Traffic Trace Info
DumpFile: 201203301100.dump
FileSize: 2349.31MB
Id: 201203301100
StartTime: Fri Mar 30 11:00:01 2012
EndTime: Fri Mar 30 11:15:00 2012
TotalTime: 899.12 seconds
TotalCapSize: 1860.43MB CapLen: 96 bytes
# of packets: 32038755 (21254.97MB)
AvgRate: 198.31Mbps stddev:29.24M
IP flow (unique src/dst pair) Information
# of flows: 2259025 (avg. 14.18 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.4% 4.1% 3.3% 2.9% 2.1% 1.7% 1.7% 1.7% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 1542321
Top 10 bandwidth usage (bytes/total in %):
10.2% 8.0% 6.5% 5.9% 5.6% 4.2% 4.2% 3.9% 3.8% 3.4%
# of IPv6 addresses: 5921
Top 10 bandwidth usage (bytes/total in %):
83.7% 80.6% 4.7% 4.5% 4.5% 2.0% 1.0% 0.9% 0.9% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301100.pktlen.png)
detailed numbers
[ 32- 63]: 6021208
[ 64- 127]: 9227353
[ 128- 255]: 1318964
[ 256- 511]: 846490
[ 512- 1023]: 866943
[ 1024- 2047]: 13757797
Protocol Breakdown
![[protocol breakdown chart]](201203301100.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32038755 (100.00%) 22287455385 (100.00%) 695.64
ip 31614184 ( 98.67%) 21830023101 ( 97.95%) 690.51
tcp 24343638 ( 75.98%) 18046180506 ( 80.97%) 741.31
http(s) 9491300 ( 29.62%) 11287178265 ( 50.64%) 1189.21
http(c) 7694728 ( 24.02%) 2810710141 ( 12.61%) 365.28
squid 41814 ( 0.13%) 27602404 ( 0.12%) 660.12
smtp 46105 ( 0.14%) 20538682 ( 0.09%) 445.48
ftp 8396 ( 0.03%) 724803 ( 0.00%) 86.33
pop3 3869 ( 0.01%) 2688452 ( 0.01%) 694.87
imap 2187 ( 0.01%) 941803 ( 0.00%) 430.64
telnet 608 ( 0.00%) 40470 ( 0.00%) 66.56
ssh 1400611 ( 4.37%) 216638831 ( 0.97%) 154.67
dns 2680 ( 0.01%) 304131 ( 0.00%) 113.48
bgp 628 ( 0.00%) 115649 ( 0.00%) 184.15
napster 81 ( 0.00%) 5313 ( 0.00%) 65.59
realaud 27 ( 0.00%) 3259 ( 0.00%) 120.70
rtsp 3493 ( 0.01%) 2590649 ( 0.01%) 741.67
icecast 14760 ( 0.05%) 15270916 ( 0.07%) 1034.61
hotline 27 ( 0.00%) 2036 ( 0.00%) 75.41
other 5632322 ( 17.58%) 3660824582 ( 16.43%) 649.97
udp 3118813 ( 9.73%) 1338521639 ( 6.01%) 429.18
dns 441568 ( 1.38%) 114790030 ( 0.52%) 259.96
realaud 9 ( 0.00%) 817 ( 0.00%) 90.78
halflif 29 ( 0.00%) 3108 ( 0.00%) 107.17
starcra 27 ( 0.00%) 3304 ( 0.00%) 122.37
everque 2016 ( 0.01%) 1357074 ( 0.01%) 673.15
unreal 40 ( 0.00%) 5659 ( 0.00%) 141.47
quake 10 ( 0.00%) 802 ( 0.00%) 80.20
cuseeme 3 ( 0.00%) 258 ( 0.00%) 86.00
other 2641431 ( 8.24%) 1220311546 ( 5.48%) 461.99
icmp 1658435 ( 5.18%) 144874097 ( 0.65%) 87.36
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3664 ( 0.01%) 1114432 ( 0.01%) 304.16
ip6 2461587 ( 7.68%) 2280328737 ( 10.23%) 926.37
pim 276 ( 0.00%) 16560 ( 0.00%) 60.00
other 27586 ( 0.09%) 18967860 ( 0.09%) 687.59
frag 73248 ( 0.23%) 55982134 ( 0.25%) 764.28
ip6 424571 ( 1.33%) 457432284 ( 2.05%) 1077.40
tcp6 335433 ( 1.05%) 437657067 ( 1.96%) 1304.75
http(s) 7788 ( 0.02%) 9055086 ( 0.04%) 1162.70
http(c) 27766 ( 0.09%) 2386449 ( 0.01%) 85.95
smtp 478 ( 0.00%) 170171 ( 0.00%) 356.01
ftp 78 ( 0.00%) 7621 ( 0.00%) 97.71
dns 308 ( 0.00%) 51091 ( 0.00%) 165.88
bgp 90 ( 0.00%) 13809 ( 0.00%) 153.43
other 298925 ( 0.93%) 425972840 ( 1.91%) 1425.02
udp6 62723 ( 0.20%) 15741986 ( 0.07%) 250.98
dns 58500 ( 0.18%) 14891524 ( 0.07%) 254.56
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
starcra 1 ( 0.00%) 109 ( 0.00%) 109.00
quake 2 ( 0.00%) 224 ( 0.00%) 112.00
other 4219 ( 0.01%) 850023 ( 0.00%) 201.47
icmp6 25802 ( 0.08%) 3524307 ( 0.02%) 136.59
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 501 ( 0.00%) 493668 ( 0.00%) 985.37
tcpdump file: 201203301100.dump.gz (754.06 MB)