Traffic Trace Info
DumpFile: 201203300715.dump
FileSize: 2186.06MB
Id: 201203300715
StartTime: Fri Mar 30 07:15:00 2012
EndTime: Fri Mar 30 07:30:01 2012
TotalTime: 900.41 seconds
TotalCapSize: 1733.81MB CapLen: 96 bytes
# of packets: 29638144 (21764.66MB)
AvgRate: 202.77Mbps stddev:37.81M
IP flow (unique src/dst pair) Information
# of flows: 2058485 (avg. 14.40 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 3.4% 2.2% 2.0% 1.9% 1.8% 1.7% 1.2% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1515134
Top 10 bandwidth usage (bytes/total in %):
27.1% 7.6% 6.3% 5.5% 5.0% 4.3% 4.2% 3.6% 3.6% 3.0%
# of IPv6 addresses: 5329
Top 10 bandwidth usage (bytes/total in %):
79.8% 77.6% 12.1% 7.4% 4.2% 4.0% 4.0% 1.2% 1.2% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300715.pktlen.png)
detailed numbers
[ 32- 63]: 5360730
[ 64- 127]: 7709442
[ 128- 255]: 1224163
[ 256- 511]: 483161
[ 512- 1023]: 565698
[ 1024- 2047]: 14294950
Protocol Breakdown
![[protocol breakdown chart]](201203300715.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29638144 (100.00%) 22821904675 (100.00%) 770.02
ip 28760270 ( 97.04%) 21745027887 ( 95.28%) 756.08
tcp 22913147 ( 77.31%) 19178194785 ( 84.03%) 837.00
http(s) 8298486 ( 28.00%) 11584440426 ( 50.76%) 1395.97
http(c) 4918209 ( 16.59%) 821107246 ( 3.60%) 166.95
squid 1502960 ( 5.07%) 1614322224 ( 7.07%) 1074.10
smtp 29957 ( 0.10%) 6754118 ( 0.03%) 225.46
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 5182 ( 0.02%) 543088 ( 0.00%) 104.80
pop3 6068 ( 0.02%) 571282 ( 0.00%) 94.15
imap 1332 ( 0.00%) 547720 ( 0.00%) 411.20
telnet 676 ( 0.00%) 43702 ( 0.00%) 64.65
ssh 379874 ( 1.28%) 45417201 ( 0.20%) 119.56
dns 2076 ( 0.01%) 242458 ( 0.00%) 116.79
bgp 612 ( 0.00%) 105543 ( 0.00%) 172.46
napster 58 ( 0.00%) 3798 ( 0.00%) 65.48
realaud 35 ( 0.00%) 2256 ( 0.00%) 64.46
rtsp 7 ( 0.00%) 420 ( 0.00%) 60.00
icecast 584 ( 0.00%) 71822 ( 0.00%) 122.98
hotline 19 ( 0.00%) 1196 ( 0.00%) 62.95
other 7767006 ( 26.21%) 5104019911 ( 22.36%) 657.14
udp 2770905 ( 9.35%) 1608728156 ( 7.05%) 580.58
dns 274461 ( 0.93%) 59071354 ( 0.26%) 215.23
realaud 2 ( 0.00%) 474 ( 0.00%) 237.00
halflif 76 ( 0.00%) 8796 ( 0.00%) 115.74
starcra 21 ( 0.00%) 3318 ( 0.00%) 158.00
everque 334 ( 0.00%) 65941 ( 0.00%) 197.43
unreal 19 ( 0.00%) 2387 ( 0.00%) 125.63
quake 18 ( 0.00%) 1978 ( 0.00%) 109.89
other 2495761 ( 8.42%) 1549531124 ( 6.79%) 620.87
icmp 1698806 ( 5.73%) 162567072 ( 0.71%) 95.69
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 13316 ( 0.04%) 5875528 ( 0.03%) 441.24
ip6 1346458 ( 4.54%) 786631631 ( 3.45%) 584.22
pim 286 ( 0.00%) 17160 ( 0.00%) 60.00
other 17167 ( 0.06%) 2994285 ( 0.01%) 174.42
frag 6690 ( 0.02%) 5028989 ( 0.02%) 751.72
ip6 877874 ( 2.96%) 1076876788 ( 4.72%) 1226.69
tcp6 802594 ( 2.71%) 1057624646 ( 4.63%) 1317.76
http(s) 8307 ( 0.03%) 11408603 ( 0.05%) 1373.37
http(c) 23523 ( 0.08%) 1990959 ( 0.01%) 84.64
smtp 147 ( 0.00%) 78596 ( 0.00%) 534.67
dns 138 ( 0.00%) 19618 ( 0.00%) 142.16
bgp 96 ( 0.00%) 15862 ( 0.00%) 165.23
other 770383 ( 2.60%) 1044111008 ( 4.58%) 1355.31
udp6 42116 ( 0.14%) 14746608 ( 0.06%) 350.14
dns 34582 ( 0.12%) 8206983 ( 0.04%) 237.32
halflif 1 ( 0.00%) 113 ( 0.00%) 113.00
quake 2 ( 0.00%) 221 ( 0.00%) 110.50
other 7531 ( 0.03%) 6539291 ( 0.03%) 868.32
icmp6 32728 ( 0.11%) 4176420 ( 0.02%) 127.61
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 321 ( 0.00%) 313486 ( 0.00%) 976.59
tcpdump file: 201203300715.dump.gz (701.21 MB)