Traffic Trace Info
DumpFile: 201203300345.dump
FileSize: 1944.89MB
Id: 201203300345
StartTime: Fri Mar 30 03:45:01 2012
EndTime: Fri Mar 30 04:00:00 2012
TotalTime: 899.30 seconds
TotalCapSize: 1534.25MB CapLen: 96 bytes
# of packets: 26911200 (20142.53MB)
AvgRate: 187.86Mbps stddev:25.84M
IP flow (unique src/dst pair) Information
# of flows: 1960370 (avg. 13.73 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 4.7% 4.2% 3.3% 2.0% 1.7% 1.6% 1.5% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1488531
Top 10 bandwidth usage (bytes/total in %):
13.0% 9.3% 7.6% 6.7% 5.6% 5.4% 5.0% 5.0% 4.7% 4.4%
# of IPv6 addresses: 6036
Top 10 bandwidth usage (bytes/total in %):
31.0% 31.0% 26.4% 12.6% 12.6% 9.1% 7.5% 6.2% 6.2% 6.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300345.pktlen.png)
detailed numbers
[ 32- 63]: 4701258
[ 64- 127]: 6349593
[ 128- 255]: 1177374
[ 256- 511]: 885317
[ 512- 1023]: 633643
[ 1024- 2047]: 13164015
Protocol Breakdown
![[protocol breakdown chart]](201203300345.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26911200 (100.00%) 21120971670 (100.00%) 784.84
ip 26661641 ( 99.07%) 21025930372 ( 99.55%) 788.62
tcp 20187513 ( 75.02%) 17992835567 ( 85.19%) 891.29
http(s) 7616490 ( 28.30%) 10444799139 ( 49.45%) 1371.34
http(c) 4966976 ( 18.46%) 1289290818 ( 6.10%) 259.57
squid 1371410 ( 5.10%) 1409260905 ( 6.67%) 1027.60
smtp 37485 ( 0.14%) 9029979 ( 0.04%) 240.90
ftp 7241 ( 0.03%) 753938 ( 0.00%) 104.12
pop3 1055 ( 0.00%) 204043 ( 0.00%) 193.41
imap 882 ( 0.00%) 89130 ( 0.00%) 101.05
telnet 1269 ( 0.00%) 92398 ( 0.00%) 72.81
ssh 378096 ( 1.40%) 52311326 ( 0.25%) 138.35
dns 2645 ( 0.01%) 346847 ( 0.00%) 131.13
bgp 611 ( 0.00%) 96568 ( 0.00%) 158.05
napster 14 ( 0.00%) 914 ( 0.00%) 65.29
realaud 20 ( 0.00%) 1464 ( 0.00%) 73.20
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 1118 ( 0.00%) 580549 ( 0.00%) 519.27
hotline 19 ( 0.00%) 2439 ( 0.00%) 128.37
other 5802181 ( 21.56%) 4785975050 ( 22.66%) 824.86
udp 3431578 ( 12.75%) 1978027389 ( 9.37%) 576.42
dns 275671 ( 1.02%) 57428425 ( 0.27%) 208.32
realaud 7 ( 0.00%) 1597 ( 0.00%) 228.14
halflif 37 ( 0.00%) 4382 ( 0.00%) 118.43
starcra 29 ( 0.00%) 2568 ( 0.00%) 88.55
everque 382 ( 0.00%) 108797 ( 0.00%) 284.81
unreal 88 ( 0.00%) 49556 ( 0.00%) 563.14
quake 2 ( 0.00%) 183 ( 0.00%) 91.50
cuseeme 2 ( 0.00%) 177 ( 0.00%) 88.50
other 3155078 ( 11.72%) 1920388855 ( 9.09%) 608.67
icmp 1788817 ( 6.65%) 187137147 ( 0.89%) 104.62
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 12899 ( 0.05%) 5467202 ( 0.03%) 423.85
ip6 1218944 ( 4.53%) 858323325 ( 4.06%) 704.15
pim 238 ( 0.00%) 14280 ( 0.00%) 60.00
other 21468 ( 0.08%) 4106302 ( 0.02%) 191.28
frag 1148 ( 0.00%) 965260 ( 0.00%) 840.82
ip6 249559 ( 0.93%) 95041298 ( 0.45%) 380.84
tcp6 182569 ( 0.68%) 82357668 ( 0.39%) 451.10
http(s) 29325 ( 0.11%) 42616271 ( 0.20%) 1453.24
http(c) 22943 ( 0.09%) 1952955 ( 0.01%) 85.12
smtp 749 ( 0.00%) 416317 ( 0.00%) 555.83
ftp 8097 ( 0.03%) 811803 ( 0.00%) 100.26
dns 133 ( 0.00%) 17518 ( 0.00%) 131.71
bgp 91 ( 0.00%) 14990 ( 0.00%) 164.73
other 121231 ( 0.45%) 36527814 ( 0.17%) 301.31
udp6 36405 ( 0.14%) 8636100 ( 0.04%) 237.22
dns 34402 ( 0.13%) 8298340 ( 0.04%) 241.22
starcra 1 ( 0.00%) 104 ( 0.00%) 104.00
everque 1 ( 0.00%) 111 ( 0.00%) 111.00
cuseeme 1 ( 0.00%) 110 ( 0.00%) 110.00
other 2000 ( 0.01%) 337435 ( 0.00%) 168.72
icmp6 30248 ( 0.11%) 3809336 ( 0.02%) 125.94
ip6 80 ( 0.00%) 10940 ( 0.00%) 136.75
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 227 ( 0.00%) 223174 ( 0.00%) 983.15
tcpdump file: 201203300345.dump.gz (627.00 MB)