Traffic Trace Info
DumpFile: 201203301145.dump
FileSize: 2272.54MB
Id: 201203301145
StartTime: Fri Mar 30 11:45:00 2012
EndTime: Fri Mar 30 12:00:00 2012
TotalTime: 900.29 seconds
TotalCapSize: 1793.18MB CapLen: 96 bytes
# of packets: 31414734 (22166.31MB)
AvgRate: 206.50Mbps stddev:32.61M
IP flow (unique src/dst pair) Information
# of flows: 2191534 (avg. 14.33 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.5% 2.9% 2.7% 2.5% 2.1% 2.0% 1.8% 1.5% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1560023
Top 10 bandwidth usage (bytes/total in %):
12.2% 8.8% 8.7% 8.5% 7.8% 4.7% 4.7% 3.6% 3.0% 2.7%
# of IPv6 addresses: 6093
Top 10 bandwidth usage (bytes/total in %):
73.6% 69.5% 8.8% 8.8% 6.0% 4.0% 3.1% 1.9% 1.2% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301145.pktlen.png)
detailed numbers
[ 32- 63]: 6416944
[ 64- 127]: 7770117
[ 128- 255]: 1122534
[ 256- 511]: 907253
[ 512- 1023]: 694714
[ 1024- 2047]: 14503172
Protocol Breakdown
![[protocol breakdown chart]](201203301145.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 31414734 (100.00%) 23243063517 (100.00%) 739.88
ip 30898175 ( 98.36%) 22742743223 ( 97.85%) 736.05
tcp 24275634 ( 77.27%) 19414967483 ( 83.53%) 799.77
http(s) 11227474 ( 35.74%) 15278546010 ( 65.73%) 1360.82
http(c) 7550154 ( 24.03%) 1349194754 ( 5.80%) 178.70
squid 36479 ( 0.12%) 25832813 ( 0.11%) 708.16
smtp 40312 ( 0.13%) 14920806 ( 0.06%) 370.13
ftp 7868 ( 0.03%) 721523 ( 0.00%) 91.70
pop3 2793 ( 0.01%) 1163799 ( 0.01%) 416.68
imap 7471 ( 0.02%) 7473389 ( 0.03%) 1000.32
telnet 815 ( 0.00%) 54530 ( 0.00%) 66.91
ssh 305606 ( 0.97%) 46262927 ( 0.20%) 151.38
dns 2360 ( 0.01%) 269883 ( 0.00%) 114.36
bgp 594 ( 0.00%) 85449 ( 0.00%) 143.85
napster 69 ( 0.00%) 4869 ( 0.00%) 70.57
realaud 10 ( 0.00%) 630 ( 0.00%) 63.00
rtsp 5 ( 0.00%) 300 ( 0.00%) 60.00
icecast 35847 ( 0.11%) 19045519 ( 0.08%) 531.30
hotline 22 ( 0.00%) 2259 ( 0.00%) 102.68
other 5057755 ( 16.10%) 2671388023 ( 11.49%) 528.18
udp 2927086 ( 9.32%) 1291287880 ( 5.56%) 441.15
dns 466605 ( 1.49%) 118656453 ( 0.51%) 254.30
rip 2 ( 0.00%) 264 ( 0.00%) 132.00
realaud 12 ( 0.00%) 1667 ( 0.00%) 138.92
halflif 34 ( 0.00%) 3815 ( 0.00%) 112.21
starcra 26 ( 0.00%) 3665 ( 0.00%) 140.96
everque 345 ( 0.00%) 61952 ( 0.00%) 179.57
unreal 86 ( 0.00%) 34143 ( 0.00%) 397.01
quake 12 ( 0.00%) 1786 ( 0.00%) 148.83
cuseeme 7 ( 0.00%) 913 ( 0.00%) 130.43
other 2459773 ( 7.83%) 1172472282 ( 5.04%) 476.66
icmp 1680583 ( 5.35%) 149782904 ( 0.64%) 89.13
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 3802 ( 0.01%) 1142412 ( 0.00%) 300.48
ip6 1992954 ( 6.34%) 1882565804 ( 8.10%) 944.61
pim 284 ( 0.00%) 17040 ( 0.00%) 60.00
other 17647 ( 0.06%) 2960430 ( 0.01%) 167.76
frag 847 ( 0.00%) 733854 ( 0.00%) 866.42
ip6 516559 ( 1.64%) 500320294 ( 2.15%) 968.56
tcp6 419349 ( 1.33%) 480059369 ( 2.07%) 1144.77
http(s) 20167 ( 0.06%) 24777687 ( 0.11%) 1228.63
http(c) 51868 ( 0.17%) 4229377 ( 0.02%) 81.54
smtp 217 ( 0.00%) 192136 ( 0.00%) 885.42
dns 163 ( 0.00%) 17696 ( 0.00%) 108.56
bgp 94 ( 0.00%) 13907 ( 0.00%) 147.95
other 346840 ( 1.10%) 450828566 ( 1.94%) 1299.82
udp6 67954 ( 0.22%) 15996542 ( 0.07%) 235.40
dns 56528 ( 0.18%) 14598247 ( 0.06%) 258.25
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
starcra 1 ( 0.00%) 109 ( 0.00%) 109.00
everque 1 ( 0.00%) 100 ( 0.00%) 100.00
other 11423 ( 0.04%) 1397981 ( 0.01%) 122.38
icmp6 28577 ( 0.09%) 3696855 ( 0.02%) 129.36
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 565 ( 0.00%) 552036 ( 0.00%) 977.05
tcpdump file: 201203301145.dump.gz (724.99 MB)