Traffic Trace Info
DumpFile: 201203300415.dump
FileSize: 2101.73MB
Id: 201203300415
StartTime: Fri Mar 30 04:15:00 2012
EndTime: Fri Mar 30 04:30:00 2012
TotalTime: 900.34 seconds
TotalCapSize: 1664.21MB CapLen: 96 bytes
# of packets: 28672791 (21290.91MB)
AvgRate: 198.41Mbps stddev:38.60M
IP flow (unique src/dst pair) Information
# of flows: 1958166 (avg. 14.64 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 4.7% 3.2% 3.0% 1.7% 1.5% 1.4% 1.4% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 1489297
Top 10 bandwidth usage (bytes/total in %):
14.2% 7.8% 7.0% 6.7% 6.2% 5.9% 5.1% 5.0% 5.0% 4.9%
# of IPv6 addresses: 6128
Top 10 bandwidth usage (bytes/total in %):
54.0% 43.3% 43.3% 41.7% 6.2% 2.0% 1.8% 0.9% 0.8% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300415.pktlen.png)
detailed numbers
[ 32- 63]: 4681570
[ 64- 127]: 7376766
[ 128- 255]: 1159883
[ 256- 511]: 816257
[ 512- 1023]: 600370
[ 1024- 2047]: 14037945
Protocol Breakdown
![[protocol breakdown chart]](201203300415.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28672791 (100.00%) 22325139414 (100.00%) 778.62
ip 28005900 ( 97.67%) 21596334446 ( 96.74%) 771.14
tcp 21758424 ( 75.89%) 19023470222 ( 85.21%) 874.30
http(s) 7806222 ( 27.23%) 10816153295 ( 48.45%) 1385.58
http(c) 5300053 ( 18.48%) 1369192537 ( 6.13%) 258.34
squid 1321492 ( 4.61%) 1325872558 ( 5.94%) 1003.31
smtp 51261 ( 0.18%) 8258314 ( 0.04%) 161.10
ftp 8374 ( 0.03%) 794365 ( 0.00%) 94.86
pop3 11903 ( 0.04%) 838316 ( 0.00%) 70.43
imap 1035 ( 0.00%) 104955 ( 0.00%) 101.41
telnet 37694 ( 0.13%) 2778132 ( 0.01%) 73.70
ssh 423611 ( 1.48%) 54368673 ( 0.24%) 128.35
dns 3162 ( 0.01%) 357169 ( 0.00%) 112.96
bgp 616 ( 0.00%) 92841 ( 0.00%) 150.72
napster 8 ( 0.00%) 556 ( 0.00%) 69.50
realaud 6 ( 0.00%) 378 ( 0.00%) 63.00
rtsp 8 ( 0.00%) 496 ( 0.00%) 62.00
icecast 560 ( 0.00%) 92088 ( 0.00%) 164.44
hotline 23 ( 0.00%) 1791 ( 0.00%) 77.87
other 6792396 ( 23.69%) 5444563758 ( 24.39%) 801.57
udp 2830684 ( 9.87%) 1280938782 ( 5.74%) 452.52
dns 290431 ( 1.01%) 59208450 ( 0.27%) 203.86
realaud 13 ( 0.00%) 3149 ( 0.00%) 242.23
halflif 44 ( 0.00%) 8736 ( 0.00%) 198.55
starcra 51 ( 0.00%) 8340 ( 0.00%) 163.53
everque 399 ( 0.00%) 75182 ( 0.00%) 188.43
unreal 200 ( 0.00%) 79555 ( 0.00%) 397.77
quake 20 ( 0.00%) 2398 ( 0.00%) 119.90
cuseeme 9 ( 0.00%) 3067 ( 0.00%) 340.78
other 2539210 ( 8.86%) 1221460054 ( 5.47%) 481.04
icmp 1784810 ( 6.22%) 186179401 ( 0.83%) 104.31
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 15754 ( 0.05%) 6078300 ( 0.03%) 385.83
ip6 1595143 ( 5.56%) 1094608788 ( 4.90%) 686.21
pim 200 ( 0.00%) 12000 ( 0.00%) 60.00
other 20700 ( 0.07%) 5027683 ( 0.02%) 242.88
frag 1100 ( 0.00%) 942767 ( 0.00%) 857.06
ip6 666891 ( 2.33%) 728804968 ( 3.26%) 1092.84
tcp6 598393 ( 2.09%) 716288991 ( 3.21%) 1197.02
http(s) 50256 ( 0.18%) 74203190 ( 0.33%) 1476.50
http(c) 32855 ( 0.11%) 2764315 ( 0.01%) 84.14
smtp 135 ( 0.00%) 57454 ( 0.00%) 425.59
ftp 2955 ( 0.01%) 295514 ( 0.00%) 100.00
dns 88 ( 0.00%) 15314 ( 0.00%) 174.02
bgp 86 ( 0.00%) 12649 ( 0.00%) 147.08
other 512018 ( 1.79%) 638940555 ( 2.86%) 1247.89
udp6 37873 ( 0.13%) 8442232 ( 0.04%) 222.91
dns 35473 ( 0.12%) 8078917 ( 0.04%) 227.75
everque 2 ( 0.00%) 199 ( 0.00%) 99.50
quake 1 ( 0.00%) 106 ( 0.00%) 106.00
other 2397 ( 0.01%) 363010 ( 0.00%) 151.44
icmp6 30241 ( 0.11%) 3798044 ( 0.02%) 125.59
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 269 ( 0.00%) 260073 ( 0.00%) 966.81
tcpdump file: 201203300415.dump.gz (657.91 MB)