Traffic Trace Info
DumpFile: 201203301130.dump
FileSize: 2409.25MB
Id: 201203301130
StartTime: Fri Mar 30 11:30:00 2012
EndTime: Fri Mar 30 11:45:00 2012
TotalTime: 899.50 seconds
TotalCapSize: 1904.38MB CapLen: 96 bytes
# of packets: 33086537 (23775.12MB)
AvgRate: 221.73Mbps stddev:32.44M
IP flow (unique src/dst pair) Information
# of flows: 2106470 (avg. 15.71 pkts/flow)
Top 10 big flow size (bytes/total in %):
14.4% 4.6% 4.2% 2.6% 1.7% 1.4% 1.4% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1537173
Top 10 bandwidth usage (bytes/total in %):
18.4% 15.4% 11.6% 8.0% 4.9% 4.9% 4.5% 4.5% 3.3% 2.8%
# of IPv6 addresses: 5911
Top 10 bandwidth usage (bytes/total in %):
56.4% 56.4% 31.9% 30.6% 3.0% 3.0% 2.9% 1.3% 1.1% 1.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301130.pktlen.png)
detailed numbers
[ 32- 63]: 6632709
[ 64- 127]: 8054826
[ 128- 255]: 1102085
[ 256- 511]: 939381
[ 512- 1023]: 955739
[ 1024- 2047]: 15401797
Protocol Breakdown
![[protocol breakdown chart]](201203301130.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33086537 (100.00%) 24930022657 (100.00%) 753.48
ip 32161411 ( 97.20%) 23792640125 ( 95.44%) 739.79
tcp 25064616 ( 75.75%) 20444293420 ( 82.01%) 815.66
http(s) 11991812 ( 36.24%) 15714154335 ( 63.03%) 1310.41
http(c) 7807777 ( 23.60%) 2149687146 ( 8.62%) 275.33
squid 116655 ( 0.35%) 28678130 ( 0.12%) 245.84
smtp 83049 ( 0.25%) 50348535 ( 0.20%) 606.25
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 4956 ( 0.01%) 475172 ( 0.00%) 95.88
pop3 10462 ( 0.03%) 8390152 ( 0.03%) 801.96
imap 1334 ( 0.00%) 635490 ( 0.00%) 476.38
telnet 1057 ( 0.00%) 75208 ( 0.00%) 71.15
ssh 676848 ( 2.05%) 103127934 ( 0.41%) 152.36
dns 2636 ( 0.01%) 305298 ( 0.00%) 115.82
bgp 600 ( 0.00%) 88203 ( 0.00%) 147.00
napster 105 ( 0.00%) 7233 ( 0.00%) 68.89
realaud 2 ( 0.00%) 120 ( 0.00%) 60.00
rtsp 48 ( 0.00%) 8606 ( 0.00%) 179.29
icecast 15774 ( 0.05%) 15352675 ( 0.06%) 973.29
hotline 9 ( 0.00%) 572 ( 0.00%) 63.56
other 4351480 ( 13.15%) 2372957863 ( 9.52%) 545.32
udp 2938887 ( 8.88%) 1219166781 ( 4.89%) 414.84
dns 502044 ( 1.52%) 125541340 ( 0.50%) 250.06
rip 3 ( 0.00%) 210 ( 0.00%) 70.00
realaud 2 ( 0.00%) 183 ( 0.00%) 91.50
halflif 37 ( 0.00%) 3625 ( 0.00%) 97.97
starcra 19 ( 0.00%) 2160 ( 0.00%) 113.68
everque 640 ( 0.00%) 311458 ( 0.00%) 486.65
unreal 82 ( 0.00%) 30560 ( 0.00%) 372.68
quake 19 ( 0.00%) 2180 ( 0.00%) 114.74
cuseeme 2 ( 0.00%) 150 ( 0.00%) 75.00
other 2435820 ( 7.36%) 1093230640 ( 4.39%) 448.81
icmp 1693595 ( 5.12%) 146942745 ( 0.59%) 86.76
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4109 ( 0.01%) 949582 ( 0.00%) 231.10
ip6 2440699 ( 7.38%) 1978270420 ( 7.94%) 810.53
pim 225 ( 0.00%) 13500 ( 0.00%) 60.00
other 19095 ( 0.06%) 2984407 ( 0.01%) 156.29
frag 1181 ( 0.00%) 1011409 ( 0.00%) 856.40
ip6 925126 ( 2.80%) 1137382532 ( 4.56%) 1229.44
tcp6 835321 ( 2.52%) 1117996054 ( 4.48%) 1338.40
http(s) 18196 ( 0.05%) 22929871 ( 0.09%) 1260.16
http(c) 42287 ( 0.13%) 3642839 ( 0.01%) 86.15
smtp 474 ( 0.00%) 162446 ( 0.00%) 342.71
ftp 36 ( 0.00%) 2816 ( 0.00%) 78.22
dns 330 ( 0.00%) 68182 ( 0.00%) 206.61
bgp 94 ( 0.00%) 15331 ( 0.00%) 163.10
other 773904 ( 2.34%) 1091174569 ( 4.38%) 1409.96
udp6 62847 ( 0.19%) 15279919 ( 0.06%) 243.13
dns 56723 ( 0.17%) 14551593 ( 0.06%) 256.54
halflif 2 ( 0.00%) 210 ( 0.00%) 105.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
other 6121 ( 0.02%) 728008 ( 0.00%) 118.94
icmp6 26342 ( 0.08%) 3595512 ( 0.01%) 136.49
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 503 ( 0.00%) 495655 ( 0.00%) 985.40
tcpdump file: 201203301130.dump.gz (763.23 MB)