Traffic Trace Info
DumpFile: 201203300400.dump
FileSize: 1994.42MB
Id: 201203300400
StartTime: Fri Mar 30 04:00:00 2012
EndTime: Fri Mar 30 04:15:00 2012
TotalTime: 900.02 seconds
TotalCapSize: 1572.74MB CapLen: 96 bytes
# of packets: 27634750 (19171.45MB)
AvgRate: 178.72Mbps stddev:30.09M
IP flow (unique src/dst pair) Information
# of flows: 2457828 (avg. 11.24 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 4.0% 3.9% 2.6% 2.6% 2.2% 1.8% 1.7% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 1570617
Top 10 bandwidth usage (bytes/total in %):
14.4% 8.7% 6.5% 6.5% 5.6% 5.2% 5.2% 4.4% 4.1% 4.1%
# of IPv6 addresses: 6334
Top 10 bandwidth usage (bytes/total in %):
32.9% 18.7% 18.7% 13.5% 13.5% 12.8% 7.9% 7.8% 6.7% 6.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300400.pktlen.png)
detailed numbers
[ 32- 63]: 5566531
[ 64- 127]: 6860723
[ 128- 255]: 1294141
[ 256- 511]: 721484
[ 512- 1023]: 700290
[ 1024- 2047]: 12491581
Protocol Breakdown
![[protocol breakdown chart]](201203300400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27634750 (100.00%) 20102725136 (100.00%) 727.44
ip 27319354 ( 98.86%) 19987492910 ( 99.43%) 731.62
tcp 20303831 ( 73.47%) 17112770239 ( 85.13%) 842.83
http(s) 7785085 ( 28.17%) 10037016160 ( 49.93%) 1289.26
http(c) 4999267 ( 18.09%) 1292834472 ( 6.43%) 258.60
squid 834472 ( 3.02%) 726481520 ( 3.61%) 870.59
smtp 37297 ( 0.13%) 7374357 ( 0.04%) 197.72
nntp 7 ( 0.00%) 434 ( 0.00%) 62.00
ftp 8344 ( 0.03%) 806223 ( 0.00%) 96.62
pop3 869 ( 0.00%) 193596 ( 0.00%) 222.78
imap 883 ( 0.00%) 86656 ( 0.00%) 98.14
telnet 41587 ( 0.15%) 3073168 ( 0.02%) 73.90
ssh 313473 ( 1.13%) 46547259 ( 0.23%) 148.49
dns 5229 ( 0.02%) 571799 ( 0.00%) 109.35
bgp 619 ( 0.00%) 99254 ( 0.00%) 160.35
napster 22 ( 0.00%) 1964 ( 0.00%) 89.27
realaud 1 ( 0.00%) 60 ( 0.00%) 60.00
rtsp 5 ( 0.00%) 300 ( 0.00%) 60.00
icecast 5960 ( 0.02%) 5293327 ( 0.03%) 888.14
hotline 12 ( 0.00%) 1320 ( 0.00%) 110.00
other 6270698 ( 22.69%) 4992388310 ( 24.83%) 796.15
udp 3611765 ( 13.07%) 1666786913 ( 8.29%) 461.49
dns 348642 ( 1.26%) 68962198 ( 0.34%) 197.80
realaud 5 ( 0.00%) 381 ( 0.00%) 76.20
halflif 36 ( 0.00%) 3905 ( 0.00%) 108.47
starcra 33 ( 0.00%) 4582 ( 0.00%) 138.85
everque 393 ( 0.00%) 108692 ( 0.00%) 276.57
unreal 174 ( 0.00%) 55688 ( 0.00%) 320.05
quake 10 ( 0.00%) 1467 ( 0.00%) 146.70
cuseeme 1 ( 0.00%) 88 ( 0.00%) 88.00
other 2985981 ( 10.81%) 1580989849 ( 7.86%) 529.47
icmp 1834728 ( 6.64%) 189372885 ( 0.94%) 103.22
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 18088 ( 0.07%) 7710624 ( 0.04%) 426.28
ip6 1533257 ( 5.55%) 1006553118 ( 5.01%) 656.48
pim 258 ( 0.00%) 15480 ( 0.00%) 60.00
other 17242 ( 0.06%) 4264381 ( 0.02%) 247.33
frag 592936 ( 2.15%) 452518166 ( 2.25%) 763.18
ip6 315396 ( 1.14%) 115232226 ( 0.57%) 365.36
tcp6 237335 ( 0.86%) 98713568 ( 0.49%) 415.93
http(s) 14205 ( 0.05%) 20184143 ( 0.10%) 1420.92
http(c) 18702 ( 0.07%) 1591636 ( 0.01%) 85.11
smtp 419 ( 0.00%) 300051 ( 0.00%) 716.11
ftp 6871 ( 0.02%) 694855 ( 0.00%) 101.13
ssh 72750 ( 0.26%) 15567217 ( 0.08%) 213.98
dns 303 ( 0.00%) 67106 ( 0.00%) 221.47
bgp 89 ( 0.00%) 13857 ( 0.00%) 155.70
other 123996 ( 0.45%) 60294703 ( 0.30%) 486.26
udp6 46497 ( 0.17%) 11796830 ( 0.06%) 253.71
dns 44131 ( 0.16%) 11439537 ( 0.06%) 259.22
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 90 ( 0.00%) 90.00
cuseeme 1 ( 0.00%) 93 ( 0.00%) 93.00
other 2363 ( 0.01%) 357004 ( 0.00%) 151.08
icmp6 30368 ( 0.11%) 3802269 ( 0.02%) 125.21
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 1082 ( 0.00%) 904067 ( 0.00%) 835.55
tcpdump file: 201203300400.dump.gz (635.63 MB)