Traffic Trace Info
DumpFile: 201203300245.dump
FileSize: 2239.57MB
Id: 201203300245
StartTime: Fri Mar 30 02:45:00 2012
EndTime: Fri Mar 30 03:00:01 2012
TotalTime: 900.43 seconds
TotalCapSize: 1776.38MB CapLen: 96 bytes
# of packets: 30355041 (21605.64MB)
AvgRate: 201.29Mbps stddev:24.88M
IP flow (unique src/dst pair) Information
# of flows: 2468244 (avg. 12.30 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.5% 4.9% 4.6% 3.5% 2.4% 2.3% 1.6% 1.4% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1596095
Top 10 bandwidth usage (bytes/total in %):
12.4% 9.7% 7.5% 6.9% 6.0% 5.8% 5.7% 5.3% 5.0% 4.9%
# of IPv6 addresses: 6464
Top 10 bandwidth usage (bytes/total in %):
81.1% 81.1% 3.8% 3.8% 3.8% 3.3% 2.5% 2.4% 1.9% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300245.pktlen.png)
detailed numbers
[ 32- 63]: 5557905
[ 64- 127]: 8117632
[ 128- 255]: 1231125
[ 256- 511]: 671826
[ 512- 1023]: 685290
[ 1024- 2047]: 14091263
Protocol Breakdown
![[protocol breakdown chart]](201203300245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30355041 (100.00%) 22655159888 (100.00%) 746.34
ip 29726980 ( 97.93%) 21990016536 ( 97.06%) 739.73
tcp 23293240 ( 76.74%) 19531320675 ( 86.21%) 838.50
http(s) 8573763 ( 28.24%) 11183293311 ( 49.36%) 1304.36
http(c) 5187123 ( 17.09%) 1120788719 ( 4.95%) 216.07
squid 1107522 ( 3.65%) 1235004448 ( 5.45%) 1115.11
smtp 45289 ( 0.15%) 15825149 ( 0.07%) 349.43
ftp 6797 ( 0.02%) 711609 ( 0.00%) 104.69
pop3 731 ( 0.00%) 185529 ( 0.00%) 253.80
imap 1285 ( 0.00%) 356270 ( 0.00%) 277.25
telnet 7246 ( 0.02%) 512804 ( 0.00%) 70.77
ssh 421886 ( 1.39%) 63241544 ( 0.28%) 149.90
dns 2099 ( 0.01%) 279433 ( 0.00%) 133.13
bgp 638 ( 0.00%) 121011 ( 0.00%) 189.67
napster 43 ( 0.00%) 2816 ( 0.00%) 65.49
realaud 54 ( 0.00%) 9144 ( 0.00%) 169.33
rtsp 2 ( 0.00%) 124 ( 0.00%) 62.00
icecast 789 ( 0.00%) 99593 ( 0.00%) 126.23
hotline 35 ( 0.00%) 3490 ( 0.00%) 99.71
other 7937938 ( 26.15%) 5910885681 ( 26.09%) 744.64
udp 2804368 ( 9.24%) 1114934366 ( 4.92%) 397.57
dns 257733 ( 0.85%) 55159925 ( 0.24%) 214.02
realaud 6 ( 0.00%) 842 ( 0.00%) 140.33
halflif 43 ( 0.00%) 8036 ( 0.00%) 186.88
starcra 26 ( 0.00%) 2150 ( 0.00%) 82.69
everque 9525 ( 0.03%) 8889554 ( 0.04%) 933.29
unreal 54 ( 0.00%) 23068 ( 0.00%) 427.19
quake 15 ( 0.00%) 2157 ( 0.00%) 143.80
cuseeme 1 ( 0.00%) 88 ( 0.00%) 88.00
other 2536639 ( 8.36%) 1050792885 ( 4.64%) 414.25
icmp 1787161 ( 5.89%) 184085945 ( 0.81%) 103.00
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 16671 ( 0.05%) 8399818 ( 0.04%) 503.86
ip6 1750118 ( 5.77%) 1061984730 ( 4.69%) 606.81
pim 249 ( 0.00%) 14940 ( 0.00%) 60.00
other 74988 ( 0.25%) 89256792 ( 0.39%) 1190.28
frag 2217 ( 0.01%) 1826156 ( 0.01%) 823.71
ip6 628061 ( 2.07%) 665143352 ( 2.94%) 1059.04
tcp6 539310 ( 1.78%) 637643087 ( 2.81%) 1182.33
http(s) 6815 ( 0.02%) 7380435 ( 0.03%) 1082.97
http(c) 16284 ( 0.05%) 1789429 ( 0.01%) 109.89
smtp 662 ( 0.00%) 282106 ( 0.00%) 426.14
ftp 4 ( 0.00%) 478 ( 0.00%) 119.50
dns 152 ( 0.00%) 18000 ( 0.00%) 118.42
bgp 88 ( 0.00%) 15641 ( 0.00%) 177.74
other 515305 ( 1.70%) 628156998 ( 2.77%) 1219.00
udp6 40024 ( 0.13%) 10889687 ( 0.05%) 272.08
dns 35762 ( 0.12%) 8635149 ( 0.04%) 241.46
everque 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 2 ( 0.00%) 186 ( 0.00%) 93.00
other 4259 ( 0.01%) 2254246 ( 0.01%) 529.29
icmp6 30628 ( 0.10%) 3873834 ( 0.02%) 126.48
ip6 86 ( 0.00%) 11698 ( 0.00%) 136.02
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 17982 ( 0.06%) 12720830 ( 0.06%) 707.42
tcpdump file: 201203300245.dump.gz (707.46 MB)