Traffic Trace Info
DumpFile: 201203300730.dump
FileSize: 2072.78MB
Id: 201203300730
StartTime: Fri Mar 30 07:30:01 2012
EndTime: Fri Mar 30 07:45:00 2012
TotalTime: 899.34 seconds
TotalCapSize: 1642.03MB CapLen: 96 bytes
# of packets: 28229065 (20367.79MB)
AvgRate: 189.99Mbps stddev:34.02M
IP flow (unique src/dst pair) Information
# of flows: 1843588 (avg. 15.31 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 4.2% 3.9% 3.6% 3.2% 2.5% 1.9% 1.6% 1.6% 1.2%
IP address Information
# of IPv4 addresses: 1396379
Top 10 bandwidth usage (bytes/total in %):
24.8% 10.3% 8.3% 7.1% 5.9% 5.6% 4.5% 4.4% 4.2% 3.9%
# of IPv6 addresses: 5309
Top 10 bandwidth usage (bytes/total in %):
96.3% 95.3% 1.3% 1.3% 0.4% 0.4% 0.3% 0.2% 0.2% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300730.pktlen.png)
detailed numbers
[ 32- 63]: 5559689
[ 64- 127]: 7249728
[ 128- 255]: 1016787
[ 256- 511]: 439953
[ 512- 1023]: 555306
[ 1024- 2047]: 13407602
Protocol Breakdown
![[protocol breakdown chart]](201203300730.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28229065 (100.00%) 21357172686 (100.00%) 756.57
ip 27384806 ( 97.01%) 20297207915 ( 95.04%) 741.19
tcp 21368042 ( 75.70%) 17566081185 ( 82.25%) 822.07
http(s) 7726619 ( 27.37%) 10682354492 ( 50.02%) 1382.54
http(c) 4263370 ( 15.10%) 431617076 ( 2.02%) 101.24
squid 1224019 ( 4.34%) 1384820658 ( 6.48%) 1131.37
smtp 37202 ( 0.13%) 5725118 ( 0.03%) 153.89
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 12285 ( 0.04%) 920617 ( 0.00%) 74.94
pop3 6180 ( 0.02%) 875465 ( 0.00%) 141.66
imap 1735 ( 0.01%) 438644 ( 0.00%) 252.82
telnet 689 ( 0.00%) 44580 ( 0.00%) 64.70
ssh 440468 ( 1.56%) 54576676 ( 0.26%) 123.91
dns 2304 ( 0.01%) 278851 ( 0.00%) 121.03
bgp 612 ( 0.00%) 96951 ( 0.00%) 158.42
napster 52 ( 0.00%) 3334 ( 0.00%) 64.12
realaud 27 ( 0.00%) 1672 ( 0.00%) 61.93
rtsp 8 ( 0.00%) 480 ( 0.00%) 60.00
icecast 962 ( 0.00%) 548602 ( 0.00%) 570.27
hotline 22 ( 0.00%) 1398 ( 0.00%) 63.55
other 7651482 ( 27.10%) 5003776197 ( 23.43%) 653.96
udp 2839264 ( 10.06%) 1636560580 ( 7.66%) 576.40
dns 273831 ( 0.97%) 59040734 ( 0.28%) 215.61
realaud 22 ( 0.00%) 2540 ( 0.00%) 115.45
halflif 86 ( 0.00%) 7119 ( 0.00%) 82.78
starcra 20 ( 0.00%) 2244 ( 0.00%) 112.20
everque 299 ( 0.00%) 59450 ( 0.00%) 198.83
unreal 62 ( 0.00%) 15826 ( 0.00%) 255.26
quake 8 ( 0.00%) 1157 ( 0.00%) 144.62
cuseeme 1 ( 0.00%) 87 ( 0.00%) 87.00
other 2563547 ( 9.08%) 1577327197 ( 7.39%) 615.29
icmp 1706709 ( 6.05%) 164463403 ( 0.77%) 96.36
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 22869 ( 0.08%) 13269038 ( 0.06%) 580.22
ip6 1430894 ( 5.07%) 914092052 ( 4.28%) 638.83
pim 226 ( 0.00%) 13560 ( 0.00%) 60.00
other 16618 ( 0.06%) 2708937 ( 0.01%) 163.01
frag 3167 ( 0.01%) 2458622 ( 0.01%) 776.33
ip6 844259 ( 2.99%) 1059964771 ( 4.96%) 1255.50
tcp6 769300 ( 2.73%) 1043194292 ( 4.88%) 1356.03
http(s) 7976 ( 0.03%) 10041195 ( 0.05%) 1258.93
http(c) 26769 ( 0.09%) 2366923 ( 0.01%) 88.42
smtp 206 ( 0.00%) 123149 ( 0.00%) 597.81
ftp 24 ( 0.00%) 1890 ( 0.00%) 78.75
dns 283 ( 0.00%) 56032 ( 0.00%) 197.99
bgp 106 ( 0.00%) 23991 ( 0.00%) 226.33
other 733936 ( 2.60%) 1030581112 ( 4.83%) 1404.18
udp6 40082 ( 0.14%) 10982934 ( 0.05%) 274.01
dns 34421 ( 0.12%) 7941009 ( 0.04%) 230.70
realaud 1 ( 0.00%) 105 ( 0.00%) 105.00
halflif 1 ( 0.00%) 103 ( 0.00%) 103.00
quake 1 ( 0.00%) 110 ( 0.00%) 110.00
other 5658 ( 0.02%) 3041607 ( 0.01%) 537.58
icmp6 32582 ( 0.12%) 4164184 ( 0.02%) 127.81
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2181 ( 0.01%) 1607869 ( 0.01%) 737.22
tcpdump file: 201203300730.dump.gz (660.16 MB)