Traffic Trace Info
DumpFile: 201203301015.dump
FileSize: 2600.22MB
Id: 201203301015
StartTime: Fri Mar 30 10:15:00 2012
EndTime: Fri Mar 30 10:30:00 2012
TotalTime: 899.55 seconds
TotalCapSize: -2035.77MB CapLen: 96 bytes
# of packets: 35388382 (27375.00MB)
AvgRate: 255.32Mbps stddev:71.57M
IP flow (unique src/dst pair) Information
# of flows: 1998151 (avg. 17.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 3.8% 3.6% 3.3% 3.0% 2.5% 2.4% 2.1% 2.1% 2.1%
IP address Information
# of IPv4 addresses: 1431709
Top 10 bandwidth usage (bytes/total in %):
11.2% 11.0% 8.0% 6.7% 6.1% 5.1% 4.6% 4.3% 4.0% 3.8%
# of IPv6 addresses: 6044
Top 10 bandwidth usage (bytes/total in %):
76.1% 71.2% 10.1% 10.1% 5.8% 2.2% 1.5% 1.0% 1.0% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301015.pktlen.png)
detailed numbers
[ 32- 63]: 5709158
[ 64- 127]: 8809723
[ 128- 255]: 1133276
[ 256- 511]: 643145
[ 512- 1023]: 940493
[ 1024- 2047]: 18152587
Protocol Breakdown
![[protocol breakdown chart]](201203301015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35388382 (100.00%) 28704769908 (100.00%) 811.14
ip 34953899 ( 98.77%) 28276369270 ( 98.51%) 808.96
tcp 27884277 ( 78.80%) 24684512608 ( 85.99%) 885.25
http(s) 13364753 ( 37.77%) 18039383822 ( 62.84%) 1349.77
http(c) 5670819 ( 16.02%) 856969612 ( 2.99%) 151.12
squid 116980 ( 0.33%) 27416433 ( 0.10%) 234.37
smtp 45779 ( 0.13%) 17467536 ( 0.06%) 381.56
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 66544 ( 0.19%) 5628235 ( 0.02%) 84.58
pop3 2294 ( 0.01%) 1006121 ( 0.00%) 438.59
imap 1141 ( 0.00%) 402206 ( 0.00%) 352.50
telnet 563 ( 0.00%) 84053 ( 0.00%) 149.29
ssh 1178680 ( 3.33%) 182836243 ( 0.64%) 155.12
dns 2566 ( 0.01%) 314165 ( 0.00%) 122.43
bgp 623 ( 0.00%) 104494 ( 0.00%) 167.73
napster 19 ( 0.00%) 1300 ( 0.00%) 68.42
realaud 13 ( 0.00%) 808 ( 0.00%) 62.15
rtsp 42 ( 0.00%) 16297 ( 0.00%) 388.02
icecast 15920 ( 0.04%) 15584658 ( 0.05%) 978.94
hotline 20 ( 0.00%) 1294 ( 0.00%) 64.70
other 7417504 ( 20.96%) 5537294245 ( 19.29%) 746.52
udp 3168415 ( 8.95%) 1455127068 ( 5.07%) 459.26
dns 420340 ( 1.19%) 111475009 ( 0.39%) 265.20
rip 6 ( 0.00%) 432 ( 0.00%) 72.00
realaud 14 ( 0.00%) 1748 ( 0.00%) 124.86
halflif 29 ( 0.00%) 5165 ( 0.00%) 178.10
starcra 17 ( 0.00%) 1671 ( 0.00%) 98.29
everque 288 ( 0.00%) 53213 ( 0.00%) 184.77
unreal 20 ( 0.00%) 2567 ( 0.00%) 128.35
quake 11 ( 0.00%) 988 ( 0.00%) 89.82
other 2741592 ( 7.75%) 1343172790 ( 4.68%) 489.92
icmp 1658375 ( 4.69%) 160148612 ( 0.56%) 96.57
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 20867 ( 0.06%) 5781810 ( 0.02%) 277.08
ip6 2131477 ( 6.02%) 1860651586 ( 6.48%) 872.94
pim 306 ( 0.00%) 18360 ( 0.00%) 60.00
other 89998 ( 0.25%) 110110066 ( 0.38%) 1223.47
frag 13818 ( 0.04%) 10657357 ( 0.04%) 771.27
ip6 434483 ( 1.23%) 428400638 ( 1.49%) 986.00
tcp6 346818 ( 0.98%) 410404233 ( 1.43%) 1183.34
http(s) 18727 ( 0.05%) 23328261 ( 0.08%) 1245.70
http(c) 56058 ( 0.16%) 4823852 ( 0.02%) 86.05
smtp 444 ( 0.00%) 145795 ( 0.00%) 328.37
dns 164 ( 0.00%) 19257 ( 0.00%) 117.42
bgp 92 ( 0.00%) 20184 ( 0.00%) 219.39
other 271333 ( 0.77%) 382066884 ( 1.33%) 1408.11
udp6 56677 ( 0.16%) 13674547 ( 0.05%) 241.27
dns 51976 ( 0.15%) 12798785 ( 0.04%) 246.24
realaud 1 ( 0.00%) 105 ( 0.00%) 105.00
halflif 2 ( 0.00%) 220 ( 0.00%) 110.00
everque 1 ( 0.00%) 105 ( 0.00%) 105.00
quake 3 ( 0.00%) 341 ( 0.00%) 113.67
cuseeme 1 ( 0.00%) 100 ( 0.00%) 100.00
other 4693 ( 0.01%) 874891 ( 0.00%) 186.42
icmp6 30385 ( 0.09%) 3830497 ( 0.01%) 126.07
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 490 ( 0.00%) 475937 ( 0.00%) 971.30
tcpdump file: 201203301015.dump.gz (808.09 MB)