Traffic Trace Info
DumpFile: 201203301315.dump
FileSize: 2624.08MB
Id: 201203301315
StartTime: Fri Mar 30 13:15:01 2012
EndTime: Fri Mar 30 13:30:00 2012
TotalTime: 899.60 seconds
TotalCapSize: -2020.05MB CapLen: 96 bytes
# of packets: 35921352 (27144.14MB)
AvgRate: 253.21Mbps stddev:49.54M
IP flow (unique src/dst pair) Information
# of flows: 1922490 (avg. 18.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.8% 6.7% 4.8% 2.7% 1.9% 1.8% 1.7% 1.3% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 1472463
Top 10 bandwidth usage (bytes/total in %):
16.8% 7.9% 7.6% 7.4% 7.3% 5.9% 5.5% 4.5% 3.6% 3.1%
# of IPv6 addresses: 6141
Top 10 bandwidth usage (bytes/total in %):
91.7% 72.3% 18.9% 3.1% 3.1% 2.0% 1.9% 1.0% 1.0% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301315.pktlen.png)
detailed numbers
[ 32- 63]: 7153238
[ 64- 127]: 7805153
[ 128- 255]: 1196744
[ 256- 511]: 1179969
[ 512- 1023]: 804267
[ 1024- 2047]: 17781981
Protocol Breakdown
![[protocol breakdown chart]](201203301315.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35921352 (100.00%) 28462696257 (100.00%) 792.36
ip 34513599 ( 96.08%) 26559245472 ( 93.31%) 769.53
tcp 27610568 ( 76.86%) 23708201974 ( 83.30%) 858.66
http(s) 12592782 ( 35.06%) 17105442586 ( 60.10%) 1358.35
http(c) 8055263 ( 22.42%) 1541250088 ( 5.41%) 191.33
squid 32482 ( 0.09%) 20813195 ( 0.07%) 640.76
smtp 91114 ( 0.25%) 66072985 ( 0.23%) 725.17
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 5994 ( 0.02%) 598509 ( 0.00%) 99.85
pop3 4165 ( 0.01%) 2593543 ( 0.01%) 622.70
imap 3217 ( 0.01%) 2281335 ( 0.01%) 709.15
telnet 5110 ( 0.01%) 4537628 ( 0.02%) 887.99
ssh 311378 ( 0.87%) 60546697 ( 0.21%) 194.45
dns 3732 ( 0.01%) 364036 ( 0.00%) 97.54
bgp 648 ( 0.00%) 128935 ( 0.00%) 198.97
napster 24 ( 0.00%) 1658 ( 0.00%) 69.08
realaud 10 ( 0.00%) 622 ( 0.00%) 62.20
rtsp 8888 ( 0.02%) 11595942 ( 0.04%) 1304.67
icecast 26244 ( 0.07%) 16319022 ( 0.06%) 621.82
hotline 239 ( 0.00%) 15020 ( 0.00%) 62.85
other 6469271 ( 18.01%) 4875639739 ( 17.13%) 753.66
udp 3020696 ( 8.41%) 1136224326 ( 3.99%) 376.15
dns 495875 ( 1.38%) 121813080 ( 0.43%) 245.65
rip 1 ( 0.00%) 69 ( 0.00%) 69.00
realaud 8 ( 0.00%) 891 ( 0.00%) 111.38
halflif 31 ( 0.00%) 3108 ( 0.00%) 100.26
starcra 24 ( 0.00%) 2707 ( 0.00%) 112.79
everque 371 ( 0.00%) 61830 ( 0.00%) 166.66
unreal 145 ( 0.00%) 82506 ( 0.00%) 569.01
quake 16 ( 0.00%) 2492 ( 0.00%) 155.75
other 2524041 ( 7.03%) 1014203984 ( 3.56%) 401.82
icmp 1655517 ( 4.61%) 147658992 ( 0.52%) 89.19
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 18722 ( 0.05%) 8527036 ( 0.03%) 455.46
ip6 2190048 ( 6.10%) 1554079049 ( 5.46%) 709.61
pim 461 ( 0.00%) 27660 ( 0.00%) 60.00
other 17403 ( 0.05%) 4507275 ( 0.02%) 258.99
frag 20742 ( 0.06%) 15482041 ( 0.05%) 746.41
ip6 1407753 ( 3.92%) 1903450785 ( 6.69%) 1352.12
tcp6 1264614 ( 3.52%) 1845697581 ( 6.48%) 1459.49
http(s) 13771 ( 0.04%) 15298101 ( 0.05%) 1110.89
http(c) 23170 ( 0.06%) 2052748 ( 0.01%) 88.60
smtp 52 ( 0.00%) 27875 ( 0.00%) 536.06
dns 165 ( 0.00%) 32643 ( 0.00%) 197.84
bgp 96 ( 0.00%) 17419 ( 0.00%) 181.45
other 1227360 ( 3.42%) 1828268795 ( 6.42%) 1489.59
udp6 63801 ( 0.18%) 17125898 ( 0.06%) 268.43
dns 57606 ( 0.16%) 14754298 ( 0.05%) 256.12
realaud 1 ( 0.00%) 102 ( 0.00%) 102.00
quake 1 ( 0.00%) 101 ( 0.00%) 101.00
other 6193 ( 0.02%) 2371397 ( 0.01%) 382.92
icmp6 26891 ( 0.07%) 3677355 ( 0.01%) 136.75
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 52333 ( 0.15%) 36934459 ( 0.13%) 705.76
tcpdump file: 201203301315.dump.gz (811.26 MB)