Traffic Trace Info
DumpFile: 201203300815.dump
FileSize: 2098.16MB
Id: 201203300815
StartTime: Fri Mar 30 08:15:01 2012
EndTime: Fri Mar 30 08:30:00 2012
TotalTime: 899.38 seconds
TotalCapSize: 1661.81MB CapLen: 96 bytes
# of packets: 28595937 (21261.16MB)
AvgRate: 198.29Mbps stddev:42.00M
IP flow (unique src/dst pair) Information
# of flows: 1885277 (avg. 15.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.4% 2.9% 2.9% 2.9% 2.6% 1.9% 1.8% 1.6% 1.4% 1.2%
IP address Information
# of IPv4 addresses: 1427815
Top 10 bandwidth usage (bytes/total in %):
15.6% 10.5% 9.4% 9.2% 4.9% 4.3% 4.1% 4.0% 3.6% 3.6%
# of IPv6 addresses: 5832
Top 10 bandwidth usage (bytes/total in %):
84.5% 84.5% 5.2% 4.9% 4.9% 1.4% 0.9% 0.5% 0.5% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300815.pktlen.png)
detailed numbers
[ 32- 63]: 5179204
[ 64- 127]: 7241052
[ 128- 255]: 900408
[ 256- 511]: 523629
[ 512- 1023]: 656521
[ 1024- 2047]: 14095123
Protocol Breakdown
![[protocol breakdown chart]](201203300815.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 28595937 (100.00%) 22293941777 (100.00%) 779.62
ip 28013331 ( 97.96%) 21613938916 ( 96.95%) 771.56
tcp 21136221 ( 73.91%) 17606717054 ( 78.98%) 833.01
http(s) 7363963 ( 25.75%) 10032816770 ( 45.00%) 1362.42
http(c) 4521597 ( 15.81%) 430581566 ( 1.93%) 95.23
squid 1715251 ( 6.00%) 1975530863 ( 8.86%) 1151.74
smtp 97192 ( 0.34%) 17802695 ( 0.08%) 183.17
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 12905 ( 0.05%) 999371 ( 0.00%) 77.44
pop3 46346 ( 0.16%) 3890713 ( 0.02%) 83.95
imap 1170 ( 0.00%) 418996 ( 0.00%) 358.12
telnet 10619 ( 0.04%) 721308 ( 0.00%) 67.93
ssh 208573 ( 0.73%) 21281807 ( 0.10%) 102.04
dns 2155 ( 0.01%) 276860 ( 0.00%) 128.47
bgp 619 ( 0.00%) 105726 ( 0.00%) 170.80
napster 21 ( 0.00%) 1352 ( 0.00%) 64.38
realaud 8 ( 0.00%) 486 ( 0.00%) 60.75
rtsp 333 ( 0.00%) 25840 ( 0.00%) 77.60
icecast 6640 ( 0.02%) 4354177 ( 0.02%) 655.75
hotline 27 ( 0.00%) 2166 ( 0.00%) 80.22
other 7148796 ( 25.00%) 5117905984 ( 22.96%) 715.91
udp 3097403 ( 10.83%) 1795331257 ( 8.05%) 579.62
dns 306244 ( 1.07%) 72516523 ( 0.33%) 236.79
realaud 7 ( 0.00%) 1097 ( 0.00%) 156.71
halflif 23 ( 0.00%) 2039 ( 0.00%) 88.65
starcra 22 ( 0.00%) 3503 ( 0.00%) 159.23
everque 311 ( 0.00%) 61727 ( 0.00%) 198.48
unreal 109 ( 0.00%) 40846 ( 0.00%) 374.73
quake 11 ( 0.00%) 1553 ( 0.00%) 141.18
cuseeme 4 ( 0.00%) 638 ( 0.00%) 159.50
other 2790438 ( 9.76%) 1722667766 ( 7.73%) 617.35
icmp 1643313 ( 5.75%) 160088012 ( 0.72%) 97.42
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 10187 ( 0.04%) 3854914 ( 0.02%) 378.42
ip6 2108614 ( 7.37%) 2044401605 ( 9.17%) 969.55
pim 216 ( 0.00%) 12960 ( 0.00%) 60.00
other 17192 ( 0.06%) 3513844 ( 0.02%) 204.39
frag 16385 ( 0.06%) 12172644 ( 0.05%) 742.91
ip6 582606 ( 2.04%) 680002861 ( 3.05%) 1167.17
tcp6 506678 ( 1.77%) 665852701 ( 2.99%) 1314.15
http(s) 7317 ( 0.03%) 8261363 ( 0.04%) 1129.06
http(c) 15080 ( 0.05%) 1281686 ( 0.01%) 84.99
smtp 443 ( 0.00%) 159401 ( 0.00%) 359.82
dns 66 ( 0.00%) 11509 ( 0.00%) 174.38
bgp 98 ( 0.00%) 22705 ( 0.00%) 231.68
other 483674 ( 1.69%) 656116037 ( 2.94%) 1356.53
udp6 41397 ( 0.14%) 9458261 ( 0.04%) 228.48
dns 37882 ( 0.13%) 8913060 ( 0.04%) 235.28
halflif 1 ( 0.00%) 101 ( 0.00%) 101.00
everque 1 ( 0.00%) 111 ( 0.00%) 111.00
cuseeme 1 ( 0.00%) 106 ( 0.00%) 106.00
other 3512 ( 0.01%) 544883 ( 0.00%) 155.15
icmp6 34076 ( 0.12%) 4324913 ( 0.02%) 126.92
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 339 ( 0.00%) 351258 ( 0.00%) 1036.16
tcpdump file: 201203300815.dump.gz (652.71 MB)