Traffic Trace Info
DumpFile: 201203301445.dump
FileSize: 2423.40MB
Id: 201203301445
StartTime: Fri Mar 30 14:45:00 2012
EndTime: Fri Mar 30 15:00:01 2012
TotalTime: 900.48 seconds
TotalCapSize: 1913.00MB CapLen: 96 bytes
# of packets: 33449174 (23749.53MB)
AvgRate: 221.22Mbps stddev:32.94M
IP flow (unique src/dst pair) Information
# of flows: 1865318 (avg. 17.93 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.7% 3.4% 3.2% 2.4% 2.3% 1.8% 1.7% 1.4% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1434748
Top 10 bandwidth usage (bytes/total in %):
14.0% 12.6% 7.2% 5.1% 4.8% 3.6% 3.4% 3.3% 3.0% 3.0%
# of IPv6 addresses: 6938
Top 10 bandwidth usage (bytes/total in %):
21.4% 17.3% 13.8% 13.8% 12.6% 9.6% 9.3% 9.2% 8.0% 7.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301445.pktlen.png)
detailed numbers
[ 32- 63]: 7392466
[ 64- 127]: 7320001
[ 128- 255]: 1192039
[ 256- 511]: 1295322
[ 512- 1023]: 852262
[ 1024- 2047]: 15397084
Protocol Breakdown
![[protocol breakdown chart]](201203301445.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33449174 (100.00%) 24903182057 (100.00%) 744.51
ip 33102393 ( 98.96%) 24681923230 ( 99.11%) 745.62
tcp 26531438 ( 79.32%) 21804117663 ( 87.56%) 821.82
http(s) 12382292 ( 37.02%) 16664399362 ( 66.92%) 1345.83
http(c) 9064813 ( 27.10%) 2185331831 ( 8.78%) 241.08
squid 63989 ( 0.19%) 30216209 ( 0.12%) 472.21
smtp 45534 ( 0.14%) 14682195 ( 0.06%) 322.44
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 11745 ( 0.04%) 1077171 ( 0.00%) 91.71
pop3 3361 ( 0.01%) 1268439 ( 0.01%) 377.40
imap 1670 ( 0.00%) 238692 ( 0.00%) 142.93
telnet 6754 ( 0.02%) 498915 ( 0.00%) 73.87
ssh 80326 ( 0.24%) 13692155 ( 0.05%) 170.46
dns 14164 ( 0.04%) 11131906 ( 0.04%) 785.93
bgp 651 ( 0.00%) 130956 ( 0.00%) 201.16
napster 47 ( 0.00%) 4314 ( 0.00%) 91.79
realaud 14 ( 0.00%) 1536 ( 0.00%) 109.71
rtsp 10108 ( 0.03%) 11736853 ( 0.05%) 1161.14
icecast 24363 ( 0.07%) 15832379 ( 0.06%) 649.85
hotline 11 ( 0.00%) 1153 ( 0.00%) 104.82
other 4821583 ( 14.41%) 2853872789 ( 11.46%) 591.90
udp 2895729 ( 8.66%) 881740440 ( 3.54%) 304.50
dns 472908 ( 1.41%) 118370472 ( 0.48%) 250.30
rip 1 ( 0.00%) 72 ( 0.00%) 72.00
realaud 8 ( 0.00%) 949 ( 0.00%) 118.62
halflif 53 ( 0.00%) 17018 ( 0.00%) 321.09
starcra 28 ( 0.00%) 3424 ( 0.00%) 122.29
everque 363 ( 0.00%) 70653 ( 0.00%) 194.64
unreal 12 ( 0.00%) 1342 ( 0.00%) 111.83
quake 21 ( 0.00%) 3178 ( 0.00%) 151.33
cuseeme 1 ( 0.00%) 82 ( 0.00%) 82.00
other 2422052 ( 7.24%) 763193188 ( 3.06%) 315.10
icmp 1588101 ( 4.75%) 129478795 ( 0.52%) 81.53
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 23076 ( 0.07%) 6326232 ( 0.03%) 274.15
ip6 2022126 ( 6.05%) 1819296057 ( 7.31%) 899.69
pim 297 ( 0.00%) 17820 ( 0.00%) 60.00
other 41442 ( 0.12%) 40927063 ( 0.16%) 987.57
frag 1189 ( 0.00%) 1061090 ( 0.00%) 892.42
ip6 346781 ( 1.04%) 221258827 ( 0.89%) 638.04
tcp6 207689 ( 0.62%) 153273316 ( 0.62%) 737.99
http(s) 59115 ( 0.18%) 83212472 ( 0.33%) 1407.64
http(c) 66718 ( 0.20%) 5757290 ( 0.02%) 86.29
smtp 242 ( 0.00%) 167038 ( 0.00%) 690.24
dns 159 ( 0.00%) 27578 ( 0.00%) 173.45
bgp 82 ( 0.00%) 14172 ( 0.00%) 172.83
other 81373 ( 0.24%) 64094766 ( 0.26%) 787.67
udp6 107174 ( 0.32%) 61475554 ( 0.25%) 573.61
dns 60408 ( 0.18%) 16545318 ( 0.07%) 273.89
halflif 2 ( 0.00%) 212 ( 0.00%) 106.00
unreal 1 ( 0.00%) 101 ( 0.00%) 101.00
quake 1 ( 0.00%) 107 ( 0.00%) 107.00
other 46762 ( 0.14%) 44929816 ( 0.18%) 960.82
icmp6 28014 ( 0.08%) 3667297 ( 0.01%) 130.91
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3791 ( 0.01%) 2827236 ( 0.01%) 745.78
tcpdump file: 201203301445.dump.gz (778.11 MB)