Traffic Trace Info
DumpFile: 201203300515.dump
FileSize: 1973.23MB
Id: 201203300515
StartTime: Fri Mar 30 05:15:00 2012
EndTime: Fri Mar 30 05:30:00 2012
TotalTime: 900.23 seconds
TotalCapSize: 1562.44MB CapLen: 96 bytes
# of packets: 26921185 (20166.29MB)
AvgRate: 187.92Mbps stddev:32.08M
IP flow (unique src/dst pair) Information
# of flows: 1789539 (avg. 15.04 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.6% 4.4% 3.6% 2.0% 1.7% 1.6% 1.6% 1.5% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 1417244
Top 10 bandwidth usage (bytes/total in %):
23.1% 14.1% 6.3% 5.9% 4.9% 4.7% 4.4% 4.3% 3.8% 3.8%
# of IPv6 addresses: 5918
Top 10 bandwidth usage (bytes/total in %):
45.8% 45.8% 29.0% 29.0% 9.3% 3.7% 2.7% 2.6% 2.5% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300515.pktlen.png)
detailed numbers
[ 32- 63]: 4197589
[ 64- 127]: 6964322
[ 128- 255]: 1223656
[ 256- 511]: 604215
[ 512- 1023]: 672788
[ 1024- 2047]: 13258615
Protocol Breakdown
![[protocol breakdown chart]](201203300515.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26921185 (100.00%) 21145886257 (100.00%) 785.47
ip 26638376 ( 98.95%) 20970799350 ( 99.17%) 787.24
tcp 21138803 ( 78.52%) 18744683627 ( 88.64%) 886.74
http(s) 7451012 ( 27.68%) 10442952441 ( 49.39%) 1401.55
http(c) 5017280 ( 18.64%) 1091137158 ( 5.16%) 217.48
squid 1224121 ( 4.55%) 1192644740 ( 5.64%) 974.29
smtp 28282 ( 0.11%) 5114652 ( 0.02%) 180.84
nntp 12 ( 0.00%) 740 ( 0.00%) 61.67
ftp 10485 ( 0.04%) 1027445 ( 0.00%) 97.99
pop3 5072 ( 0.02%) 509739 ( 0.00%) 100.50
imap 1015 ( 0.00%) 101053 ( 0.00%) 99.56
telnet 1817 ( 0.01%) 122904 ( 0.00%) 67.64
ssh 638274 ( 2.37%) 82658155 ( 0.39%) 129.50
dns 2130 ( 0.01%) 256501 ( 0.00%) 120.42
bgp 645 ( 0.00%) 113440 ( 0.00%) 175.88
napster 59 ( 0.00%) 5876 ( 0.00%) 99.59
realaud 12 ( 0.00%) 1320 ( 0.00%) 110.00
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 481 ( 0.00%) 66464 ( 0.00%) 138.18
other 6758104 ( 25.10%) 5927970879 ( 28.03%) 877.16
udp 2351938 ( 8.74%) 911093560 ( 4.31%) 387.38
dns 280208 ( 1.04%) 58971148 ( 0.28%) 210.45
realaud 18 ( 0.00%) 5254 ( 0.00%) 291.89
halflif 78 ( 0.00%) 11863 ( 0.00%) 152.09
starcra 24 ( 0.00%) 2896 ( 0.00%) 120.67
everque 324 ( 0.00%) 71069 ( 0.00%) 219.35
unreal 79 ( 0.00%) 31020 ( 0.00%) 392.66
quake 6 ( 0.00%) 609 ( 0.00%) 101.50
other 2070867 ( 7.69%) 851935586 ( 4.03%) 411.39
icmp 1743321 ( 6.48%) 183969923 ( 0.87%) 105.53
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 7708 ( 0.03%) 2635768 ( 0.01%) 341.95
ip6 1376902 ( 5.11%) 1122893764 ( 5.31%) 815.52
pim 237 ( 0.00%) 14220 ( 0.00%) 60.00
other 19283 ( 0.07%) 5489328 ( 0.03%) 284.67
frag 1656 ( 0.01%) 1338269 ( 0.01%) 808.13
ip6 282809 ( 1.05%) 175086907 ( 0.83%) 619.10
tcp6 217220 ( 0.81%) 163046838 ( 0.77%) 750.61
http(s) 3721 ( 0.01%) 4059786 ( 0.02%) 1091.05
http(c) 24440 ( 0.09%) 2169777 ( 0.01%) 88.78
smtp 308 ( 0.00%) 208669 ( 0.00%) 677.50
dns 125 ( 0.00%) 15600 ( 0.00%) 124.80
bgp 97 ( 0.00%) 17596 ( 0.00%) 181.40
other 188529 ( 0.70%) 156575410 ( 0.74%) 830.51
udp6 35282 ( 0.13%) 7973146 ( 0.04%) 225.98
dns 32917 ( 0.12%) 7585113 ( 0.04%) 230.43
halflif 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 2 ( 0.00%) 205 ( 0.00%) 102.50
other 2362 ( 0.01%) 387722 ( 0.00%) 164.15
icmp6 29912 ( 0.11%) 3769625 ( 0.02%) 126.02
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 280 ( 0.00%) 281638 ( 0.00%) 1005.85
tcpdump file: 201203300515.dump.gz (634.20 MB)