Traffic Trace Info
DumpFile: 201203300500.dump
FileSize: 2016.59MB
Id: 201203300500
StartTime: Fri Mar 30 05:00:00 2012
EndTime: Fri Mar 30 05:15:00 2012
TotalTime: 900.27 seconds
TotalCapSize: 1592.81MB CapLen: 96 bytes
# of packets: 27772726 (20967.80MB)
AvgRate: 195.41Mbps stddev:26.16M
IP flow (unique src/dst pair) Information
# of flows: 1827423 (avg. 15.20 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 3.5% 2.9% 2.7% 1.7% 1.7% 1.5% 1.5% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 1440269
Top 10 bandwidth usage (bytes/total in %):
18.1% 11.8% 7.7% 6.1% 5.9% 5.5% 4.5% 4.4% 4.0% 3.6%
# of IPv6 addresses: 6107
Top 10 bandwidth usage (bytes/total in %):
45.5% 45.5% 34.9% 21.6% 5.2% 4.9% 4.9% 3.9% 3.1% 2.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300500.pktlen.png)
detailed numbers
[ 32- 63]: 4545255
[ 64- 127]: 6682255
[ 128- 255]: 1267192
[ 256- 511]: 902262
[ 512- 1023]: 633800
[ 1024- 2047]: 13741962
Protocol Breakdown
![[protocol breakdown chart]](201203300500.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27772726 (100.00%) 21986330707 (100.00%) 791.65
ip 27458122 ( 98.87%) 21813835517 ( 99.22%) 794.44
tcp 21672956 ( 78.04%) 19277467309 ( 87.68%) 889.47
http(s) 8066508 ( 29.04%) 11274098449 ( 51.28%) 1397.64
http(c) 5126325 ( 18.46%) 1242015308 ( 5.65%) 242.28
squid 1185221 ( 4.27%) 1176279930 ( 5.35%) 992.46
smtp 34216 ( 0.12%) 7526483 ( 0.03%) 219.97
nntp 18 ( 0.00%) 1122 ( 0.00%) 62.33
ftp 9326 ( 0.03%) 907973 ( 0.00%) 97.36
pop3 4026 ( 0.01%) 429145 ( 0.00%) 106.59
imap 1022 ( 0.00%) 179972 ( 0.00%) 176.10
telnet 1840 ( 0.01%) 124660 ( 0.00%) 67.75
ssh 912896 ( 3.29%) 123023239 ( 0.56%) 134.76
dns 2855 ( 0.01%) 331145 ( 0.00%) 115.99
bgp 626 ( 0.00%) 110928 ( 0.00%) 177.20
napster 50 ( 0.00%) 3657 ( 0.00%) 73.14
realaud 140 ( 0.00%) 9882 ( 0.00%) 70.59
icecast 1033 ( 0.00%) 563020 ( 0.00%) 545.03
other 6326854 ( 22.78%) 5451862396 ( 24.80%) 861.70
udp 2798577 ( 10.08%) 1346118421 ( 6.12%) 481.00
dns 300330 ( 1.08%) 61984657 ( 0.28%) 206.39
realaud 8 ( 0.00%) 884 ( 0.00%) 110.50
halflif 22 ( 0.00%) 5110 ( 0.00%) 232.27
starcra 31 ( 0.00%) 3143 ( 0.00%) 101.39
everque 293 ( 0.00%) 57235 ( 0.00%) 195.34
unreal 130 ( 0.00%) 66436 ( 0.00%) 511.05
quake 10 ( 0.00%) 1882 ( 0.00%) 188.20
cuseeme 2 ( 0.00%) 187 ( 0.00%) 93.50
other 2497226 ( 8.99%) 1283909503 ( 5.84%) 514.13
icmp 1708515 ( 6.15%) 176552319 ( 0.80%) 103.34
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 8280 ( 0.03%) 2995456 ( 0.01%) 361.77
ip6 1253430 ( 4.51%) 1008122994 ( 4.59%) 804.29
pim 238 ( 0.00%) 14280 ( 0.00%) 60.00
other 15942 ( 0.06%) 2545578 ( 0.01%) 159.68
frag 3191 ( 0.01%) 2561683 ( 0.01%) 802.78
ip6 314604 ( 1.13%) 172495190 ( 0.78%) 548.29
tcp6 244337 ( 0.88%) 158795846 ( 0.72%) 649.91
http(s) 30534 ( 0.11%) 44548614 ( 0.20%) 1458.98
http(c) 40184 ( 0.14%) 3640483 ( 0.02%) 90.60
smtp 284 ( 0.00%) 133133 ( 0.00%) 468.78
dns 269 ( 0.00%) 68127 ( 0.00%) 253.26
bgp 96 ( 0.00%) 19377 ( 0.00%) 201.84
other 172970 ( 0.62%) 110386112 ( 0.50%) 638.18
udp6 38760 ( 0.14%) 9344810 ( 0.04%) 241.09
dns 36225 ( 0.13%) 8919244 ( 0.04%) 246.22
realaud 2 ( 0.00%) 209 ( 0.00%) 104.50
halflif 1 ( 0.00%) 115 ( 0.00%) 115.00
unreal 1 ( 0.00%) 113 ( 0.00%) 113.00
quake 2 ( 0.00%) 215 ( 0.00%) 107.50
other 2529 ( 0.01%) 424914 ( 0.00%) 168.02
icmp6 30891 ( 0.11%) 3832490 ( 0.02%) 124.06
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 503 ( 0.00%) 506652 ( 0.00%) 1007.26
tcpdump file: 201203300500.dump.gz (657.35 MB)