Traffic Trace Info
DumpFile: 201203300615.dump
FileSize: 2536.67MB
Id: 201203300615
StartTime: Fri Mar 30 06:15:01 2012
EndTime: Fri Mar 30 06:30:00 2012
TotalTime: 899.65 seconds
TotalCapSize: 2007.50MB CapLen: 96 bytes
# of packets: 34678999 (28099.01MB)
AvgRate: 261.95Mbps stddev:37.97M
IP flow (unique src/dst pair) Information
# of flows: 1744929 (avg. 19.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 2.9% 2.7% 2.7% 2.6% 2.6% 2.2% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1385290
Top 10 bandwidth usage (bytes/total in %):
23.7% 19.1% 9.3% 6.0% 5.3% 4.3% 4.1% 3.9% 3.3% 3.0%
# of IPv6 addresses: 5602
Top 10 bandwidth usage (bytes/total in %):
79.8% 74.7% 9.1% 9.1% 2.7% 2.7% 2.6% 2.6% 2.4% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300615.pktlen.png)
detailed numbers
[ 32- 63]: 5129817
[ 64- 127]: 8068951
[ 128- 255]: 1237047
[ 256- 511]: 777039
[ 512- 1023]: 846227
[ 1024- 2047]: 18619918
Protocol Breakdown
![[protocol breakdown chart]](201203300615.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34678999 (100.00%) 29463943269 (100.00%) 849.62
ip 33955260 ( 97.91%) 28988803845 ( 98.39%) 853.74
tcp 27480174 ( 79.24%) 25693418816 ( 87.20%) 934.98
http(s) 11851286 ( 34.17%) 16842301083 ( 57.16%) 1421.14
http(c) 5908339 ( 17.04%) 1223131717 ( 4.15%) 207.02
squid 1432938 ( 4.13%) 1472143739 ( 5.00%) 1027.36
smtp 30955 ( 0.09%) 6203345 ( 0.02%) 200.40
ftp 8978 ( 0.03%) 820006 ( 0.00%) 91.34
pop3 5869 ( 0.02%) 566795 ( 0.00%) 96.57
imap 2161 ( 0.01%) 438134 ( 0.00%) 202.75
telnet 5876 ( 0.02%) 4583217 ( 0.02%) 779.99
ssh 461019 ( 1.33%) 55612997 ( 0.19%) 120.63
dns 2188 ( 0.01%) 263710 ( 0.00%) 120.53
bgp 631 ( 0.00%) 124158 ( 0.00%) 196.76
napster 27 ( 0.00%) 1762 ( 0.00%) 65.26
realaud 10 ( 0.00%) 626 ( 0.00%) 62.60
rtsp 4 ( 0.00%) 246 ( 0.00%) 61.50
icecast 483 ( 0.00%) 57395 ( 0.00%) 118.83
hotline 12 ( 0.00%) 744 ( 0.00%) 62.00
other 7769398 ( 22.40%) 6087169142 ( 20.66%) 783.48
udp 3272354 ( 9.44%) 1839820865 ( 6.24%) 562.23
dns 416839 ( 1.20%) 85903857 ( 0.29%) 206.08
halflif 25 ( 0.00%) 2409 ( 0.00%) 96.36
starcra 39 ( 0.00%) 4207 ( 0.00%) 107.87
everque 408 ( 0.00%) 172125 ( 0.00%) 421.88
unreal 104 ( 0.00%) 26866 ( 0.00%) 258.33
quake 9 ( 0.00%) 775 ( 0.00%) 86.11
cuseeme 10 ( 0.00%) 863 ( 0.00%) 86.30
other 2854718 ( 8.23%) 1753655926 ( 5.95%) 614.30
icmp 1622105 ( 4.68%) 160423156 ( 0.54%) 98.90
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 30208 ( 0.09%) 16817584 ( 0.06%) 556.73
ip6 1526420 ( 4.40%) 1267007754 ( 4.30%) 830.05
pim 228 ( 0.00%) 13680 ( 0.00%) 60.00
other 23586 ( 0.07%) 11282720 ( 0.04%) 478.37
frag 895 ( 0.00%) 767762 ( 0.00%) 857.83
ip6 723739 ( 2.09%) 475139424 ( 1.61%) 656.51
tcp6 145861 ( 0.42%) 99674586 ( 0.34%) 683.35
http(s) 1426 ( 0.00%) 965620 ( 0.00%) 677.15
http(c) 8423 ( 0.02%) 783842 ( 0.00%) 93.06
smtp 119 ( 0.00%) 50279 ( 0.00%) 422.51
dns 46 ( 0.00%) 5940 ( 0.00%) 129.13
bgp 93 ( 0.00%) 18150 ( 0.00%) 195.16
other 135754 ( 0.39%) 97850755 ( 0.33%) 720.79
udp6 46004 ( 0.13%) 19796962 ( 0.07%) 430.33
dns 33859 ( 0.10%) 7915339 ( 0.03%) 233.77
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
halflif 1 ( 0.00%) 100 ( 0.00%) 100.00
starcra 1 ( 0.00%) 103 ( 0.00%) 103.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 12141 ( 0.04%) 11881206 ( 0.04%) 978.60
icmp6 30844 ( 0.09%) 3927024 ( 0.01%) 127.32
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 500917 ( 1.44%) 351725428 ( 1.19%) 702.16
tcpdump file: 201203300615.dump.gz (786.82 MB)