Traffic Trace Info
DumpFile: 201203300745.dump
FileSize: 2199.06MB
Id: 201203300745
StartTime: Fri Mar 30 07:45:00 2012
EndTime: Fri Mar 30 08:00:00 2012
TotalTime: 900.29 seconds
TotalCapSize: 1741.74MB CapLen: 96 bytes
# of packets: 29970522 (22686.76MB)
AvgRate: 211.39Mbps stddev:27.01M
IP flow (unique src/dst pair) Information
# of flows: 2056867 (avg. 14.57 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.5% 5.3% 3.3% 2.5% 2.4% 2.2% 1.8% 1.8% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1487044
Top 10 bandwidth usage (bytes/total in %):
14.8% 14.1% 14.1% 9.1% 8.7% 7.0% 5.6% 4.7% 4.6% 4.6%
# of IPv6 addresses: 5282
Top 10 bandwidth usage (bytes/total in %):
92.2% 79.8% 10.8% 2.4% 1.1% 1.1% 1.1% 0.8% 0.7% 0.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300745.pktlen.png)
detailed numbers
[ 32- 63]: 5608413
[ 64- 127]: 7248541
[ 128- 255]: 924957
[ 256- 511]: 460451
[ 512- 1023]: 602596
[ 1024- 2047]: 15125564
Protocol Breakdown
![[protocol breakdown chart]](201203300745.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 29970522 (100.00%) 23788792568 (100.00%) 793.74
ip 29331372 ( 97.87%) 23064383904 ( 96.95%) 786.34
tcp 23335570 ( 77.86%) 20199709254 ( 84.91%) 865.62
http(s) 9299722 ( 31.03%) 12879009011 ( 54.14%) 1384.88
http(c) 4474061 ( 14.93%) 386286703 ( 1.62%) 86.34
squid 1363264 ( 4.55%) 1567626110 ( 6.59%) 1149.91
smtp 30424 ( 0.10%) 7737759 ( 0.03%) 254.33
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 6776 ( 0.02%) 627065 ( 0.00%) 92.54
pop3 5998 ( 0.02%) 740245 ( 0.00%) 123.42
imap 22978 ( 0.08%) 18862957 ( 0.08%) 820.91
telnet 9412 ( 0.03%) 677156 ( 0.00%) 71.95
ssh 393902 ( 1.31%) 54076701 ( 0.23%) 137.28
dns 2517 ( 0.01%) 317197 ( 0.00%) 126.02
bgp 619 ( 0.00%) 100234 ( 0.00%) 161.93
napster 29 ( 0.00%) 1942 ( 0.00%) 66.97
realaud 18 ( 0.00%) 1146 ( 0.00%) 63.67
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 1154 ( 0.00%) 570992 ( 0.00%) 494.79
hotline 42 ( 0.00%) 3618 ( 0.00%) 86.14
other 7724641 ( 25.77%) 5283069610 ( 22.21%) 683.92
udp 2758079 ( 9.20%) 1520620171 ( 6.39%) 551.33
dns 254767 ( 0.85%) 58792872 ( 0.25%) 230.77
realaud 5 ( 0.00%) 677 ( 0.00%) 135.40
halflif 21 ( 0.00%) 2213 ( 0.00%) 105.38
starcra 18 ( 0.00%) 2217 ( 0.00%) 123.17
everque 306 ( 0.00%) 64363 ( 0.00%) 210.34
unreal 118 ( 0.00%) 57710 ( 0.00%) 489.07
quake 6 ( 0.00%) 749 ( 0.00%) 124.83
cuseeme 3 ( 0.00%) 276 ( 0.00%) 92.00
other 2502664 ( 8.35%) 1461661109 ( 6.14%) 584.04
icmp 1645770 ( 5.49%) 159509225 ( 0.67%) 96.92
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 18362 ( 0.06%) 9325788 ( 0.04%) 507.89
ip6 1556411 ( 5.19%) 1172347714 ( 4.93%) 753.24
pim 248 ( 0.00%) 14880 ( 0.00%) 60.00
other 16748 ( 0.06%) 2837712 ( 0.01%) 169.44
frag 5478 ( 0.02%) 4196240 ( 0.02%) 766.02
ip6 639150 ( 2.13%) 724408664 ( 3.05%) 1133.39
tcp6 552949 ( 1.84%) 697241151 ( 2.93%) 1260.95
http(s) 11955 ( 0.04%) 11277473 ( 0.05%) 943.33
http(c) 14887 ( 0.05%) 1362450 ( 0.01%) 91.52
smtp 547 ( 0.00%) 232820 ( 0.00%) 425.63
dns 91 ( 0.00%) 11379 ( 0.00%) 125.04
bgp 86 ( 0.00%) 12839 ( 0.00%) 149.29
other 525383 ( 1.75%) 684344190 ( 2.88%) 1302.56
udp6 42102 ( 0.14%) 14252097 ( 0.06%) 338.51
dns 34169 ( 0.11%) 8041872 ( 0.03%) 235.36
starcra 1 ( 0.00%) 106 ( 0.00%) 106.00
everque 1 ( 0.00%) 104 ( 0.00%) 104.00
quake 1 ( 0.00%) 117 ( 0.00%) 117.00
cuseeme 1 ( 0.00%) 105 ( 0.00%) 105.00
other 7929 ( 0.03%) 6209793 ( 0.03%) 783.17
icmp6 31381 ( 0.10%) 3950966 ( 0.02%) 125.90
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 12603 ( 0.04%) 8948790 ( 0.04%) 710.05
tcpdump file: 201203300745.dump.gz (681.44 MB)