Traffic Trace Info
DumpFile: 201203301415.dump
FileSize: 2552.15MB
Id: 201203301415
StartTime: Fri Mar 30 14:15:01 2012
EndTime: Fri Mar 30 14:30:00 2012
TotalTime: 899.80 seconds
TotalCapSize: 2020.25MB CapLen: 96 bytes
# of packets: 34858030 (26956.74MB)
AvgRate: 251.30Mbps stddev:46.72M
IP flow (unique src/dst pair) Information
# of flows: 1963765 (avg. 17.75 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.5% 2.7% 2.3% 1.8% 1.7% 1.5% 1.4% 1.4% 1.3% 1.3%
IP address Information
# of IPv4 addresses: 1514744
Top 10 bandwidth usage (bytes/total in %):
15.9% 7.3% 7.2% 6.6% 6.3% 5.8% 5.0% 3.7% 3.1% 2.8%
# of IPv6 addresses: 6429
Top 10 bandwidth usage (bytes/total in %):
62.4% 58.6% 10.7% 10.7% 8.3% 8.2% 3.7% 3.6% 3.4% 3.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301415.pktlen.png)
detailed numbers
[ 32- 63]: 6395819
[ 64- 127]: 7579611
[ 128- 255]: 1038350
[ 256- 511]: 1314169
[ 512- 1023]: 829757
[ 1024- 2047]: 17700324
Protocol Breakdown
![[protocol breakdown chart]](201203301415.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34858030 (100.00%) 28266188517 (100.00%) 810.89
ip 34398297 ( 98.68%) 27823620165 ( 98.43%) 808.87
tcp 27206671 ( 78.05%) 24360155275 ( 86.18%) 895.37
http(s) 13964701 ( 40.06%) 18964826108 ( 67.09%) 1358.05
http(c) 7701935 ( 22.10%) 1825772112 ( 6.46%) 237.05
squid 38201 ( 0.11%) 28855755 ( 0.10%) 755.37
smtp 50862 ( 0.15%) 23147792 ( 0.08%) 455.11
ftp 11156 ( 0.03%) 987494 ( 0.00%) 88.52
pop3 3285 ( 0.01%) 1279326 ( 0.00%) 389.44
imap 1642 ( 0.00%) 470185 ( 0.00%) 286.35
telnet 147 ( 0.00%) 9054 ( 0.00%) 61.59
ssh 73305 ( 0.21%) 11473692 ( 0.04%) 156.52
dns 2608 ( 0.01%) 307199 ( 0.00%) 117.79
bgp 639 ( 0.00%) 131197 ( 0.00%) 205.32
napster 45 ( 0.00%) 3363 ( 0.00%) 74.73
realaud 18 ( 0.00%) 1941 ( 0.00%) 107.83
rtsp 8878 ( 0.03%) 11585492 ( 0.04%) 1304.97
icecast 25567 ( 0.07%) 15904920 ( 0.06%) 622.09
hotline 14 ( 0.00%) 2244 ( 0.00%) 160.29
other 5323666 ( 15.27%) 3475397281 ( 12.30%) 652.82
udp 3320692 ( 9.53%) 1398800637 ( 4.95%) 421.24
dns 495817 ( 1.42%) 121390721 ( 0.43%) 244.83
rip 1 ( 0.00%) 68 ( 0.00%) 68.00
realaud 69 ( 0.00%) 16473 ( 0.00%) 238.74
halflif 69 ( 0.00%) 4986 ( 0.00%) 72.26
starcra 40 ( 0.00%) 3624 ( 0.00%) 90.60
everque 427 ( 0.00%) 79815 ( 0.00%) 186.92
unreal 70 ( 0.00%) 8927 ( 0.00%) 127.53
quake 30 ( 0.00%) 2461 ( 0.00%) 82.03
cuseeme 28 ( 0.00%) 5659 ( 0.00%) 202.11
other 2819902 ( 8.09%) 1276977600 ( 4.52%) 452.84
icmp 1670007 ( 4.79%) 147882329 ( 0.52%) 88.55
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 16978 ( 0.05%) 4881052 ( 0.02%) 287.49
ip6 2164424 ( 6.21%) 1906528438 ( 6.74%) 880.85
pim 298 ( 0.00%) 17880 ( 0.00%) 60.00
other 19042 ( 0.05%) 5335284 ( 0.02%) 280.19
frag 8943 ( 0.03%) 6868256 ( 0.02%) 768.00
ip6 459733 ( 1.32%) 442568352 ( 1.57%) 962.66
tcp6 340792 ( 0.98%) 402403436 ( 1.42%) 1180.79
http(s) 24543 ( 0.07%) 32250133 ( 0.11%) 1314.03
http(c) 42376 ( 0.12%) 3755368 ( 0.01%) 88.62
smtp 83 ( 0.00%) 11288 ( 0.00%) 136.00
dns 179 ( 0.00%) 25279 ( 0.00%) 141.22
bgp 105 ( 0.00%) 31819 ( 0.00%) 303.04
other 273506 ( 0.78%) 366329549 ( 1.30%) 1339.38
udp6 69048 ( 0.20%) 19808527 ( 0.07%) 286.88
dns 63686 ( 0.18%) 18035890 ( 0.06%) 283.20
halflif 1 ( 0.00%) 105 ( 0.00%) 105.00
everque 1 ( 0.00%) 98 ( 0.00%) 98.00
quake 1 ( 0.00%) 102 ( 0.00%) 102.00
other 5359 ( 0.02%) 1772332 ( 0.01%) 330.72
icmp6 26157 ( 0.08%) 3585037 ( 0.01%) 137.06
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 23621 ( 0.07%) 16755724 ( 0.06%) 709.36
tcpdump file: 201203301415.dump.gz (794.42 MB)