Traffic Trace Info
DumpFile: 201203301345.dump
FileSize: 2736.54MB
Id: 201203301345
StartTime: Fri Mar 30 13:45:00 2012
EndTime: Fri Mar 30 14:00:00 2012
TotalTime: 900.66 seconds
TotalCapSize: -1921.11MB CapLen: 96 bytes
# of packets: 36807770 (29380.53MB)
AvgRate: 273.66Mbps stddev:44.30M
IP flow (unique src/dst pair) Information
# of flows: 2001080 (avg. 18.39 pkts/flow)
Top 10 big flow size (bytes/total in %):
12.6% 6.8% 2.5% 2.0% 2.0% 1.8% 1.7% 1.7% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 1484493
Top 10 bandwidth usage (bytes/total in %):
14.7% 13.5% 8.1% 7.2% 6.3% 6.3% 4.1% 2.9% 2.4% 2.3%
# of IPv6 addresses: 6151
Top 10 bandwidth usage (bytes/total in %):
96.9% 87.3% 8.6% 1.4% 1.3% 0.9% 0.9% 0.5% 0.5% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301345.pktlen.png)
detailed numbers
[ 32- 63]: 6524443
[ 64- 127]: 7491963
[ 128- 255]: 1036617
[ 256- 511]: 1277351
[ 512- 1023]: 983398
[ 1024- 2047]: 19493998
Protocol Breakdown
![[protocol breakdown chart]](201203301345.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 36807770 (100.00%) 30807719939 (100.00%) 836.99
ip 33537548 ( 91.12%) 26348538809 ( 85.53%) 785.64
tcp 26996579 ( 73.34%) 23412662708 ( 76.00%) 867.25
http(s) 13823051 ( 37.55%) 18853852911 ( 61.20%) 1363.94
http(c) 7675430 ( 20.85%) 1567814769 ( 5.09%) 204.26
squid 64776 ( 0.18%) 25612639 ( 0.08%) 395.40
smtp 48539 ( 0.13%) 16636979 ( 0.05%) 342.75
ftp 6110 ( 0.02%) 588589 ( 0.00%) 96.33
pop3 3662 ( 0.01%) 2352134 ( 0.01%) 642.31
imap 2214 ( 0.01%) 1012923 ( 0.00%) 457.51
telnet 152 ( 0.00%) 9288 ( 0.00%) 61.11
ssh 230864 ( 0.63%) 51919756 ( 0.17%) 224.89
dns 2680 ( 0.01%) 317781 ( 0.00%) 118.58
bgp 614 ( 0.00%) 106095 ( 0.00%) 172.79
napster 26 ( 0.00%) 1716 ( 0.00%) 66.00
realaud 21 ( 0.00%) 1312 ( 0.00%) 62.48
rtsp 8901 ( 0.02%) 11620185 ( 0.04%) 1305.49
icecast 29111 ( 0.08%) 16186860 ( 0.05%) 556.04
hotline 20 ( 0.00%) 1284 ( 0.00%) 64.20
other 5100408 ( 13.86%) 2864627487 ( 9.30%) 561.65
udp 2958185 ( 8.04%) 1094099610 ( 3.55%) 369.86
dns 463914 ( 1.26%) 119308172 ( 0.39%) 257.18
realaud 1 ( 0.00%) 140 ( 0.00%) 140.00
halflif 16 ( 0.00%) 1729 ( 0.00%) 108.06
starcra 34 ( 0.00%) 3643 ( 0.00%) 107.15
everque 907 ( 0.00%) 642081 ( 0.00%) 707.92
unreal 33 ( 0.00%) 10289 ( 0.00%) 311.79
quake 13 ( 0.00%) 1687 ( 0.00%) 129.77
cuseeme 1 ( 0.00%) 93 ( 0.00%) 93.00
other 2493148 ( 6.77%) 974084850 ( 3.16%) 390.70
icmp 1687270 ( 4.58%) 150115807 ( 0.49%) 88.97
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 4584 ( 0.01%) 1795904 ( 0.01%) 391.78
ip6 1873076 ( 5.09%) 1686987107 ( 5.48%) 900.65
pim 266 ( 0.00%) 15960 ( 0.00%) 60.00
other 17404 ( 0.05%) 2842553 ( 0.01%) 163.33
frag 712 ( 0.00%) 679887 ( 0.00%) 954.90
ip6 3270222 ( 8.88%) 4459181130 ( 14.47%) 1363.57
tcp6 3099621 ( 8.42%) 4381426701 ( 14.22%) 1413.54
http(s) 27392 ( 0.07%) 35791008 ( 0.12%) 1306.62
http(c) 42098 ( 0.11%) 3586896 ( 0.01%) 85.20
smtp 130 ( 0.00%) 52181 ( 0.00%) 401.39
dns 209 ( 0.00%) 31852 ( 0.00%) 152.40
bgp 88 ( 0.00%) 15370 ( 0.00%) 174.66
other 3029704 ( 8.23%) 4341949394 ( 14.09%) 1433.13
udp6 65752 ( 0.18%) 18625318 ( 0.06%) 283.27
dns 59043 ( 0.16%) 15783429 ( 0.05%) 267.32
realaud 1 ( 0.00%) 100 ( 0.00%) 100.00
halflif 1 ( 0.00%) 110 ( 0.00%) 110.00
everque 1 ( 0.00%) 100 ( 0.00%) 100.00
quake 3 ( 0.00%) 316 ( 0.00%) 105.33
cuseeme 2 ( 0.00%) 215 ( 0.00%) 107.50
other 6701 ( 0.02%) 2841048 ( 0.01%) 423.97
icmp6 25869 ( 0.07%) 3614706 ( 0.01%) 139.73
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 78867 ( 0.21%) 55498981 ( 0.18%) 703.70
tcpdump file: 201203301345.dump.gz (822.44 MB)