Traffic Trace Info
DumpFile: 201203300800.dump
FileSize: 2193.79MB
Id: 201203300800
StartTime: Fri Mar 30 08:00:00 2012
EndTime: Fri Mar 30 08:15:01 2012
TotalTime: 900.41 seconds
TotalCapSize: 1734.38MB CapLen: 96 bytes
# of packets: 30107233 (22482.22MB)
AvgRate: 209.46Mbps stddev:40.57M
IP flow (unique src/dst pair) Information
# of flows: 1823902 (avg. 16.51 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 3.5% 3.4% 3.1% 2.6% 1.8% 1.8% 1.5% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 1407852
Top 10 bandwidth usage (bytes/total in %):
15.5% 9.7% 7.8% 6.7% 6.3% 5.9% 4.6% 4.3% 3.8% 3.7%
# of IPv6 addresses: 5737
Top 10 bandwidth usage (bytes/total in %):
92.1% 90.8% 2.6% 2.4% 1.8% 0.8% 0.8% 0.7% 0.7% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300800.pktlen.png)
detailed numbers
[ 32- 63]: 5970320
[ 64- 127]: 7232098
[ 128- 255]: 823620
[ 256- 511]: 515421
[ 512- 1023]: 678814
[ 1024- 2047]: 14886960
Protocol Breakdown
![[protocol breakdown chart]](201203300800.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30107233 (100.00%) 23574314941 (100.00%) 783.01
ip 29237777 ( 97.11%) 22492319119 ( 95.41%) 769.29
tcp 21277889 ( 70.67%) 18172109615 ( 77.08%) 854.04
http(s) 8071708 ( 26.81%) 11155171754 ( 47.32%) 1382.01
http(c) 4609434 ( 15.31%) 398420506 ( 1.69%) 86.44
squid 1532043 ( 5.09%) 1699343413 ( 7.21%) 1109.20
smtp 34417 ( 0.11%) 6951997 ( 0.03%) 201.99
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 6956 ( 0.02%) 664000 ( 0.00%) 95.46
pop3 6087 ( 0.02%) 711776 ( 0.00%) 116.93
imap 2299 ( 0.01%) 1004605 ( 0.00%) 436.97
telnet 58800 ( 0.20%) 4322183 ( 0.02%) 73.51
ssh 57875 ( 0.19%) 8792984 ( 0.04%) 151.93
dns 2467 ( 0.01%) 292207 ( 0.00%) 118.45
bgp 608 ( 0.00%) 105152 ( 0.00%) 172.95
napster 65 ( 0.00%) 4313 ( 0.00%) 66.35
realaud 11 ( 0.00%) 686 ( 0.00%) 62.36
rtsp 358 ( 0.00%) 28949 ( 0.00%) 80.86
icecast 3364 ( 0.01%) 2205354 ( 0.01%) 655.57
hotline 25 ( 0.00%) 2843 ( 0.00%) 113.72
other 6891371 ( 22.89%) 4894086833 ( 20.76%) 710.18
udp 4165662 ( 13.84%) 2600487621 ( 11.03%) 624.27
dns 314280 ( 1.04%) 70823340 ( 0.30%) 225.35
realaud 7 ( 0.00%) 507 ( 0.00%) 72.43
halflif 21 ( 0.00%) 2420 ( 0.00%) 115.24
starcra 26 ( 0.00%) 3272 ( 0.00%) 125.85
everque 322 ( 0.00%) 65051 ( 0.00%) 202.02
unreal 90 ( 0.00%) 36783 ( 0.00%) 408.70
quake 14 ( 0.00%) 2032 ( 0.00%) 145.14
cuseeme 1 ( 0.00%) 83 ( 0.00%) 83.00
other 3403691 ( 11.31%) 2502692592 ( 10.62%) 735.29
icmp 1628483 ( 5.41%) 160652718 ( 0.68%) 98.65
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 18297 ( 0.06%) 9589686 ( 0.04%) 524.11
ip6 2128758 ( 7.07%) 1545127977 ( 6.55%) 725.84
pim 229 ( 0.00%) 13740 ( 0.00%) 60.00
other 18274 ( 0.06%) 4318492 ( 0.02%) 236.32
frag 971613 ( 3.23%) 741193210 ( 3.14%) 762.85
ip6 869456 ( 2.89%) 1081995822 ( 4.59%) 1244.45
tcp6 792255 ( 2.63%) 1067317030 ( 4.53%) 1347.19
http(s) 7811 ( 0.03%) 6950040 ( 0.03%) 889.78
http(c) 7542 ( 0.03%) 687294 ( 0.00%) 91.13
smtp 485 ( 0.00%) 205970 ( 0.00%) 424.68
ftp 22 ( 0.00%) 2684 ( 0.00%) 122.00
dns 291 ( 0.00%) 56596 ( 0.00%) 194.49
bgp 94 ( 0.00%) 15976 ( 0.00%) 169.96
napster 3 ( 0.00%) 230 ( 0.00%) 76.67
other 776007 ( 2.58%) 1059398240 ( 4.49%) 1365.19
udp6 42864 ( 0.14%) 10033845 ( 0.04%) 234.09
dns 39246 ( 0.13%) 9498904 ( 0.04%) 242.03
unreal 1 ( 0.00%) 102 ( 0.00%) 102.00
quake 3 ( 0.00%) 335 ( 0.00%) 111.67
other 3614 ( 0.01%) 534504 ( 0.00%) 147.90
icmp6 33813 ( 0.11%) 4259538 ( 0.02%) 125.97
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 411 ( 0.00%) 370017 ( 0.00%) 900.28
tcpdump file: 201203300800.dump.gz (678.25 MB)