Traffic Trace Info
DumpFile: 201203300645.dump
FileSize: 2595.27MB
Id: 201203300645
StartTime: Fri Mar 30 06:45:01 2012
EndTime: Fri Mar 30 07:00:00 2012
TotalTime: 899.56 seconds
TotalCapSize: -2045.41MB CapLen: 96 bytes
# of packets: 35695495 (28585.03MB)
AvgRate: 266.57Mbps stddev:30.78M
IP flow (unique src/dst pair) Information
# of flows: 2049292 (avg. 17.42 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.1% 3.7% 2.6% 2.4% 1.8% 1.6% 1.6% 1.6% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 1399604
Top 10 bandwidth usage (bytes/total in %):
23.6% 11.9% 10.6% 8.4% 5.7% 3.8% 3.7% 3.4% 3.2% 3.2%
# of IPv6 addresses: 5432
Top 10 bandwidth usage (bytes/total in %):
89.3% 67.0% 20.1% 3.0% 2.5% 1.2% 1.1% 1.1% 1.0% 1.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300645.pktlen.png)
detailed numbers
[ 32- 63]: 6173917
[ 64- 127]: 7738407
[ 128- 255]: 1175916
[ 256- 511]: 822326
[ 512- 1023]: 790716
[ 1024- 2047]: 18994213
Protocol Breakdown
![[protocol breakdown chart]](201203300645.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35695495 (100.00%) 29973578023 (100.00%) 839.70
ip 35089131 ( 98.30%) 29363292689 ( 97.96%) 836.82
tcp 28723324 ( 80.47%) 26548638984 ( 88.57%) 924.29
http(s) 12255956 ( 34.33%) 16739102631 ( 55.85%) 1365.79
http(c) 6159243 ( 17.25%) 1305758720 ( 4.36%) 212.00
squid 1435730 ( 4.02%) 1642239883 ( 5.48%) 1143.84
smtp 30407 ( 0.09%) 8011778 ( 0.03%) 263.48
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 6090 ( 0.02%) 634369 ( 0.00%) 104.17
pop3 5960 ( 0.02%) 563413 ( 0.00%) 94.53
imap 1257 ( 0.00%) 261867 ( 0.00%) 208.33
telnet 519 ( 0.00%) 33730 ( 0.00%) 64.99
ssh 419299 ( 1.17%) 50526422 ( 0.17%) 120.50
dns 2359 ( 0.01%) 284942 ( 0.00%) 120.79
bgp 609 ( 0.00%) 104152 ( 0.00%) 171.02
napster 48 ( 0.00%) 3176 ( 0.00%) 66.17
realaud 13 ( 0.00%) 1380 ( 0.00%) 106.15
icecast 1144 ( 0.00%) 563713 ( 0.00%) 492.76
hotline 1 ( 0.00%) 60 ( 0.00%) 60.00
other 8404683 ( 23.55%) 6800548374 ( 22.69%) 809.14
udp 3390087 ( 9.50%) 1733037165 ( 5.78%) 511.21
dns 390117 ( 1.09%) 82139424 ( 0.27%) 210.55
realaud 6 ( 0.00%) 463 ( 0.00%) 77.17
halflif 44 ( 0.00%) 4209 ( 0.00%) 95.66
starcra 14 ( 0.00%) 1910 ( 0.00%) 136.43
everque 920 ( 0.00%) 729779 ( 0.00%) 793.24
unreal 188 ( 0.00%) 118405 ( 0.00%) 629.81
quake 12 ( 0.00%) 885 ( 0.00%) 73.75
cuseeme 2 ( 0.00%) 187 ( 0.00%) 93.50
other 2964961 ( 8.31%) 1647986521 ( 5.50%) 555.82
icmp 1635112 ( 4.58%) 160325728 ( 0.53%) 98.05
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 38672 ( 0.11%) 22205712 ( 0.07%) 574.21
ip6 1285179 ( 3.60%) 896213979 ( 2.99%) 697.35
pim 205 ( 0.00%) 12300 ( 0.00%) 60.00
other 16368 ( 0.05%) 2839661 ( 0.01%) 173.49
frag 75740 ( 0.21%) 57898891 ( 0.19%) 764.44
ip6 606364 ( 1.70%) 610285334 ( 2.04%) 1006.47
tcp6 535564 ( 1.50%) 592879793 ( 1.98%) 1107.02
http(s) 5942 ( 0.02%) 7675588 ( 0.03%) 1291.75
http(c) 11323 ( 0.03%) 997984 ( 0.00%) 88.14
smtp 526 ( 0.00%) 227268 ( 0.00%) 432.07
dns 77 ( 0.00%) 14677 ( 0.00%) 190.61
bgp 89 ( 0.00%) 16600 ( 0.00%) 186.52
other 517607 ( 1.45%) 583947676 ( 1.95%) 1128.17
udp6 39044 ( 0.11%) 13210005 ( 0.04%) 338.34
dns 31908 ( 0.09%) 7546670 ( 0.03%) 236.51
other 7136 ( 0.02%) 5663335 ( 0.02%) 793.63
icmp6 31260 ( 0.09%) 3811677 ( 0.01%) 121.93
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 382 ( 0.00%) 368367 ( 0.00%) 964.31
tcpdump file: 201203300645.dump.gz (814.07 MB)