Traffic Trace Info
DumpFile: 201203300700.dump
FileSize: 2348.97MB
Id: 201203300700
StartTime: Fri Mar 30 07:00:00 2012
EndTime: Fri Mar 30 07:15:00 2012
TotalTime: 900.14 seconds
TotalCapSize: 1862.17MB CapLen: 96 bytes
# of packets: 31902238 (23751.60MB)
AvgRate: 221.35Mbps stddev:42.96M
IP flow (unique src/dst pair) Information
# of flows: 2029115 (avg. 15.72 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 3.7% 3.1% 2.9% 1.8% 1.6% 1.6% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1507320
Top 10 bandwidth usage (bytes/total in %):
28.5% 9.3% 8.5% 6.8% 4.9% 4.7% 4.4% 3.5% 3.3% 3.3%
# of IPv6 addresses: 5597
Top 10 bandwidth usage (bytes/total in %):
64.5% 61.9% 31.2% 17.0% 13.2% 1.6% 1.5% 1.0% 1.0% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300700.pktlen.png)
detailed numbers
[ 32- 63]: 6144048
[ 64- 127]: 7791735
[ 128- 255]: 1208961
[ 256- 511]: 539869
[ 512- 1023]: 519004
[ 1024- 2047]: 15698621
Protocol Breakdown
![[protocol breakdown chart]](201203300700.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31902238 (100.00%) 24905356107 (100.00%) 780.68
ip 30716530 ( 96.28%) 23431107440 ( 94.08%) 762.82
tcp 24536866 ( 76.91%) 20984785647 ( 84.26%) 855.23
http(s) 10029006 ( 31.44%) 14172774527 ( 56.91%) 1413.18
http(c) 5813391 ( 18.22%) 960641106 ( 3.86%) 165.25
squid 991497 ( 3.11%) 1057912665 ( 4.25%) 1066.99
smtp 30700 ( 0.10%) 7409338 ( 0.03%) 241.35
ftp 7922 ( 0.02%) 650026 ( 0.00%) 82.05
pop3 5776 ( 0.02%) 535461 ( 0.00%) 92.70
imap 1360 ( 0.00%) 579930 ( 0.00%) 426.42
telnet 392 ( 0.00%) 25446 ( 0.00%) 64.91
ssh 535816 ( 1.68%) 56163053 ( 0.23%) 104.82
dns 2285 ( 0.01%) 272162 ( 0.00%) 119.11
bgp 621 ( 0.00%) 113096 ( 0.00%) 182.12
napster 66 ( 0.00%) 6253 ( 0.00%) 94.74
realaud 22 ( 0.00%) 1362 ( 0.00%) 61.91
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 973 ( 0.00%) 555851 ( 0.00%) 571.28
hotline 6 ( 0.00%) 366 ( 0.00%) 61.00
other 7117032 ( 22.31%) 4727144945 ( 18.98%) 664.20
udp 2843601 ( 8.91%) 1331236067 ( 5.35%) 468.15
dns 382783 ( 1.20%) 78030542 ( 0.31%) 203.85
realaud 3 ( 0.00%) 247 ( 0.00%) 82.33
halflif 41 ( 0.00%) 3600 ( 0.00%) 87.80
starcra 19 ( 0.00%) 2783 ( 0.00%) 146.47
everque 308 ( 0.00%) 66318 ( 0.00%) 215.32
unreal 249 ( 0.00%) 179930 ( 0.00%) 722.61
quake 10 ( 0.00%) 1398 ( 0.00%) 139.80
cuseeme 3 ( 0.00%) 270 ( 0.00%) 90.00
other 2451080 ( 7.68%) 1252371725 ( 5.03%) 510.95
icmp 1622297 ( 5.09%) 155384136 ( 0.62%) 95.78
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 14605 ( 0.05%) 7064942 ( 0.03%) 483.73
ip6 1680508 ( 5.27%) 946293624 ( 3.80%) 563.10
pim 195 ( 0.00%) 11700 ( 0.00%) 60.00
other 18273 ( 0.06%) 6312054 ( 0.03%) 345.43
frag 32534 ( 0.10%) 24922930 ( 0.10%) 766.06
ip6 1185708 ( 3.72%) 1474248667 ( 5.92%) 1243.35
tcp6 1102149 ( 3.45%) 1449501252 ( 5.82%) 1315.16
http(s) 18487 ( 0.06%) 25664109 ( 0.10%) 1388.22
http(c) 20985 ( 0.07%) 1859049 ( 0.01%) 88.59
smtp 197 ( 0.00%) 168569 ( 0.00%) 855.68
dns 366 ( 0.00%) 71620 ( 0.00%) 195.68
bgp 91 ( 0.00%) 16508 ( 0.00%) 181.41
other 1062023 ( 3.33%) 1421721397 ( 5.71%) 1338.69
udp6 44729 ( 0.14%) 16750920 ( 0.07%) 374.50
dns 35291 ( 0.11%) 8244337 ( 0.03%) 233.61
unreal 1 ( 0.00%) 113 ( 0.00%) 113.00
other 9437 ( 0.03%) 8506470 ( 0.03%) 901.40
icmp6 33421 ( 0.10%) 4129305 ( 0.02%) 123.55
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 5296 ( 0.02%) 3851766 ( 0.02%) 727.30
tcpdump file: 201203300700.dump.gz (738.27 MB)