Traffic Trace Info
DumpFile: 201203301200.dump
FileSize: 2174.16MB
Id: 201203301200
StartTime: Fri Mar 30 12:00:00 2012
EndTime: Fri Mar 30 12:15:00 2012
TotalTime: 899.77 seconds
TotalCapSize: 1712.76MB CapLen: 96 bytes
# of packets: 30238356 (21773.86MB)
AvgRate: 202.98Mbps stddev:38.18M
IP flow (unique src/dst pair) Information
# of flows: 2072860 (avg. 14.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.3% 2.1% 1.7% 1.6% 1.6% 1.5% 1.5% 1.4% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 1549983
Top 10 bandwidth usage (bytes/total in %):
12.8% 9.3% 7.6% 7.0% 6.1% 5.0% 4.6% 3.6% 2.8% 2.4%
# of IPv6 addresses: 6194
Top 10 bandwidth usage (bytes/total in %):
76.7% 71.4% 9.9% 9.9% 5.7% 1.8% 1.8% 1.3% 1.3% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301200.pktlen.png)
detailed numbers
[ 32- 63]: 6356603
[ 64- 127]: 7058805
[ 128- 255]: 1061008
[ 256- 511]: 862755
[ 512- 1023]: 696091
[ 1024- 2047]: 14203094
Protocol Breakdown
![[protocol breakdown chart]](201203301200.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30238356 (100.00%) 22831544065 (100.00%) 755.05
ip 29713098 ( 98.26%) 22336412270 ( 97.83%) 751.74
tcp 23092398 ( 76.37%) 19513526283 ( 85.47%) 845.02
http(s) 11134468 ( 36.82%) 14831595558 ( 64.96%) 1332.04
http(c) 6244389 ( 20.65%) 1411253810 ( 6.18%) 226.00
squid 44248 ( 0.15%) 31668669 ( 0.14%) 715.71
smtp 54482 ( 0.18%) 18531610 ( 0.08%) 340.14
ftp 8480 ( 0.03%) 1349953 ( 0.01%) 159.19
pop3 8049 ( 0.03%) 6514678 ( 0.03%) 809.38
imap 2194 ( 0.01%) 1480023 ( 0.01%) 674.58
telnet 2703 ( 0.01%) 193474 ( 0.00%) 71.58
ssh 180788 ( 0.60%) 26761287 ( 0.12%) 148.03
dns 2337 ( 0.01%) 276579 ( 0.00%) 118.35
bgp 670 ( 0.00%) 150214 ( 0.00%) 224.20
napster 86 ( 0.00%) 6873 ( 0.00%) 79.92
realaud 10 ( 0.00%) 626 ( 0.00%) 62.60
rtsp 4 ( 0.00%) 240 ( 0.00%) 60.00
icecast 22560 ( 0.07%) 21162578 ( 0.09%) 938.06
hotline 11 ( 0.00%) 684 ( 0.00%) 62.18
other 5386918 ( 17.81%) 3162579367 ( 13.85%) 587.09
udp 3366719 ( 11.13%) 1431247671 ( 6.27%) 425.12
dns 531364 ( 1.76%) 130590819 ( 0.57%) 245.77
rip 1 ( 0.00%) 70 ( 0.00%) 70.00
realaud 9 ( 0.00%) 1169 ( 0.00%) 129.89
halflif 18 ( 0.00%) 2313 ( 0.00%) 128.50
starcra 21 ( 0.00%) 2856 ( 0.00%) 136.00
everque 388 ( 0.00%) 52174 ( 0.00%) 134.47
unreal 24 ( 0.00%) 3877 ( 0.00%) 161.54
quake 17 ( 0.00%) 2084 ( 0.00%) 122.59
cuseeme 5 ( 0.00%) 408 ( 0.00%) 81.60
other 2711778 ( 8.97%) 1293151728 ( 5.66%) 476.86
icmp 1660824 ( 5.49%) 148572616 ( 0.65%) 89.46
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 5640 ( 0.02%) 1262496 ( 0.01%) 223.85
ip6 1569508 ( 5.19%) 1237502763 ( 5.42%) 788.47
pim 245 ( 0.00%) 14700 ( 0.00%) 60.00
other 17579 ( 0.06%) 4266471 ( 0.02%) 242.70
frag 264536 ( 0.87%) 201930158 ( 0.88%) 763.34
ip6 525258 ( 1.74%) 495131795 ( 2.17%) 942.64
tcp6 430614 ( 1.42%) 474988571 ( 2.08%) 1103.05
http(s) 19367 ( 0.06%) 23644015 ( 0.10%) 1220.84
http(c) 75790 ( 0.25%) 6177545 ( 0.03%) 81.51
smtp 338 ( 0.00%) 208958 ( 0.00%) 618.22
dns 310 ( 0.00%) 62447 ( 0.00%) 201.44
bgp 86 ( 0.00%) 16061 ( 0.00%) 186.76
other 334723 ( 1.11%) 444879545 ( 1.95%) 1329.10
udp6 65430 ( 0.22%) 15761626 ( 0.07%) 240.89
dns 56506 ( 0.19%) 14697944 ( 0.06%) 260.11
realaud 1 ( 0.00%) 115 ( 0.00%) 115.00
starcra 1 ( 0.00%) 118 ( 0.00%) 118.00
everque 2 ( 0.00%) 210 ( 0.00%) 105.00
quake 3 ( 0.00%) 333 ( 0.00%) 111.00
other 8917 ( 0.03%) 1062906 ( 0.00%) 119.20
icmp6 28456 ( 0.09%) 3767154 ( 0.02%) 132.39
ip6 87 ( 0.00%) 11816 ( 0.00%) 135.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 641 ( 0.00%) 598548 ( 0.00%) 933.77
tcpdump file: 201203301200.dump.gz (697.99 MB)