Traffic Trace Info
DumpFile: 201203300300.dump
FileSize: 1959.42MB
Id: 201203300300
StartTime: Fri Mar 30 03:00:01 2012
EndTime: Fri Mar 30 03:15:00 2012
TotalTime: 899.52 seconds
TotalCapSize: 1550.35MB CapLen: 96 bytes
# of packets: 26808386 (20401.88MB)
AvgRate: 207.81Mbps stddev:44.67M
IP flow (unique src/dst pair) Information
# of flows: 1952084 (avg. 13.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 4.5% 3.6% 3.4% 2.1% 1.6% 1.5% 1.4% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1461636
Top 10 bandwidth usage (bytes/total in %):
11.3% 10.8% 8.7% 6.4% 6.0% 5.2% 4.7% 4.7% 4.7% 4.5%
# of IPv6 addresses: 6176
Top 10 bandwidth usage (bytes/total in %):
83.3% 83.3% 3.7% 3.7% 3.5% 1.8% 1.7% 1.7% 1.2% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300300.pktlen.png)
detailed numbers
[ 32- 63]: 4855206
[ 64- 127]: 6042535
[ 128- 255]: 1224718
[ 256- 511]: 743888
[ 512- 1023]: 594059
[ 1024- 2047]: 13347980
Protocol Breakdown
![[protocol breakdown chart]](201203300300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26808386 (100.00%) 21392924428 (100.00%) 797.99
ip 26291402 ( 98.07%) 20855269083 ( 97.49%) 793.24
tcp 21016349 ( 78.39%) 18911506641 ( 88.40%) 899.85
http(s) 8723880 ( 32.54%) 12054709237 ( 56.35%) 1381.81
http(c) 4827569 ( 18.01%) 1125583789 ( 5.26%) 233.16
squid 1021628 ( 3.81%) 1070725740 ( 5.01%) 1048.06
smtp 30969 ( 0.12%) 7087211 ( 0.03%) 228.85
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 8188 ( 0.03%) 853091 ( 0.00%) 104.19
pop3 796 ( 0.00%) 164421 ( 0.00%) 206.56
imap 2539 ( 0.01%) 2441335 ( 0.01%) 961.53
telnet 5492 ( 0.02%) 383862 ( 0.00%) 69.89
ssh 417891 ( 1.56%) 60221510 ( 0.28%) 144.11
dns 4284 ( 0.02%) 1670126 ( 0.01%) 389.85
bgp 584 ( 0.00%) 104904 ( 0.00%) 179.63
napster 11 ( 0.00%) 722 ( 0.00%) 65.64
realaud 57 ( 0.00%) 8898 ( 0.00%) 156.11
rtsp 47 ( 0.00%) 8490 ( 0.00%) 180.64
icecast 751 ( 0.00%) 448893 ( 0.00%) 597.73
hotline 5 ( 0.00%) 789 ( 0.00%) 157.80
other 5971646 ( 22.28%) 4587092875 ( 21.44%) 768.15
udp 2388472 ( 8.91%) 941955922 ( 4.40%) 394.38
dns 281770 ( 1.05%) 58645358 ( 0.27%) 208.13
realaud 25 ( 0.00%) 3528 ( 0.00%) 141.12
halflif 21 ( 0.00%) 2981 ( 0.00%) 141.95
starcra 24 ( 0.00%) 2952 ( 0.00%) 123.00
everque 322 ( 0.00%) 61252 ( 0.00%) 190.22
unreal 91 ( 0.00%) 37269 ( 0.00%) 409.55
quake 8 ( 0.00%) 1202 ( 0.00%) 150.25
cuseeme 3 ( 0.00%) 291 ( 0.00%) 97.00
other 2105947 ( 7.86%) 883148904 ( 4.13%) 419.36
icmp 1629486 ( 6.08%) 168343176 ( 0.79%) 103.31
ipip 171 ( 0.00%) 17802 ( 0.00%) 104.11
ipsec 19823 ( 0.07%) 9833450 ( 0.05%) 496.06
ip6 1217883 ( 4.54%) 819043362 ( 3.83%) 672.51
pim 257 ( 0.00%) 15420 ( 0.00%) 60.00
other 18961 ( 0.07%) 4553310 ( 0.02%) 240.14
frag 1033 ( 0.00%) 882208 ( 0.00%) 854.03
ip6 516984 ( 1.93%) 537655345 ( 2.51%) 1039.98
tcp6 450865 ( 1.68%) 524833781 ( 2.45%) 1164.06
http(s) 10569 ( 0.04%) 12033455 ( 0.06%) 1138.56
http(c) 19794 ( 0.07%) 1656960 ( 0.01%) 83.71
smtp 302 ( 0.00%) 99189 ( 0.00%) 328.44
ftp 3630 ( 0.01%) 393960 ( 0.00%) 108.53
dns 224 ( 0.00%) 50894 ( 0.00%) 227.21
bgp 79 ( 0.00%) 12596 ( 0.00%) 159.44
other 416267 ( 1.55%) 510586727 ( 2.39%) 1226.58
udp6 37532 ( 0.14%) 8828948 ( 0.04%) 235.24
dns 34580 ( 0.13%) 8399644 ( 0.04%) 242.90
realaud 1 ( 0.00%) 90 ( 0.00%) 90.00
starcra 1 ( 0.00%) 93 ( 0.00%) 93.00
everque 2 ( 0.00%) 216 ( 0.00%) 108.00
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
other 2947 ( 0.01%) 428799 ( 0.00%) 145.50
icmp6 28048 ( 0.10%) 3566184 ( 0.02%) 127.15
ip6 79 ( 0.00%) 10722 ( 0.00%) 135.72
pim6 28 ( 0.00%) 3808 ( 0.00%) 136.00
other6 432 ( 0.00%) 411902 ( 0.00%) 953.48
tcpdump file: 201203300300.dump.gz (628.13 MB)