.51%) 69581670 ( 0.30%) 151.50
dns 2388 ( 0.01%) 281616 ( 0.00%) 117.93
bgp 620 ( 0.00%) 109908 ( 0.00%) 177.27
napster 39 ( 0.00%) 3015 ( 0.00%) 77.31
realaud 94 ( 0.00%) 9053 ( 0.00%) 96.31
icecast 1111 ( 0.00%) 548741 ( 0.00%) 493.92
hotline 3 ( 0.00%) 194 ( 0.00%) 64.67
other 5669669 ( 18.66%) 3728792599 ( 15.94%) 657.67
udp 3362926 ( 11.07%) 1653716685 ( 7.07%) 491.75
dns 292679 ( 0.96%) 61282872 ( 0.26%) 209.39
realaud 8 ( 0.00%) 1391 ( 0.00%) 173.88
halflif 63 ( 0.00%) 8588 ( 0.00%) 136.32
starcra 28 ( 0.00%) 2499 ( 0.00%) 89.25
everque 17889 ( 0.06%) 16668622 ( 0.07%) 931.78
unreal 81 ( 0.00%) 36785 ( 0.00%) 454.14
quake 13 ( 0.00%) 1295 ( 0.00%) 99.62
other 3051707 ( 10.05%) 1575606683 ( 6.74%) 516.30
icmp 1738832 ( 5.72%) 175839745 ( 0.75%) 101.13
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 14727 ( 0.05%) 7108522 ( 0.03%) 482.69
ip6 1779075 ( 5.86%) 1244199717 ( 5.32%) 699.35
pim 209 ( 0.00%) 12540 ( 0.00%) 60.00
other 16075 ( 0.05%) 2540613 ( 0.01%) 158.05
frag 1569 ( 0.01%) 1350399 ( 0.01%) 860.67
ip6 755580 ( 2.49%) 767089278 ( 3.28%) 1015.23
tcp6 565347 ( 1.86%) 669661445 ( 2.86%) 1184.51
http(s) 5317 ( 0.02%) 6385384 ( 0.03%) 1200.94
http(c) 30211 ( 0.10%) 2531429 ( 0.01%) 83.79
smtp 661 ( 0.00%) 316960 ( 0.00%) 479.52
ftp 23 ( 0.00%) 1835 ( 0.00%) 79.78
dns 284 ( 0.00%) 58792 ( 0.00%) 207.01
bgp 93 ( 0.00%) 17838 ( 0.00%) 191.81
other 528758 ( 1.74%) 660349207 ( 2.82%) 1248.87
udp6 42329 ( 0.14%) 11331290 ( 0.05%) 267.70
dns 38294 ( 0.13%) 9260879 ( 0.04%) 241.84
realaud 1 ( 0.00%) 104 ( 0.00%) 104.00
halflif 1 ( 0.00%) 107 ( 0.00%) 107.00
everque 1 ( 0.00%) 101 ( 0.00%) 101.00
cuseeme 1 ( 0.00%) 101 ( 0.00%) 101.00
other 4031 ( 0.01%) 2069998 ( 0.01%) 513.52
icmp6 30928 ( 0.10%) 3952947 ( 0.02%) 127.81
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 116863 ( 0.38%) 82128222 ( 0.35%) 702.77
tcpdump file: 201203300230.dump.gz (703.51 MB)