Traffic Trace Info
DumpFile: 201203300845.dump
FileSize: 1960.15MB
Id: 201203300845
StartTime: Fri Mar 30 08:45:01 2012
EndTime: Fri Mar 30 09:00:00 2012
TotalTime: 899.14 seconds
TotalCapSize: 1550.42MB CapLen: 96 bytes
# of packets: 26851811 (18837.19MB)
AvgRate: 175.77Mbps stddev:27.21M
IP flow (unique src/dst pair) Information
# of flows: 2090147 (avg. 12.85 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 2.3% 1.9% 1.9% 1.8% 1.6% 1.6% 1.4% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 1486272
Top 10 bandwidth usage (bytes/total in %):
17.0% 10.9% 8.1% 7.8% 4.5% 4.0% 3.8% 3.6% 2.8% 2.6%
# of IPv6 addresses: 5699
Top 10 bandwidth usage (bytes/total in %):
34.4% 30.4% 26.3% 6.0% 2.2% 2.2% 2.1% 2.1% 1.9% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300845.pktlen.png)
detailed numbers
[ 32- 63]: 5104163
[ 64- 127]: 6982326
[ 128- 255]: 898133
[ 256- 511]: 729960
[ 512- 1023]: 908170
[ 1024- 2047]: 12229059
Protocol Breakdown
![[protocol breakdown chart]](201203300845.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26851811 (100.00%) 19752225919 (100.00%) 735.60
ip 26675477 ( 99.34%) 19690872664 ( 99.69%) 738.16
tcp 20479240 ( 76.27%) 16732915659 ( 84.71%) 817.07
http(s) 7596320 ( 28.29%) 9979508365 ( 50.52%) 1313.73
http(c) 5390982 ( 20.08%) 1041899237 ( 5.27%) 193.27
squid 1925707 ( 7.17%) 2162551965 ( 10.95%) 1122.99
smtp 57287 ( 0.21%) 28572419 ( 0.14%) 498.76
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 33027 ( 0.12%) 2828133 ( 0.01%) 85.63
pop3 15798 ( 0.06%) 2747189 ( 0.01%) 173.89
imap 1678 ( 0.01%) 1019472 ( 0.01%) 607.55
telnet 2872 ( 0.01%) 205329 ( 0.00%) 71.49
ssh 106853 ( 0.40%) 16442731 ( 0.08%) 153.88
dns 2684 ( 0.01%) 311562 ( 0.00%) 116.08
bgp 602 ( 0.00%) 86831 ( 0.00%) 144.24
napster 46 ( 0.00%) 2916 ( 0.00%) 63.39
realaud 25 ( 0.00%) 2887 ( 0.00%) 115.48
rtsp 247 ( 0.00%) 19321 ( 0.00%) 78.22
icecast 15685 ( 0.06%) 15314168 ( 0.08%) 976.36
hotline 8 ( 0.00%) 649 ( 0.00%) 81.12
other 5329411 ( 19.85%) 3481401991 ( 17.63%) 653.24
udp 2624814 ( 9.78%) 1184443367 ( 6.00%) 451.25
dns 323715 ( 1.21%) 83275125 ( 0.42%) 257.25
rip 5 ( 0.00%) 320 ( 0.00%) 64.00
realaud 7 ( 0.00%) 588 ( 0.00%) 84.00
halflif 36 ( 0.00%) 3241 ( 0.00%) 90.03
starcra 19 ( 0.00%) 1677 ( 0.00%) 88.26
everque 386 ( 0.00%) 64631 ( 0.00%) 167.44
unreal 97 ( 0.00%) 43589 ( 0.00%) 449.37
quake 8 ( 0.00%) 583 ( 0.00%) 72.88
cuseeme 1 ( 0.00%) 93 ( 0.00%) 93.00
other 2300376 ( 8.57%) 1101006942 ( 5.57%) 478.62
icmp 1629361 ( 6.07%) 157114136 ( 0.80%) 96.43
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 28361 ( 0.11%) 15788454 ( 0.08%) 556.70
ip6 1895765 ( 7.06%) 1597739637 ( 8.09%) 842.79
pim 200 ( 0.00%) 12000 ( 0.00%) 60.00
other 17551 ( 0.07%) 2840141 ( 0.01%) 161.82
frag 7891 ( 0.03%) 5969405 ( 0.03%) 756.48
ip6 176334 ( 0.66%) 61353255 ( 0.31%) 347.94
tcp6 98913 ( 0.37%) 46426110 ( 0.24%) 469.36
http(s) 5721 ( 0.02%) 5824141 ( 0.03%) 1018.03
http(c) 42640 ( 0.16%) 3537318 ( 0.02%) 82.96
smtp 863 ( 0.00%) 1166671 ( 0.01%) 1351.88
dns 83 ( 0.00%) 10083 ( 0.00%) 121.48
bgp 99 ( 0.00%) 17855 ( 0.00%) 180.35
other 49507 ( 0.18%) 35870042 ( 0.18%) 724.54
udp6 44107 ( 0.16%) 10257169 ( 0.05%) 232.55
dns 41321 ( 0.15%) 9866924 ( 0.05%) 238.79
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
starcra 1 ( 0.00%) 108 ( 0.00%) 108.00
everque 2 ( 0.00%) 208 ( 0.00%) 104.00
other 2782 ( 0.01%) 389824 ( 0.00%) 140.12
icmp6 32757 ( 0.12%) 4196633 ( 0.02%) 128.11
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 442 ( 0.00%) 457715 ( 0.00%) 1035.55
tcpdump file: 201203300845.dump.gz (625.35 MB)