Traffic Trace Info
DumpFile: 201203300445.dump
FileSize: 1922.29MB
Id: 201203300445
StartTime: Fri Mar 30 04:45:01 2012
EndTime: Fri Mar 30 05:00:00 2012
TotalTime: 899.21 seconds
TotalCapSize: 1521.31MB CapLen: 96 bytes
# of packets: 26277860 (19525.24MB)
AvgRate: 182.17Mbps stddev:27.68M
IP flow (unique src/dst pair) Information
# of flows: 1859994 (avg. 14.13 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 4.4% 3.9% 1.7% 1.7% 1.6% 1.6% 1.6% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 1449539
Top 10 bandwidth usage (bytes/total in %):
17.0% 10.2% 7.7% 6.7% 6.0% 5.5% 5.0% 4.6% 4.1% 4.1%
# of IPv6 addresses: 6073
Top 10 bandwidth usage (bytes/total in %):
78.7% 73.3% 16.6% 16.6% 1.9% 1.4% 1.4% 0.9% 0.9% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300445.pktlen.png)
detailed numbers
[ 32- 63]: 4229620
[ 64- 127]: 6540126
[ 128- 255]: 1255707
[ 256- 511]: 862589
[ 512- 1023]: 557326
[ 1024- 2047]: 12832492
Protocol Breakdown
![[protocol breakdown chart]](201203300445.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26277860 (100.00%) 20473702414 (100.00%) 779.12
ip 25820601 ( 98.26%) 20062156201 ( 97.99%) 776.98
tcp 19712620 ( 75.02%) 17307556946 ( 84.54%) 877.99
http(s) 7010547 ( 26.68%) 9688680835 ( 47.32%) 1382.01
http(c) 4541924 ( 17.28%) 1228796001 ( 6.00%) 270.55
squid 1198720 ( 4.56%) 1193814142 ( 5.83%) 995.91
smtp 31455 ( 0.12%) 5326040 ( 0.03%) 169.32
nntp 7 ( 0.00%) 434 ( 0.00%) 62.00
ftp 8032 ( 0.03%) 765471 ( 0.00%) 95.30
pop3 13276 ( 0.05%) 906575 ( 0.00%) 68.29
imap 854 ( 0.00%) 86327 ( 0.00%) 101.09
telnet 2377 ( 0.01%) 159128 ( 0.00%) 66.94
ssh 639159 ( 2.43%) 80647861 ( 0.39%) 126.18
dns 2426 ( 0.01%) 297317 ( 0.00%) 122.55
bgp 601 ( 0.00%) 91021 ( 0.00%) 151.45
napster 18 ( 0.00%) 1148 ( 0.00%) 63.78
realaud 20 ( 0.00%) 2230 ( 0.00%) 111.50
icecast 409 ( 0.00%) 77723 ( 0.00%) 190.03
hotline 17 ( 0.00%) 1199 ( 0.00%) 70.53
other 6262778 ( 23.83%) 5107903494 ( 24.95%) 815.60
udp 2783537 ( 10.59%) 1329120056 ( 6.49%) 477.49
dns 259035 ( 0.99%) 55799510 ( 0.27%) 215.41
rip 1 ( 0.00%) 220 ( 0.00%) 220.00
realaud 5 ( 0.00%) 746 ( 0.00%) 149.20
halflif 60 ( 0.00%) 8588 ( 0.00%) 143.13
starcra 27 ( 0.00%) 2726 ( 0.00%) 100.96
everque 314 ( 0.00%) 61608 ( 0.00%) 196.20
unreal 129 ( 0.00%) 85301 ( 0.00%) 661.25
quake 12 ( 0.00%) 1466 ( 0.00%) 122.17
other 2523737 ( 9.60%) 1273110219 ( 6.22%) 504.45
icmp 1774833 ( 6.75%) 184928297 ( 0.90%) 104.19
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 13697 ( 0.05%) 6671270 ( 0.03%) 487.06
ip6 1519813 ( 5.78%) 1231159891 ( 6.01%) 810.07
pim 241 ( 0.00%) 14460 ( 0.00%) 60.00
other 15675 ( 0.06%) 2686011 ( 0.01%) 171.36
frag 1022 ( 0.00%) 899178 ( 0.00%) 879.82
ip6 457259 ( 1.74%) 411546213 ( 2.01%) 900.03
tcp6 391952 ( 1.49%) 399478900 ( 1.95%) 1019.20
http(s) 1022 ( 0.00%) 643441 ( 0.00%) 629.59
http(c) 25706 ( 0.10%) 2242516 ( 0.01%) 87.24
smtp 505 ( 0.00%) 199711 ( 0.00%) 395.47
dns 106 ( 0.00%) 15471 ( 0.00%) 145.95
bgp 89 ( 0.00%) 14810 ( 0.00%) 166.40
other 364524 ( 1.39%) 396362951 ( 1.94%) 1087.34
udp6 34690 ( 0.13%) 8036525 ( 0.04%) 231.67
dns 32209 ( 0.12%) 7621566 ( 0.04%) 236.63
realaud 2 ( 0.00%) 211 ( 0.00%) 105.50
quake 1 ( 0.00%) 96 ( 0.00%) 96.00
cuseeme 1 ( 0.00%) 105 ( 0.00%) 105.00
other 2477 ( 0.01%) 414547 ( 0.00%) 167.36
icmp6 30192 ( 0.11%) 3707994 ( 0.02%) 122.81
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 311 ( 0.00%) 307302 ( 0.00%) 988.11
tcpdump file: 201203300445.dump.gz (620.37 MB)