Traffic Trace Info
DumpFile: 201203300315.dump
FileSize: 2022.94MB
Id: 201203300315
StartTime: Fri Mar 30 03:15:00 2012
EndTime: Fri Mar 30 03:30:00 2012
TotalTime: 899.89 seconds
TotalCapSize: 1602.56MB CapLen: 96 bytes
# of packets: 27549823 (20836.36MB)
AvgRate: 194.21Mbps stddev:35.01M
IP flow (unique src/dst pair) Information
# of flows: 2065176 (avg. 13.34 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 4.2% 3.5% 2.4% 2.0% 1.6% 1.5% 1.5% 1.5% 1.5%
IP address Information
# of IPv4 addresses: 1543998
Top 10 bandwidth usage (bytes/total in %):
12.1% 9.2% 6.1% 5.8% 5.4% 5.2% 5.2% 5.1% 5.1% 5.0%
# of IPv6 addresses: 6204
Top 10 bandwidth usage (bytes/total in %):
64.6% 64.6% 28.7% 28.7% 1.9% 1.4% 1.3% 0.7% 0.7% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300315.pktlen.png)
detailed numbers
[ 32- 63]: 4843940
[ 64- 127]: 6434341
[ 128- 255]: 1263318
[ 256- 511]: 674200
[ 512- 1023]: 751837
[ 1024- 2047]: 13582187
Protocol Breakdown
![[protocol breakdown chart]](201203300315.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27549823 (100.00%) 21848511017 (100.00%) 793.05
ip 26554748 ( 96.39%) 20657213599 ( 94.55%) 777.91
tcp 20947602 ( 76.04%) 18535414381 ( 84.84%) 884.85
http(s) 7779798 ( 28.24%) 10758176955 ( 49.24%) 1382.83
http(c) 4933098 ( 17.91%) 1221699701 ( 5.59%) 247.65
squid 1145901 ( 4.16%) 1213240591 ( 5.55%) 1058.77
smtp 35359 ( 0.13%) 7110603 ( 0.03%) 201.10
ftp 9439 ( 0.03%) 914557 ( 0.00%) 96.89
pop3 1104 ( 0.00%) 171612 ( 0.00%) 155.45
imap 1614 ( 0.01%) 642942 ( 0.00%) 398.35
telnet 3748 ( 0.01%) 258390 ( 0.00%) 68.94
ssh 368295 ( 1.34%) 52320405 ( 0.24%) 142.06
dns 6955 ( 0.03%) 4520079 ( 0.02%) 649.90
bgp 634 ( 0.00%) 112548 ( 0.00%) 177.52
napster 57 ( 0.00%) 4650 ( 0.00%) 81.58
realaud 11 ( 0.00%) 696 ( 0.00%) 63.27
icecast 468 ( 0.00%) 78149 ( 0.00%) 166.99
hotline 10 ( 0.00%) 1215 ( 0.00%) 121.50
other 6661111 ( 24.18%) 5276161288 ( 24.15%) 792.08
udp 2649025 ( 9.62%) 1123422048 ( 5.14%) 424.09
dns 296993 ( 1.08%) 63779233 ( 0.29%) 214.75
realaud 12 ( 0.00%) 3928 ( 0.00%) 327.33
halflif 42 ( 0.00%) 5622 ( 0.00%) 133.86
starcra 35 ( 0.00%) 4498 ( 0.00%) 128.51
everque 379 ( 0.00%) 87106 ( 0.00%) 229.83
unreal 179 ( 0.00%) 86601 ( 0.00%) 483.80
quake 7 ( 0.00%) 899 ( 0.00%) 128.43
cuseeme 2 ( 0.00%) 144 ( 0.00%) 72.00
other 2288981 ( 8.31%) 1052842924 ( 4.82%) 459.96
icmp 1763493 ( 6.40%) 182614824 ( 0.84%) 103.55
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 21753 ( 0.08%) 11440614 ( 0.05%) 525.93
ip6 1140692 ( 4.14%) 783853712 ( 3.59%) 687.17
pim 185 ( 0.00%) 11100 ( 0.00%) 60.00
other 31814 ( 0.12%) 20437760 ( 0.09%) 642.41
frag 128644 ( 0.47%) 98630674 ( 0.45%) 766.69
ip6 995075 ( 3.61%) 1191297418 ( 5.45%) 1197.19
tcp6 924815 ( 3.36%) 1177377653 ( 5.39%) 1273.10
http(s) 6576 ( 0.02%) 8123094 ( 0.04%) 1235.26
http(c) 20686 ( 0.08%) 1706931 ( 0.01%) 82.52
smtp 1122 ( 0.00%) 478113 ( 0.00%) 426.13
ftp 8303 ( 0.03%) 841368 ( 0.00%) 101.33
ssh 29096 ( 0.11%) 7980965 ( 0.04%) 274.30
dns 89 ( 0.00%) 15873 ( 0.00%) 178.35
bgp 84 ( 0.00%) 13207 ( 0.00%) 157.23
other 858859 ( 3.12%) 1158218102 ( 5.30%) 1348.55
udp6 38790 ( 0.14%) 9209547 ( 0.04%) 237.42
dns 36273 ( 0.13%) 8814442 ( 0.04%) 243.00
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
halflif 3 ( 0.00%) 320 ( 0.00%) 106.67
quake 2 ( 0.00%) 211 ( 0.00%) 105.50
other 2511 ( 0.01%) 394468 ( 0.00%) 157.10
icmp6 30521 ( 0.11%) 3804486 ( 0.02%) 124.65
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 837 ( 0.00%) 890476 ( 0.00%) 1063.89
tcpdump file: 201203300315.dump.gz (645.59 MB)