Traffic Trace Info
DumpFile: 201203301300.dump
FileSize: 2232.07MB
Id: 201203301300
StartTime: Fri Mar 30 13:00:01 2012
EndTime: Fri Mar 30 13:15:01 2012
TotalTime: 899.71 seconds
TotalCapSize: 1766.19MB CapLen: 96 bytes
# of packets: 30531813 (22574.90MB)
AvgRate: 225.04Mbps stddev:45.30M
IP flow (unique src/dst pair) Information
# of flows: 1746905 (avg. 17.48 pkts/flow)
Top 10 big flow size (bytes/total in %):
13.6% 4.9% 3.0% 1.5% 1.4% 1.2% 1.2% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 1343855
Top 10 bandwidth usage (bytes/total in %):
15.8% 14.7% 8.4% 8.2% 6.0% 5.3% 4.4% 4.0% 3.3% 3.3%
# of IPv6 addresses: 5964
Top 10 bandwidth usage (bytes/total in %):
95.6% 72.8% 22.0% 1.8% 1.8% 0.6% 0.3% 0.3% 0.3% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301300.pktlen.png)
detailed numbers
[ 32- 63]: 6101744
[ 64- 127]: 7066857
[ 128- 255]: 1009814
[ 256- 511]: 940376
[ 512- 1023]: 662439
[ 1024- 2047]: 14750583
Protocol Breakdown
![[protocol breakdown chart]](201203301300.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30531813 (100.00%) 23671494054 (100.00%) 775.31
ip 29371993 ( 96.20%) 22076984586 ( 93.26%) 751.63
tcp 22536281 ( 73.81%) 19291444611 ( 81.50%) 856.02
http(s) 8689956 ( 28.46%) 11369663370 ( 48.03%) 1308.37
http(c) 6346714 ( 20.79%) 1358065800 ( 5.74%) 213.98
squid 25627 ( 0.08%) 12978281 ( 0.05%) 506.43
smtp 31636 ( 0.10%) 6917061 ( 0.03%) 218.65
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 5164 ( 0.02%) 496769 ( 0.00%) 96.20
pop3 4224 ( 0.01%) 2652328 ( 0.01%) 627.92
imap 2099 ( 0.01%) 517530 ( 0.00%) 246.56
telnet 77 ( 0.00%) 4830 ( 0.00%) 62.73
ssh 181321 ( 0.59%) 29621122 ( 0.13%) 163.36
dns 2157 ( 0.01%) 271010 ( 0.00%) 125.64
bgp 586 ( 0.00%) 107084 ( 0.00%) 182.74
napster 22 ( 0.00%) 1444 ( 0.00%) 65.64
realaud 36 ( 0.00%) 3629 ( 0.00%) 100.81
rtsp 4324 ( 0.01%) 5641674 ( 0.02%) 1304.73
icecast 23363 ( 0.08%) 15117883 ( 0.06%) 647.09
hotline 6 ( 0.00%) 372 ( 0.00%) 62.00
other 7218968 ( 23.64%) 6489384364 ( 27.41%) 898.94
udp 2923432 ( 9.58%) 1218340139 ( 5.15%) 416.75
dns 472792 ( 1.55%) 117807648 ( 0.50%) 249.17
realaud 4 ( 0.00%) 445 ( 0.00%) 111.25
halflif 20 ( 0.00%) 2034 ( 0.00%) 101.70
starcra 19 ( 0.00%) 1742 ( 0.00%) 91.68
everque 364 ( 0.00%) 64284 ( 0.00%) 176.60
unreal 114 ( 0.00%) 59319 ( 0.00%) 520.34
quake 7 ( 0.00%) 822 ( 0.00%) 117.43
cuseeme 11 ( 0.00%) 1571 ( 0.00%) 142.82
other 2449978 ( 8.02%) 1100344645 ( 4.65%) 449.12
icmp 1582283 ( 5.18%) 138744705 ( 0.59%) 87.69
ipip 171 ( 0.00%) 17814 ( 0.00%) 104.18
ipsec 20996 ( 0.07%) 10801912 ( 0.05%) 514.47
ip6 2290839 ( 7.50%) 1413000599 ( 5.97%) 616.80
pim 222 ( 0.00%) 13320 ( 0.00%) 60.00
other 17769 ( 0.06%) 4621486 ( 0.02%) 260.09
frag 8975 ( 0.03%) 6767534 ( 0.03%) 754.04
ip6 1159820 ( 3.80%) 1594509468 ( 6.74%) 1374.79
tcp6 1077409 ( 3.53%) 1576042769 ( 6.66%) 1462.81
http(s) 13867 ( 0.05%) 15964035 ( 0.07%) 1151.22
http(c) 18537 ( 0.06%) 1623984 ( 0.01%) 87.61
smtp 365 ( 0.00%) 43731 ( 0.00%) 119.81
dns 289 ( 0.00%) 57073 ( 0.00%) 197.48
bgp 88 ( 0.00%) 19705 ( 0.00%) 223.92
other 1044263 ( 3.42%) 1558334241 ( 6.58%) 1492.28
udp6 57572 ( 0.19%) 14487454 ( 0.06%) 251.64
dns 54053 ( 0.18%) 14013139 ( 0.06%) 259.25
halflif 1 ( 0.00%) 113 ( 0.00%) 113.00
everque 1 ( 0.00%) 107 ( 0.00%) 107.00
unreal 1 ( 0.00%) 103 ( 0.00%) 103.00
quake 1 ( 0.00%) 103 ( 0.00%) 103.00
other 3515 ( 0.01%) 473889 ( 0.00%) 134.82
icmp6 24075 ( 0.08%) 3340897 ( 0.01%) 138.77
ip6 77 ( 0.00%) 10436 ( 0.00%) 135.53
pim6 27 ( 0.00%) 3672 ( 0.00%) 136.00
other6 660 ( 0.00%) 624240 ( 0.00%) 945.82
tcpdump file: 201203301300.dump.gz (691.87 MB)