Traffic Trace Info
DumpFile: 201203300830.dump
FileSize: 1992.96MB
Id: 201203300830
StartTime: Fri Mar 30 08:30:00 2012
EndTime: Fri Mar 30 08:45:01 2012
TotalTime: 900.41 seconds
TotalCapSize: 1574.15MB CapLen: 96 bytes
# of packets: 27446638 (19050.44MB)
AvgRate: 177.48Mbps stddev:30.94M
IP flow (unique src/dst pair) Information
# of flows: 2553076 (avg. 10.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 3.8% 3.7% 3.1% 2.9% 2.4% 2.4% 1.9% 1.7% 1.2%
IP address Information
# of IPv4 addresses: 1464699
Top 10 bandwidth usage (bytes/total in %):
20.6% 10.5% 10.4% 8.2% 5.6% 4.8% 4.7% 3.9% 3.8% 3.8%
# of IPv6 addresses: 5784
Top 10 bandwidth usage (bytes/total in %):
40.1% 14.4% 12.8% 5.4% 5.3% 5.3% 5.1% 3.2% 2.7% 2.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300830.pktlen.png)
detailed numbers
[ 32- 63]: 5972276
[ 64- 127]: 6845699
[ 128- 255]: 871213
[ 256- 511]: 535589
[ 512- 1023]: 679638
[ 1024- 2047]: 12542223
Protocol Breakdown
![[protocol breakdown chart]](201203300830.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 27446638 (100.00%) 19975830910 (100.00%) 727.81
ip 27281752 ( 99.40%) 19905746446 ( 99.65%) 729.64
tcp 20999041 ( 76.51%) 16707508021 ( 83.64%) 795.63
http(s) 8143366 ( 29.67%) 9893604751 ( 49.53%) 1214.93
http(c) 4920285 ( 17.93%) 555740648 ( 2.78%) 112.95
squid 1687317 ( 6.15%) 2042150029 ( 10.22%) 1210.29
smtp 30262 ( 0.11%) 10326071 ( 0.05%) 341.22
ftp 48996 ( 0.18%) 3910930 ( 0.02%) 79.82
pop3 24810 ( 0.09%) 2251424 ( 0.01%) 90.75
imap 2289 ( 0.01%) 978781 ( 0.00%) 427.60
telnet 492 ( 0.00%) 35680 ( 0.00%) 72.52
ssh 118418 ( 0.43%) 18056049 ( 0.09%) 152.48
dns 2883 ( 0.01%) 938941 ( 0.00%) 325.68
bgp 601 ( 0.00%) 89241 ( 0.00%) 148.49
napster 63 ( 0.00%) 5642 ( 0.00%) 89.56
realaud 11 ( 0.00%) 1804 ( 0.00%) 164.00
rtsp 262 ( 0.00%) 20278 ( 0.00%) 77.40
icecast 14846 ( 0.05%) 14253305 ( 0.07%) 960.08
hotline 30 ( 0.00%) 1978 ( 0.00%) 65.93
other 6004110 ( 21.88%) 4165142469 ( 20.85%) 693.72
udp 2795851 ( 10.19%) 1373807187 ( 6.88%) 491.37
dns 315537 ( 1.15%) 74990985 ( 0.38%) 237.66
realaud 1 ( 0.00%) 271 ( 0.00%) 271.00
halflif 54 ( 0.00%) 4685 ( 0.00%) 86.76
starcra 26 ( 0.00%) 2132 ( 0.00%) 82.00
everque 307 ( 0.00%) 67418 ( 0.00%) 219.60
unreal 259 ( 0.00%) 159367 ( 0.00%) 615.32
quake 8 ( 0.00%) 634 ( 0.00%) 79.25
cuseeme 3 ( 0.00%) 303 ( 0.00%) 101.00
other 2399545 ( 8.74%) 1293468709 ( 6.48%) 539.05
icmp 1641561 ( 5.98%) 156073874 ( 0.78%) 95.08
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 18165 ( 0.07%) 9067230 ( 0.05%) 499.16
ip6 1810664 ( 6.60%) 1656520026 ( 8.29%) 914.87
pim 198 ( 0.00%) 11880 ( 0.00%) 60.00
other 16088 ( 0.06%) 2739068 ( 0.01%) 170.26
frag 181606 ( 0.66%) 137462585 ( 0.69%) 756.93
ip6 164884 ( 0.60%) 70084344 ( 0.35%) 425.05
tcp6 88369 ( 0.32%) 55323499 ( 0.28%) 626.05
http(s) 7582 ( 0.03%) 7831683 ( 0.04%) 1032.93
http(c) 26315 ( 0.10%) 2210888 ( 0.01%) 84.02
smtp 764 ( 0.00%) 260269 ( 0.00%) 340.67
ftp 98 ( 0.00%) 13417 ( 0.00%) 136.91
dns 262 ( 0.00%) 53548 ( 0.00%) 204.38
bgp 85 ( 0.00%) 12504 ( 0.00%) 147.11
other 53263 ( 0.19%) 44941190 ( 0.22%) 843.76
udp6 42791 ( 0.16%) 10090240 ( 0.05%) 235.80
dns 39743 ( 0.14%) 9642888 ( 0.05%) 242.63
realaud 1 ( 0.00%) 96 ( 0.00%) 96.00
halflif 1 ( 0.00%) 99 ( 0.00%) 99.00
other 3046 ( 0.01%) 447157 ( 0.00%) 146.80
icmp6 33178 ( 0.12%) 4231672 ( 0.02%) 127.54
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 433 ( 0.00%) 423509 ( 0.00%) 978.08
tcpdump file: 201203300830.dump.gz (636.90 MB)