Traffic Trace Info
DumpFile: 201203301230.dump
FileSize: 1823.26MB
Id: 201203301230
StartTime: Fri Mar 30 12:30:00 2012
EndTime: Fri Mar 30 12:45:01 2012
TotalTime: 900.14 seconds
TotalCapSize: 1437.99MB CapLen: 96 bytes
# of packets: 25248668 (16792.82MB)
AvgRate: 156.50Mbps stddev:30.55M
IP flow (unique src/dst pair) Information
# of flows: 1902992 (avg. 13.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.7% 2.2% 2.1% 2.1% 1.5% 1.4% 1.4% 1.4% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 1450383
Top 10 bandwidth usage (bytes/total in %):
8.4% 8.0% 7.9% 5.4% 4.8% 4.0% 3.9% 3.8% 3.4% 2.3%
# of IPv6 addresses: 6098
Top 10 bandwidth usage (bytes/total in %):
84.2% 74.2% 6.4% 4.5% 4.5% 3.8% 2.4% 1.2% 1.2% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301230.pktlen.png)
detailed numbers
[ 32- 63]: 5438525
[ 64- 127]: 6388774
[ 128- 255]: 1049810
[ 256- 511]: 953028
[ 512- 1023]: 597242
[ 1024- 2047]: 10821289
Protocol Breakdown
![[protocol breakdown chart]](201203301230.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 25248668 (100.00%) 17608545620 (100.00%) 697.40
ip 24730603 ( 97.95%) 17100226790 ( 97.11%) 691.46
tcp 18319481 ( 72.56%) 14426220471 ( 81.93%) 787.48
http(s) 8083068 ( 32.01%) 10611981243 ( 60.27%) 1312.87
http(c) 5535533 ( 21.92%) 1143279663 ( 6.49%) 206.53
squid 30205 ( 0.12%) 18540746 ( 0.11%) 613.83
smtp 50198 ( 0.20%) 14105465 ( 0.08%) 281.00
ftp 9771 ( 0.04%) 1688100 ( 0.01%) 172.77
pop3 4895 ( 0.02%) 3040760 ( 0.02%) 621.20
imap 1760 ( 0.01%) 886572 ( 0.01%) 503.73
telnet 494 ( 0.00%) 31744 ( 0.00%) 64.26
ssh 43391 ( 0.17%) 7779415 ( 0.04%) 179.29
dns 2471 ( 0.01%) 296729 ( 0.00%) 120.08
bgp 672 ( 0.00%) 162842 ( 0.00%) 242.32
napster 33 ( 0.00%) 2168 ( 0.00%) 65.70
realaud 17 ( 0.00%) 1433 ( 0.00%) 84.29
icecast 21315 ( 0.08%) 16057395 ( 0.09%) 753.34
hotline 17 ( 0.00%) 1060 ( 0.00%) 62.35
other 4535641 ( 17.96%) 2608365136 ( 14.81%) 575.08
udp 2874580 ( 11.39%) 1049271016 ( 5.96%) 365.02
dns 495660 ( 1.96%) 135593449 ( 0.77%) 273.56
realaud 6 ( 0.00%) 869 ( 0.00%) 144.83
halflif 18 ( 0.00%) 1669 ( 0.00%) 92.72
starcra 24 ( 0.00%) 2250 ( 0.00%) 93.75
everque 383 ( 0.00%) 69416 ( 0.00%) 181.24
unreal 61 ( 0.00%) 25244 ( 0.00%) 413.84
quake 13 ( 0.00%) 1548 ( 0.00%) 119.08
cuseeme 2 ( 0.00%) 162 ( 0.00%) 81.00
other 2378308 ( 9.42%) 913548500 ( 5.19%) 384.12
icmp 1675567 ( 6.64%) 148098814 ( 0.84%) 88.39
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 21886 ( 0.09%) 6063700 ( 0.03%) 277.06
ip6 1823545 ( 7.22%) 1467318304 ( 8.33%) 804.65
pim 206 ( 0.00%) 12360 ( 0.00%) 60.00
other 15153 ( 0.06%) 3222855 ( 0.02%) 212.69
frag 1863 ( 0.01%) 1477164 ( 0.01%) 792.90
ip6 518065 ( 2.05%) 508318830 ( 2.89%) 981.19
tcp6 420674 ( 1.67%) 488200543 ( 2.77%) 1160.52
http(s) 44382 ( 0.18%) 60654718 ( 0.34%) 1366.65
http(c) 65890 ( 0.26%) 5548623 ( 0.03%) 84.21
smtp 76 ( 0.00%) 38556 ( 0.00%) 507.32
dns 335 ( 0.00%) 64218 ( 0.00%) 191.70
bgp 94 ( 0.00%) 19042 ( 0.00%) 202.57
other 309897 ( 1.23%) 421875386 ( 2.40%) 1361.34
udp6 68856 ( 0.27%) 15871614 ( 0.09%) 230.50
dns 56861 ( 0.23%) 14613321 ( 0.08%) 257.00
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
halflif 1 ( 0.00%) 113 ( 0.00%) 113.00
other 11993 ( 0.05%) 1258074 ( 0.01%) 104.90
icmp6 27915 ( 0.11%) 3752927 ( 0.02%) 134.44
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 506 ( 0.00%) 478254 ( 0.00%) 945.17
tcpdump file: 201203301230.dump.gz (594.63 MB)