Traffic Trace Info
DumpFile: 201203300600.dump
FileSize: 2251.90MB
Id: 201203300600
StartTime: Fri Mar 30 06:00:00 2012
EndTime: Fri Mar 30 06:15:01 2012
TotalTime: 900.43 seconds
TotalCapSize: 1781.56MB CapLen: 96 bytes
# of packets: 30823712 (24304.14MB)
AvgRate: 226.41Mbps stddev:27.74M
IP flow (unique src/dst pair) Information
# of flows: 1695871 (avg. 18.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 3.7% 3.1% 2.9% 1.9% 1.6% 1.6% 1.5% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 1358883
Top 10 bandwidth usage (bytes/total in %):
25.3% 14.4% 9.6% 6.1% 4.7% 4.7% 4.2% 4.2% 3.8% 3.1%
# of IPv6 addresses: 5673
Top 10 bandwidth usage (bytes/total in %):
39.0% 24.2% 15.2% 13.9% 11.5% 9.0% 4.8% 4.8% 3.5% 3.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300600.pktlen.png)
detailed numbers
[ 32- 63]: 4631047
[ 64- 127]: 7273778
[ 128- 255]: 1238552
[ 256- 511]: 835196
[ 512- 1023]: 860899
[ 1024- 2047]: 15984240
Protocol Breakdown
![[protocol breakdown chart]](201203300600.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30823712 (100.00%) 25484742921 (100.00%) 826.79
ip 30670864 ( 99.50%) 25447833966 ( 99.86%) 829.71
tcp 24605195 ( 79.83%) 22617541804 ( 88.75%) 919.22
http(s) 10495495 ( 34.05%) 14929859625 ( 58.58%) 1422.50
http(c) 5904054 ( 19.15%) 1342105214 ( 5.27%) 227.32
squid 1484115 ( 4.81%) 1505861203 ( 5.91%) 1014.65
smtp 38461 ( 0.12%) 9662520 ( 0.04%) 251.23
nntp 23 ( 0.00%) 1394 ( 0.00%) 60.61
ftp 8416 ( 0.03%) 751249 ( 0.00%) 89.26
pop3 5438 ( 0.02%) 517411 ( 0.00%) 95.15
imap 3991 ( 0.01%) 4135357 ( 0.02%) 1036.17
telnet 1273 ( 0.00%) 84565 ( 0.00%) 66.43
ssh 463301 ( 1.50%) 55951960 ( 0.22%) 120.77
dns 2124 ( 0.01%) 268904 ( 0.00%) 126.60
bgp 645 ( 0.00%) 134363 ( 0.00%) 208.31
napster 28 ( 0.00%) 2247 ( 0.00%) 80.25
realaud 39 ( 0.00%) 6165 ( 0.00%) 158.08
icecast 1216 ( 0.00%) 569253 ( 0.00%) 468.14
hotline 19 ( 0.00%) 1746 ( 0.00%) 91.89
other 6196557 ( 20.10%) 4767628628 ( 18.71%) 769.40
udp 2791884 ( 9.06%) 1247260399 ( 4.89%) 446.75
dns 440849 ( 1.43%) 90184917 ( 0.35%) 204.57
realaud 1 ( 0.00%) 93 ( 0.00%) 93.00
halflif 29 ( 0.00%) 2050 ( 0.00%) 70.69
starcra 10 ( 0.00%) 1466 ( 0.00%) 146.60
everque 344 ( 0.00%) 67648 ( 0.00%) 196.65
unreal 158 ( 0.00%) 101418 ( 0.00%) 641.89
quake 10 ( 0.00%) 1308 ( 0.00%) 130.80
cuseeme 2 ( 0.00%) 170 ( 0.00%) 85.00
other 2350268 ( 7.62%) 1156831535 ( 4.54%) 492.21
icmp 1607876 ( 5.22%) 156837480 ( 0.62%) 97.54
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 39472 ( 0.13%) 19963184 ( 0.08%) 505.76
ip6 1517321 ( 4.92%) 1277932656 ( 5.01%) 842.23
pim 246 ( 0.00%) 14760 ( 0.00%) 60.00
other 108686 ( 0.35%) 128264523 ( 0.50%) 1180.14
frag 892 ( 0.00%) 785131 ( 0.00%) 880.19
ip6 152848 ( 0.50%) 36908955 ( 0.14%) 241.47
tcp6 83812 ( 0.27%) 23740680 ( 0.09%) 283.26
http(s) 1440 ( 0.00%) 1261938 ( 0.00%) 876.35
http(c) 6951 ( 0.02%) 618597 ( 0.00%) 88.99
smtp 113 ( 0.00%) 41690 ( 0.00%) 368.94
ftp 62 ( 0.00%) 7796 ( 0.00%) 125.74
dns 216 ( 0.00%) 56620 ( 0.00%) 262.13
bgp 90 ( 0.00%) 15398 ( 0.00%) 171.09
other 74940 ( 0.24%) 21738641 ( 0.09%) 290.08
udp6 38356 ( 0.12%) 8891716 ( 0.03%) 231.82
dns 35758 ( 0.12%) 8465141 ( 0.03%) 236.73
realaud 1 ( 0.00%) 113 ( 0.00%) 113.00
halflif 1 ( 0.00%) 103 ( 0.00%) 103.00
other 2596 ( 0.01%) 426359 ( 0.00%) 164.24
icmp6 30169 ( 0.10%) 3865565 ( 0.02%) 128.13
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 399 ( 0.00%) 395738 ( 0.00%) 991.82
tcpdump file: 201203300600.dump.gz (715.03 MB)