Traffic Trace Info
DumpFile: 201203301000.dump
FileSize: 2524.18MB
Id: 201203301000
StartTime: Fri Mar 30 10:00:00 2012
EndTime: Fri Mar 30 10:15:00 2012
TotalTime: 900.36 seconds
TotalCapSize: 2008.50MB CapLen: 96 bytes
# of packets: 33795148 (25155.35MB)
AvgRate: 234.30Mbps stddev:39.46M
IP flow (unique src/dst pair) Information
# of flows: 2155748 (avg. 15.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
11.3% 2.4% 2.1% 1.8% 1.7% 1.6% 1.3% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 1466750
Top 10 bandwidth usage (bytes/total in %):
13.5% 7.7% 7.6% 6.8% 6.1% 5.0% 4.4% 4.0% 2.7% 2.7%
# of IPv6 addresses: 6159
Top 10 bandwidth usage (bytes/total in %):
98.1% 96.5% 1.1% 0.9% 0.3% 0.2% 0.1% 0.1% 0.1% 0.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301000.pktlen.png)
detailed numbers
[ 32- 63]: 6233829
[ 64- 127]: 8481262
[ 128- 255]: 1068249
[ 256- 511]: 676252
[ 512- 1023]: 983655
[ 1024- 2047]: 16351901
Protocol Breakdown
![[protocol breakdown chart]](201203301000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33795148 (100.00%) 26377295169 (100.00%) 780.51
ip 31620590 ( 93.57%) 23286094913 ( 88.28%) 736.42
tcp 23835377 ( 70.53%) 19883081046 ( 75.38%) 834.18
http(s) 11292804 ( 33.42%) 14791350444 ( 56.08%) 1309.80
http(c) 5948233 ( 17.60%) 726573436 ( 2.75%) 122.15
squid 954118 ( 2.82%) 988553179 ( 3.75%) 1036.09
smtp 41028 ( 0.12%) 10477915 ( 0.04%) 255.38
ftp 8291 ( 0.02%) 745595 ( 0.00%) 89.93
pop3 22551 ( 0.07%) 32246480 ( 0.12%) 1429.94
imap 1101 ( 0.00%) 290470 ( 0.00%) 263.82
telnet 1144 ( 0.00%) 75252 ( 0.00%) 65.78
ssh 541406 ( 1.60%) 83589974 ( 0.32%) 154.39
dns 12113 ( 0.04%) 8857545 ( 0.03%) 731.24
bgp 613 ( 0.00%) 105440 ( 0.00%) 172.01
napster 65 ( 0.00%) 4566 ( 0.00%) 70.25
realaud 3 ( 0.00%) 194 ( 0.00%) 64.67
rtsp 52 ( 0.00%) 8742 ( 0.00%) 168.12
icecast 17413 ( 0.05%) 16593314 ( 0.06%) 952.93
hotline 6 ( 0.00%) 364 ( 0.00%) 60.67
other 4994432 ( 14.78%) 3223607896 ( 12.22%) 645.44
udp 3046168 ( 9.01%) 1439076238 ( 5.46%) 472.42
dns 491992 ( 1.46%) 126750501 ( 0.48%) 257.63
realaud 4 ( 0.00%) 602 ( 0.00%) 150.50
halflif 34 ( 0.00%) 3814 ( 0.00%) 112.18
starcra 36 ( 0.00%) 3657 ( 0.00%) 101.58
everque 294 ( 0.00%) 58880 ( 0.00%) 200.27
unreal 19 ( 0.00%) 2639 ( 0.00%) 138.89
quake 32 ( 0.00%) 2891 ( 0.00%) 90.34
cuseeme 1 ( 0.00%) 89 ( 0.00%) 89.00
other 2553567 ( 7.56%) 1312201052 ( 4.97%) 513.87
icmp 1774977 ( 5.25%) 168017889 ( 0.64%) 94.66
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 15437 ( 0.05%) 4400750 ( 0.02%) 285.08
ip6 2888349 ( 8.55%) 1726026899 ( 6.54%) 597.58
pim 176 ( 0.00%) 10560 ( 0.00%) 60.00
other 59921 ( 0.18%) 65462261 ( 0.25%) 1092.48
frag 978 ( 0.00%) 852534 ( 0.00%) 871.71
ip6 2174558 ( 6.43%) 3091200256 ( 11.72%) 1421.53
tcp6 2085147 ( 6.17%) 3071557409 ( 11.64%) 1473.07
http(s) 9559 ( 0.03%) 11216024 ( 0.04%) 1173.35
http(c) 32468 ( 0.10%) 2796317 ( 0.01%) 86.13
smtp 565 ( 0.00%) 236012 ( 0.00%) 417.72
ftp 17 ( 0.00%) 1605 ( 0.00%) 94.41
dns 298 ( 0.00%) 56764 ( 0.00%) 190.48
bgp 89 ( 0.00%) 16844 ( 0.00%) 189.26
other 2042151 ( 6.04%) 3057233843 ( 11.59%) 1497.07
udp6 61013 ( 0.18%) 15527764 ( 0.06%) 254.50
dns 57026 ( 0.17%) 14985696 ( 0.06%) 262.79
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
starcra 1 ( 0.00%) 116 ( 0.00%) 116.00
quake 1 ( 0.00%) 111 ( 0.00%) 111.00
cuseeme 1 ( 0.00%) 119 ( 0.00%) 119.00
other 3983 ( 0.01%) 541616 ( 0.00%) 135.98
icmp6 27777 ( 0.08%) 3616359 ( 0.01%) 130.19
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 506 ( 0.00%) 483096 ( 0.00%) 954.74
tcpdump file: 201203301000.dump.gz (763.30 MB)