Traffic Trace Info
DumpFile: 201203301030.dump
FileSize: 2347.38MB
Id: 201203301030
StartTime: Fri Mar 30 10:30:00 2012
EndTime: Fri Mar 30 10:45:00 2012
TotalTime: 900.45 seconds
TotalCapSize: 1858.10MB CapLen: 96 bytes
# of packets: 32065097 (22773.49MB)
AvgRate: 212.10Mbps stddev:28.76M
IP flow (unique src/dst pair) Information
# of flows: 1802176 (avg. 17.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 2.7% 2.1% 2.0% 1.8% 1.6% 1.5% 1.4% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 1389120
Top 10 bandwidth usage (bytes/total in %):
12.9% 9.8% 9.6% 9.0% 7.4% 7.1% 4.9% 3.0% 2.8% 2.8%
# of IPv6 addresses: 6023
Top 10 bandwidth usage (bytes/total in %):
85.3% 82.1% 6.5% 2.4% 2.2% 2.2% 1.0% 0.8% 0.7% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301030.pktlen.png)
detailed numbers
[ 32- 63]: 5774298
[ 64- 127]: 8671763
[ 128- 255]: 1240493
[ 256- 511]: 647211
[ 512- 1023]: 827773
[ 1024- 2047]: 14903559
Protocol Breakdown
![[protocol breakdown chart]](201203301030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32065097 (100.00%) 23879738387 (100.00%) 744.73
ip 31656195 ( 98.72%) 23465450054 ( 98.27%) 741.26
tcp 24357017 ( 75.96%) 19751813460 ( 82.71%) 810.93
http(s) 10936127 ( 34.11%) 14711675973 ( 61.61%) 1345.24
http(c) 6326491 ( 19.73%) 1169314688 ( 4.90%) 184.83
squid 33068 ( 0.10%) 21334390 ( 0.09%) 645.17
smtp 44098 ( 0.14%) 16706556 ( 0.07%) 378.85
ftp 76246 ( 0.24%) 96148893 ( 0.40%) 1261.04
pop3 4964 ( 0.02%) 4780893 ( 0.02%) 963.11
imap 1179 ( 0.00%) 323696 ( 0.00%) 274.55
telnet 433 ( 0.00%) 27740 ( 0.00%) 64.06
ssh 1577029 ( 4.92%) 244984108 ( 1.03%) 155.35
dns 2386 ( 0.01%) 299248 ( 0.00%) 125.42
bgp 638 ( 0.00%) 109270 ( 0.00%) 171.27
napster 41 ( 0.00%) 2710 ( 0.00%) 66.10
realaud 10 ( 0.00%) 618 ( 0.00%) 61.80
rtsp 2 ( 0.00%) 120 ( 0.00%) 60.00
icecast 16339 ( 0.05%) 16488125 ( 0.07%) 1009.13
hotline 83 ( 0.00%) 5487 ( 0.00%) 66.11
other 5337880 ( 16.65%) 3469610765 ( 14.53%) 650.00
udp 3139902 ( 9.79%) 1371354212 ( 5.74%) 436.75
dns 440261 ( 1.37%) 118920186 ( 0.50%) 270.11
realaud 4 ( 0.00%) 772 ( 0.00%) 193.00
halflif 12 ( 0.00%) 905 ( 0.00%) 75.42
starcra 44 ( 0.00%) 4603 ( 0.00%) 104.61
everque 848 ( 0.00%) 530457 ( 0.00%) 625.54
unreal 11 ( 0.00%) 1458 ( 0.00%) 132.55
quake 10 ( 0.00%) 764 ( 0.00%) 76.40
cuseeme 6 ( 0.00%) 571 ( 0.00%) 95.17
other 2691752 ( 8.39%) 1251439258 ( 5.24%) 464.92
icmp 1632806 ( 5.09%) 156375883 ( 0.65%) 95.77
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6984 ( 0.02%) 1373936 ( 0.01%) 196.73
ip6 2502363 ( 7.80%) 2181398290 ( 9.13%) 871.74
pim 306 ( 0.00%) 18360 ( 0.00%) 60.00
other 16632 ( 0.05%) 3096643 ( 0.01%) 186.19
frag 15967 ( 0.05%) 12275574 ( 0.05%) 768.81
ip6 408902 ( 1.28%) 414288333 ( 1.73%) 1013.17
tcp6 320474 ( 1.00%) 395861311 ( 1.66%) 1235.24
http(s) 12560 ( 0.04%) 15115156 ( 0.06%) 1203.44
http(c) 40087 ( 0.13%) 3462295 ( 0.01%) 86.37
smtp 959 ( 0.00%) 393017 ( 0.00%) 409.82
ftp 25 ( 0.00%) 1992 ( 0.00%) 79.68
dns 304 ( 0.00%) 65385 ( 0.00%) 215.08
bgp 95 ( 0.00%) 17483 ( 0.00%) 184.03
other 266444 ( 0.83%) 376805983 ( 1.58%) 1414.20
udp6 58031 ( 0.18%) 14088026 ( 0.06%) 242.77
dns 54525 ( 0.17%) 13437148 ( 0.06%) 246.44
starcra 1 ( 0.00%) 109 ( 0.00%) 109.00
everque 3 ( 0.00%) 360 ( 0.00%) 120.00
other 3502 ( 0.01%) 650409 ( 0.00%) 185.73
icmp6 29796 ( 0.09%) 3823899 ( 0.02%) 128.34
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 487 ( 0.00%) 499605 ( 0.00%) 1025.88
tcpdump file: 201203301030.dump.gz (753.73 MB)