Traffic Trace Info
DumpFile: 201203301245.dump
FileSize: 1932.95MB
Id: 201203301245
StartTime: Fri Mar 30 12:45:01 2012
EndTime: Fri Mar 30 13:00:01 2012
TotalTime: 900.38 seconds
TotalCapSize: 1523.41MB CapLen: 96 bytes
# of packets: 26838718 (18073.26MB)
AvgRate: 168.40Mbps stddev:32.92M
IP flow (unique src/dst pair) Information
# of flows: 2037136 (avg. 13.17 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.8% 2.4% 2.1% 1.9% 1.9% 1.8% 1.5% 1.4% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 1531561
Top 10 bandwidth usage (bytes/total in %):
7.2% 7.0% 6.3% 6.1% 5.6% 5.5% 5.0% 4.7% 4.2% 3.4%
# of IPv6 addresses: 6154
Top 10 bandwidth usage (bytes/total in %):
78.1% 74.8% 10.4% 10.4% 2.5% 1.2% 1.0% 1.0% 0.9% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301245.pktlen.png)
detailed numbers
[ 32- 63]: 5695057
[ 64- 127]: 6778628
[ 128- 255]: 1101194
[ 256- 511]: 948587
[ 512- 1023]: 658772
[ 1024- 2047]: 11656480
Protocol Breakdown
![[protocol breakdown chart]](201203301245.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26838718 (100.00%) 18951190916 (100.00%) 706.11
ip 26345141 ( 98.16%) 18469880154 ( 97.46%) 701.07
tcp 19523084 ( 72.74%) 15585544241 ( 82.24%) 798.31
http(s) 7802554 ( 29.07%) 10007489048 ( 52.81%) 1282.59
http(c) 5534306 ( 20.62%) 1113609669 ( 5.88%) 201.22
squid 45266 ( 0.17%) 30539431 ( 0.16%) 674.67
smtp 38086 ( 0.14%) 11486095 ( 0.06%) 301.58
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 20959 ( 0.08%) 4981485 ( 0.03%) 237.68
pop3 4657 ( 0.02%) 3227376 ( 0.02%) 693.02
imap 1959 ( 0.01%) 482075 ( 0.00%) 246.08
telnet 272 ( 0.00%) 18258 ( 0.00%) 67.12
ssh 186135 ( 0.69%) 19735689 ( 0.10%) 106.03
dns 2916 ( 0.01%) 410780 ( 0.00%) 140.87
bgp 645 ( 0.00%) 129793 ( 0.00%) 201.23
napster 55 ( 0.00%) 4251 ( 0.00%) 77.29
realaud 6 ( 0.00%) 374 ( 0.00%) 62.33
icecast 22971 ( 0.09%) 16219214 ( 0.09%) 706.07
hotline 6 ( 0.00%) 374 ( 0.00%) 62.33
other 5862279 ( 21.84%) 4377209581 ( 23.10%) 746.67
udp 3199862 ( 11.92%) 1339905894 ( 7.07%) 418.74
dns 504885 ( 1.88%) 136836756 ( 0.72%) 271.03
realaud 6 ( 0.00%) 570 ( 0.00%) 95.00
halflif 19 ( 0.00%) 2024 ( 0.00%) 106.53
starcra 36 ( 0.00%) 3933 ( 0.00%) 109.25
everque 386 ( 0.00%) 59429 ( 0.00%) 153.96
unreal 44 ( 0.00%) 14290 ( 0.00%) 324.77
quake 17 ( 0.00%) 2237 ( 0.00%) 131.59
cuseeme 4 ( 0.00%) 315 ( 0.00%) 78.75
other 2694322 ( 10.04%) 1202929553 ( 6.35%) 446.47
icmp 1787010 ( 6.66%) 156397838 ( 0.83%) 87.52
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6668 ( 0.02%) 2237000 ( 0.01%) 335.48
ip6 1811016 ( 6.75%) 1382872002 ( 7.30%) 763.59
pim 316 ( 0.00%) 18960 ( 0.00%) 60.00
other 17000 ( 0.06%) 2884949 ( 0.02%) 169.70
frag 10140 ( 0.04%) 7646539 ( 0.04%) 754.10
ip6 493577 ( 1.84%) 481310762 ( 2.54%) 975.15
tcp6 394158 ( 1.47%) 460789282 ( 2.43%) 1169.05
http(s) 22266 ( 0.08%) 25504573 ( 0.13%) 1145.45
http(c) 63761 ( 0.24%) 5403298 ( 0.03%) 84.74
smtp 139 ( 0.00%) 67448 ( 0.00%) 485.24
dns 162 ( 0.00%) 18831 ( 0.00%) 116.24
bgp 92 ( 0.00%) 15150 ( 0.00%) 164.67
other 307738 ( 1.15%) 429779982 ( 2.27%) 1396.58
udp6 71828 ( 0.27%) 16339549 ( 0.09%) 227.48
dns 57676 ( 0.21%) 14858188 ( 0.08%) 257.61
realaud 2 ( 0.00%) 209 ( 0.00%) 104.50
everque 1 ( 0.00%) 105 ( 0.00%) 105.00
unreal 1 ( 0.00%) 101 ( 0.00%) 101.00
quake 1 ( 0.00%) 113 ( 0.00%) 113.00
other 14147 ( 0.05%) 1480833 ( 0.01%) 104.67
icmp6 26886 ( 0.10%) 3596718 ( 0.02%) 133.78
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 591 ( 0.00%) 569653 ( 0.00%) 963.88
tcpdump file: 201203301245.dump.gz (629.57 MB)