Traffic Trace Info
DumpFile: 201203300630.dump
FileSize: 2529.39MB
Id: 201203300630
StartTime: Fri Mar 30 06:30:00 2012
EndTime: Fri Mar 30 06:45:01 2012
TotalTime: 900.48 seconds
TotalCapSize: 2002.40MB CapLen: 96 bytes
# of packets: 34535875 (27290.48MB)
AvgRate: 254.21Mbps stddev:32.33M
IP flow (unique src/dst pair) Information
# of flows: 1729243 (avg. 19.97 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.7% 2.8% 2.2% 2.2% 1.7% 1.6% 1.6% 1.5% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 1363294
Top 10 bandwidth usage (bytes/total in %):
25.5% 13.8% 12.2% 8.1% 7.3% 4.1% 4.0% 2.9% 2.9% 2.8%
# of IPv6 addresses: 5564
Top 10 bandwidth usage (bytes/total in %):
92.4% 51.8% 25.9% 11.8% 2.4% 1.7% 1.1% 1.1% 1.1% 1.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300630.pktlen.png)
detailed numbers
[ 32- 63]: 5551614
[ 64- 127]: 7961826
[ 128- 255]: 1203580
[ 256- 511]: 718691
[ 512- 1023]: 969227
[ 1024- 2047]: 18130937
Protocol Breakdown
![[protocol breakdown chart]](201203300630.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34535875 (100.00%) 28616147277 (100.00%) 828.59
ip 33511695 ( 97.03%) 27825928206 ( 97.24%) 830.33
tcp 26979175 ( 78.12%) 24672567941 ( 86.22%) 914.50
http(s) 10807988 ( 31.29%) 15280007285 ( 53.40%) 1413.77
http(c) 6127648 ( 17.74%) 1248152771 ( 4.36%) 203.69
squid 1722648 ( 4.99%) 1997645780 ( 6.98%) 1159.64
smtp 31486 ( 0.09%) 5254537 ( 0.02%) 166.88
ftp 8237 ( 0.02%) 755180 ( 0.00%) 91.68
pop3 5788 ( 0.02%) 538081 ( 0.00%) 92.96
imap 952 ( 0.00%) 203434 ( 0.00%) 213.69
telnet 4872 ( 0.01%) 518838 ( 0.00%) 106.49
ssh 476437 ( 1.38%) 59186047 ( 0.21%) 124.23
dns 2288 ( 0.01%) 265918 ( 0.00%) 116.22
bgp 617 ( 0.00%) 106359 ( 0.00%) 172.38
napster 28 ( 0.00%) 2906 ( 0.00%) 103.79
realaud 4 ( 0.00%) 250 ( 0.00%) 62.50
rtsp 4 ( 0.00%) 240 ( 0.00%) 60.00
icecast 1166 ( 0.00%) 563460 ( 0.00%) 483.24
hotline 14 ( 0.00%) 2002 ( 0.00%) 143.00
other 7788998 ( 22.55%) 6079364853 ( 21.24%) 780.51
udp 2839718 ( 8.22%) 1284022881 ( 4.49%) 452.17
dns 407417 ( 1.18%) 85116182 ( 0.30%) 208.92
rip 1 ( 0.00%) 72 ( 0.00%) 72.00
halflif 43 ( 0.00%) 3735 ( 0.00%) 86.86
starcra 27 ( 0.00%) 2698 ( 0.00%) 99.93
everque 326 ( 0.00%) 73283 ( 0.00%) 224.79
unreal 111 ( 0.00%) 52287 ( 0.00%) 471.05
quake 14 ( 0.00%) 1320 ( 0.00%) 94.29
cuseeme 3 ( 0.00%) 706 ( 0.00%) 235.33
other 2431606 ( 7.04%) 1198725463 ( 4.19%) 492.98
icmp 1665730 ( 4.82%) 161292133 ( 0.56%) 96.83
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 30524 ( 0.09%) 15928584 ( 0.06%) 521.84
ip6 1979633 ( 5.73%) 1688286425 ( 5.90%) 852.83
pim 259 ( 0.00%) 15540 ( 0.00%) 60.00
other 16471 ( 0.05%) 3795432 ( 0.01%) 230.43
frag 1002 ( 0.00%) 928819 ( 0.00%) 926.97
ip6 1024180 ( 2.97%) 790219071 ( 2.76%) 771.56
tcp6 365166 ( 1.06%) 359824548 ( 1.26%) 985.37
http(s) 2732 ( 0.01%) 3138350 ( 0.01%) 1148.74
http(c) 22002 ( 0.06%) 1940759 ( 0.01%) 88.21
smtp 577 ( 0.00%) 217423 ( 0.00%) 376.82
ftp 23 ( 0.00%) 1819 ( 0.00%) 79.09
dns 297 ( 0.00%) 63014 ( 0.00%) 212.17
bgp 93 ( 0.00%) 17339 ( 0.00%) 186.44
other 339442 ( 0.98%) 354445844 ( 1.24%) 1044.20
udp6 43185 ( 0.13%) 16701774 ( 0.06%) 386.75
dns 33820 ( 0.10%) 7758427 ( 0.03%) 229.40
everque 1 ( 0.00%) 104 ( 0.00%) 104.00
other 9364 ( 0.03%) 8943243 ( 0.03%) 955.07
icmp6 32204 ( 0.09%) 3943067 ( 0.01%) 122.44
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 583508 ( 1.69%) 409733818 ( 1.43%) 702.19
tcpdump file: 201203300630.dump.gz (787.50 MB)