Traffic Trace Info
DumpFile: 201203301045.dump
FileSize: 2269.36MB
Id: 201203301045
StartTime: Fri Mar 30 10:45:00 2012
EndTime: Fri Mar 30 11:00:01 2012
TotalTime: 900.44 seconds
TotalCapSize: 1794.86MB CapLen: 96 bytes
# of packets: 31096211 (22694.57MB)
AvgRate: 211.42Mbps stddev:33.01M
IP flow (unique src/dst pair) Information
# of flows: 1772627 (avg. 17.54 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.0% 2.9% 2.0% 1.9% 1.8% 1.7% 1.6% 1.6% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 1372385
Top 10 bandwidth usage (bytes/total in %):
12.0% 9.2% 8.2% 8.1% 7.0% 5.2% 4.2% 3.4% 3.0% 2.9%
# of IPv6 addresses: 5752
Top 10 bandwidth usage (bytes/total in %):
88.0% 79.7% 5.0% 4.4% 1.9% 1.4% 1.0% 0.9% 0.8% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301045.pktlen.png)
detailed numbers
[ 32- 63]: 5531545
[ 64- 127]: 7899291
[ 128- 255]: 1174057
[ 256- 511]: 749753
[ 512- 1023]: 960657
[ 1024- 2047]: 14780908
Protocol Breakdown
![[protocol breakdown chart]](201203301045.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31096211 (100.00%) 23796985724 (100.00%) 765.27
ip 30687077 ( 98.68%) 23372898885 ( 98.22%) 761.65
tcp 23986896 ( 77.14%) 20042097700 ( 84.22%) 835.54
http(s) 10990338 ( 35.34%) 14678883101 ( 61.68%) 1335.62
http(c) 6009557 ( 19.33%) 1493179907 ( 6.27%) 248.47
squid 35106 ( 0.11%) 23946961 ( 0.10%) 682.13
smtp 39242 ( 0.13%) 9989911 ( 0.04%) 254.57
ftp 10177 ( 0.03%) 891360 ( 0.00%) 87.59
pop3 2675 ( 0.01%) 1452699 ( 0.01%) 543.07
imap 2531 ( 0.01%) 1281877 ( 0.01%) 506.47
telnet 673 ( 0.00%) 43520 ( 0.00%) 64.67
ssh 1556754 ( 5.01%) 255448361 ( 1.07%) 164.09
dns 2427 ( 0.01%) 274831 ( 0.00%) 113.24
bgp 609 ( 0.00%) 101034 ( 0.00%) 165.90
napster 55 ( 0.00%) 3488 ( 0.00%) 63.42
realaud 8 ( 0.00%) 496 ( 0.00%) 62.00
rtsp 17292 ( 0.06%) 5021917 ( 0.02%) 290.42
icecast 15240 ( 0.05%) 15372537 ( 0.06%) 1008.70
hotline 27 ( 0.00%) 2090 ( 0.00%) 77.41
other 5304183 ( 17.06%) 3556203490 ( 14.94%) 670.45
udp 2961521 ( 9.52%) 1240226845 ( 5.21%) 418.78
dns 391924 ( 1.26%) 105850239 ( 0.44%) 270.08
realaud 13 ( 0.00%) 1259 ( 0.00%) 96.85
halflif 14 ( 0.00%) 1164 ( 0.00%) 83.14
starcra 19 ( 0.00%) 2521 ( 0.00%) 132.68
everque 2002 ( 0.01%) 1393782 ( 0.01%) 696.19
unreal 36 ( 0.00%) 5217 ( 0.00%) 144.92
quake 19 ( 0.00%) 2947 ( 0.00%) 155.11
cuseeme 1 ( 0.00%) 87 ( 0.00%) 87.00
other 2522835 ( 8.11%) 1130226750 ( 4.75%) 448.00
icmp 1581037 ( 5.08%) 129427328 ( 0.54%) 81.86
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2718 ( 0.01%) 1195844 ( 0.01%) 439.97
ip6 2136714 ( 6.87%) 1957101400 ( 8.22%) 915.94
pim 319 ( 0.00%) 19140 ( 0.00%) 60.00
other 17688 ( 0.06%) 2811468 ( 0.01%) 158.95
frag 96620 ( 0.31%) 73829944 ( 0.31%) 764.13
ip6 409134 ( 1.32%) 424086839 ( 1.78%) 1036.55
tcp6 322790 ( 1.04%) 405351816 ( 1.70%) 1255.78
http(s) 27289 ( 0.09%) 36120645 ( 0.15%) 1323.63
http(c) 39204 ( 0.13%) 3267248 ( 0.01%) 83.34
smtp 1146 ( 0.00%) 381939 ( 0.00%) 333.28
dns 181 ( 0.00%) 29514 ( 0.00%) 163.06
bgp 90 ( 0.00%) 13609 ( 0.00%) 151.21
other 254880 ( 0.82%) 365538861 ( 1.54%) 1434.16
udp6 57730 ( 0.19%) 14314933 ( 0.06%) 247.96
dns 54754 ( 0.18%) 13907772 ( 0.06%) 254.00
realaud 1 ( 0.00%) 104 ( 0.00%) 104.00
halflif 3 ( 0.00%) 324 ( 0.00%) 108.00
everque 2 ( 0.00%) 218 ( 0.00%) 109.00
quake 1 ( 0.00%) 95 ( 0.00%) 95.00
other 2969 ( 0.01%) 406420 ( 0.00%) 136.89
icmp6 27804 ( 0.09%) 3715988 ( 0.02%) 133.65
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 695 ( 0.00%) 688474 ( 0.00%) 990.61
tcpdump file: 201203301045.dump.gz (729.16 MB)