Traffic Trace Info
DumpFile: 201203301115.dump
FileSize: 2302.55MB
Id: 201203301115
StartTime: Fri Mar 30 11:15:00 2012
EndTime: Fri Mar 30 11:30:00 2012
TotalTime: 900.48 seconds
TotalCapSize: 1828.31MB CapLen: 96 bytes
# of packets: 31079029 (21550.70MB)
AvgRate: 200.74Mbps stddev:37.18M
IP flow (unique src/dst pair) Information
# of flows: 1973528 (avg. 15.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.5% 4.8% 3.3% 2.0% 1.8% 1.7% 1.6% 1.5% 1.2% 1.1%
IP address Information
# of IPv4 addresses: 1492924
Top 10 bandwidth usage (bytes/total in %):
11.1% 9.2% 8.0% 5.3% 5.3% 4.6% 4.2% 4.0% 3.8% 3.4%
# of IPv6 addresses: 5787
Top 10 bandwidth usage (bytes/total in %):
77.7% 77.7% 17.3% 16.6% 2.0% 2.0% 0.8% 0.5% 0.5% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301115.pktlen.png)
detailed numbers
[ 32- 63]: 5604080
[ 64- 127]: 8611732
[ 128- 255]: 1180982
[ 256- 511]: 850853
[ 512- 1023]: 838491
[ 1024- 2047]: 13992891
Protocol Breakdown
![[protocol breakdown chart]](201203301115.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31079029 (100.00%) 22597551122 (100.00%) 727.10
ip 29482984 ( 94.86%) 20412328639 ( 90.33%) 692.34
tcp 21894608 ( 70.45%) 16609442298 ( 73.50%) 758.61
http(s) 8581133 ( 27.61%) 11082337822 ( 49.04%) 1291.48
http(c) 6391352 ( 20.56%) 1733947092 ( 7.67%) 271.30
squid 42037 ( 0.14%) 21806574 ( 0.10%) 518.75
smtp 121879 ( 0.39%) 85098371 ( 0.38%) 698.22
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 7994 ( 0.03%) 837776 ( 0.00%) 104.80
pop3 2739 ( 0.01%) 951032 ( 0.00%) 347.22
imap 1227 ( 0.00%) 463231 ( 0.00%) 377.53
telnet 518 ( 0.00%) 35620 ( 0.00%) 68.76
ssh 1165914 ( 3.75%) 191345493 ( 0.85%) 164.12
dns 2323 ( 0.01%) 279455 ( 0.00%) 120.30
bgp 604 ( 0.00%) 94187 ( 0.00%) 155.94
napster 40 ( 0.00%) 3012 ( 0.00%) 75.30
realaud 278 ( 0.00%) 18013 ( 0.00%) 64.79
rtsp 4236 ( 0.01%) 1545774 ( 0.01%) 364.91
icecast 14774 ( 0.05%) 15296763 ( 0.07%) 1035.38
hotline 31 ( 0.00%) 1956 ( 0.00%) 63.10
other 5557527 ( 17.88%) 3475380007 ( 15.38%) 625.35
udp 2945016 ( 9.48%) 1242598023 ( 5.50%) 421.93
dns 469056 ( 1.51%) 116933693 ( 0.52%) 249.30
realaud 4 ( 0.00%) 404 ( 0.00%) 101.00
halflif 31 ( 0.00%) 3941 ( 0.00%) 127.13
starcra 37 ( 0.00%) 3802 ( 0.00%) 102.76
everque 2101 ( 0.01%) 1388820 ( 0.01%) 661.03
unreal 26 ( 0.00%) 4043 ( 0.00%) 155.50
quake 3 ( 0.00%) 386 ( 0.00%) 128.67
other 2473448 ( 7.96%) 1124187055 ( 4.97%) 454.50
icmp 1667123 ( 5.36%) 147134561 ( 0.65%) 88.26
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 13032 ( 0.04%) 3291248 ( 0.01%) 252.55
ip6 2944103 ( 9.47%) 2404236754 ( 10.64%) 816.63
pim 286 ( 0.00%) 17160 ( 0.00%) 60.00
other 18632 ( 0.06%) 5589435 ( 0.02%) 299.99
frag 5002 ( 0.02%) 3869053 ( 0.02%) 773.50
ip6 1596045 ( 5.14%) 2185222483 ( 9.67%) 1369.15
tcp6 1509804 ( 4.86%) 2166110049 ( 9.59%) 1434.70
http(s) 15277 ( 0.05%) 17807933 ( 0.08%) 1165.67
http(c) 46785 ( 0.15%) 4176649 ( 0.02%) 89.27
smtp 407 ( 0.00%) 162015 ( 0.00%) 398.07
ftp 59 ( 0.00%) 5116 ( 0.00%) 86.71
dns 145 ( 0.00%) 22229 ( 0.00%) 153.30
bgp 89 ( 0.00%) 12429 ( 0.00%) 139.65
other 1447042 ( 4.66%) 2143923678 ( 9.49%) 1481.59
udp6 59222 ( 0.19%) 14736110 ( 0.07%) 248.83
dns 56232 ( 0.18%) 14271499 ( 0.06%) 253.80
realaud 2 ( 0.00%) 225 ( 0.00%) 112.50
halflif 2 ( 0.00%) 204 ( 0.00%) 102.00
everque 3 ( 0.00%) 330 ( 0.00%) 110.00
other 2983 ( 0.01%) 463852 ( 0.00%) 155.50
icmp6 26140 ( 0.08%) 3624042 ( 0.02%) 138.64
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 766 ( 0.00%) 736858 ( 0.00%) 961.96
tcpdump file: 201203301115.dump.gz (719.10 MB)