Traffic Trace Info
DumpFile: 201203300945.dump
FileSize: 2456.44MB
Id: 201203300945
StartTime: Fri Mar 30 09:45:00 2012
EndTime: Fri Mar 30 10:00:00 2012
TotalTime: 899.51 seconds
TotalCapSize: 1939.50MB CapLen: 96 bytes
# of packets: 33877662 (25325.23MB)
AvgRate: 236.17Mbps stddev:40.21M
IP flow (unique src/dst pair) Information
# of flows: 1887013 (avg. 17.95 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 3.3% 2.7% 2.4% 2.2% 1.9% 1.8% 1.7% 1.5% 1.3%
IP address Information
# of IPv4 addresses: 1415065
Top 10 bandwidth usage (bytes/total in %):
17.2% 8.8% 7.1% 6.5% 6.2% 6.0% 5.1% 4.7% 4.4% 4.1%
# of IPv6 addresses: 5922
Top 10 bandwidth usage (bytes/total in %):
64.9% 60.3% 12.7% 7.2% 7.0% 2.6% 2.6% 2.5% 1.7% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203300945.pktlen.png)
detailed numbers
[ 32- 63]: 6536331
[ 64- 127]: 8047353
[ 128- 255]: 982114
[ 256- 511]: 734403
[ 512- 1023]: 1048545
[ 1024- 2047]: 16528916
Protocol Breakdown
![[protocol breakdown chart]](201203300945.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33877662 (100.00%) 26555428879 (100.00%) 783.86
ip 33599362 ( 99.18%) 26324396227 ( 99.13%) 783.48
tcp 26987718 ( 79.66%) 23209037182 ( 87.40%) 859.99
http(s) 12400797 ( 36.60%) 17079205751 ( 64.32%) 1377.27
http(c) 7715875 ( 22.78%) 792628861 ( 2.98%) 102.73
squid 1380564 ( 4.08%) 1590234720 ( 5.99%) 1151.87
smtp 52896 ( 0.16%) 26386276 ( 0.10%) 498.83
ftp 8023 ( 0.02%) 802831 ( 0.00%) 100.07
pop3 3524 ( 0.01%) 2743836 ( 0.01%) 778.61
imap 1400 ( 0.00%) 462488 ( 0.00%) 330.35
telnet 875 ( 0.00%) 56824 ( 0.00%) 64.94
ssh 173711 ( 0.51%) 27136044 ( 0.10%) 156.21
dns 2251 ( 0.01%) 269149 ( 0.00%) 119.57
bgp 621 ( 0.00%) 119666 ( 0.00%) 192.70
napster 33 ( 0.00%) 2695 ( 0.00%) 81.67
realaud 2 ( 0.00%) 130 ( 0.00%) 65.00
rtsp 5 ( 0.00%) 312 ( 0.00%) 62.40
icecast 15097 ( 0.04%) 15276920 ( 0.06%) 1011.92
hotline 9 ( 0.00%) 566 ( 0.00%) 62.89
other 5232033 ( 15.44%) 3673709993 ( 13.83%) 702.16
udp 2838700 ( 8.38%) 1327346805 ( 5.00%) 467.59
dns 451870 ( 1.33%) 124998173 ( 0.47%) 276.62
realaud 5 ( 0.00%) 670 ( 0.00%) 134.00
halflif 35 ( 0.00%) 4531 ( 0.00%) 129.46
starcra 28 ( 0.00%) 3081 ( 0.00%) 110.04
everque 313 ( 0.00%) 69456 ( 0.00%) 221.90
unreal 33 ( 0.00%) 4246 ( 0.00%) 128.67
quake 26 ( 0.00%) 3255 ( 0.00%) 125.19
cuseeme 1 ( 0.00%) 81 ( 0.00%) 81.00
other 2386149 ( 7.04%) 1202203253 ( 4.53%) 503.83
icmp 1662798 ( 4.91%) 160884260 ( 0.61%) 96.76
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 21197 ( 0.06%) 5684270 ( 0.02%) 268.16
ip6 2070598 ( 6.11%) 1618542902 ( 6.09%) 781.68
pim 232 ( 0.00%) 13920 ( 0.00%) 60.00
other 17935 ( 0.05%) 2867728 ( 0.01%) 159.90
frag 1163 ( 0.00%) 1008800 ( 0.00%) 867.41
ip6 278300 ( 0.82%) 231032652 ( 0.87%) 830.16
tcp6 193749 ( 0.57%) 212079844 ( 0.80%) 1094.61
http(s) 24847 ( 0.07%) 33239610 ( 0.13%) 1337.77
http(c) 16201 ( 0.05%) 1460065 ( 0.01%) 90.12
smtp 1243 ( 0.00%) 447120 ( 0.00%) 359.71
dns 119 ( 0.00%) 15059 ( 0.00%) 126.55
bgp 84 ( 0.00%) 15132 ( 0.00%) 180.14
other 151255 ( 0.45%) 176902858 ( 0.67%) 1169.57
udp6 57039 ( 0.17%) 14815994 ( 0.06%) 259.75
dns 51897 ( 0.15%) 13758991 ( 0.05%) 265.12
realaud 1 ( 0.00%) 90 ( 0.00%) 90.00
halflif 2 ( 0.00%) 199 ( 0.00%) 99.50
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
unreal 1 ( 0.00%) 118 ( 0.00%) 118.00
quake 1 ( 0.00%) 104 ( 0.00%) 104.00
cuseeme 1 ( 0.00%) 107 ( 0.00%) 107.00
other 5135 ( 0.02%) 1056277 ( 0.00%) 205.70
icmp6 26846 ( 0.08%) 3577528 ( 0.01%) 133.26
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 550 ( 0.00%) 543558 ( 0.00%) 988.29
tcpdump file: 201203300945.dump.gz (761.89 MB)