Traffic Trace Info
DumpFile: 201203301500.dump
FileSize: 2406.99MB
Id: 201203301500
StartTime: Fri Mar 30 15:00:01 2012
EndTime: Fri Mar 30 15:15:00 2012
TotalTime: 899.88 seconds
TotalCapSize: 1896.80MB CapLen: 96 bytes
# of packets: 33435377 (24673.92MB)
AvgRate: 229.99Mbps stddev:42.45M
IP flow (unique src/dst pair) Information
# of flows: 1752948 (avg. 19.07 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.3% 3.8% 3.0% 2.7% 2.4% 1.4% 1.4% 1.2% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 1358366
Top 10 bandwidth usage (bytes/total in %):
11.1% 11.0% 7.5% 7.2% 7.2% 5.4% 4.4% 3.8% 3.5% 3.0%
# of IPv6 addresses: 7056
Top 10 bandwidth usage (bytes/total in %):
27.1% 23.9% 16.5% 14.5% 8.6% 7.6% 7.6% 4.6% 4.1% 4.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301500.pktlen.png)
detailed numbers
[ 32- 63]: 7385664
[ 64- 127]: 6758102
[ 128- 255]: 1014403
[ 256- 511]: 1300194
[ 512- 1023]: 825804
[ 1024- 2047]: 16151210
Protocol Breakdown
![[protocol breakdown chart]](201203301500.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33435377 (100.00%) 25872477056 (100.00%) 773.81
ip 33222357 ( 99.36%) 25767624191 ( 99.59%) 775.61
tcp 26798924 ( 80.15%) 22613987956 ( 87.41%) 843.84
http(s) 12969418 ( 38.79%) 17570146467 ( 67.91%) 1354.74
http(c) 8382118 ( 25.07%) 1929165405 ( 7.46%) 230.15
squid 55994 ( 0.17%) 47337535 ( 0.18%) 845.40
smtp 39960 ( 0.12%) 10722717 ( 0.04%) 268.34
nntp 1 ( 0.00%) 60 ( 0.00%) 60.00
ftp 12675 ( 0.04%) 1957937 ( 0.01%) 154.47
pop3 2875 ( 0.01%) 891802 ( 0.00%) 310.19
imap 3350 ( 0.01%) 794651 ( 0.00%) 237.21
telnet 97 ( 0.00%) 6142 ( 0.00%) 63.32
ssh 97344 ( 0.29%) 80481499 ( 0.31%) 826.77
dns 2967 ( 0.01%) 360550 ( 0.00%) 121.52
bgp 623 ( 0.00%) 114624 ( 0.00%) 183.99
napster 76 ( 0.00%) 20765 ( 0.00%) 273.22
realaud 12 ( 0.00%) 752 ( 0.00%) 62.67
rtsp 10052 ( 0.03%) 11679749 ( 0.05%) 1161.93
icecast 24206 ( 0.07%) 15796884 ( 0.06%) 652.60
hotline 16 ( 0.00%) 1004 ( 0.00%) 62.75
other 5197139 ( 15.54%) 2944509315 ( 11.38%) 566.56
udp 2886654 ( 8.63%) 1067958695 ( 4.13%) 369.96
dns 521453 ( 1.56%) 127288165 ( 0.49%) 244.10
realaud 8 ( 0.00%) 662 ( 0.00%) 82.75
halflif 14 ( 0.00%) 1241 ( 0.00%) 88.64
starcra 37 ( 0.00%) 3697 ( 0.00%) 99.92
everque 390 ( 0.00%) 77690 ( 0.00%) 199.21
unreal 43 ( 0.00%) 6498 ( 0.00%) 151.12
quake 31 ( 0.00%) 4048 ( 0.00%) 130.58
cuseeme 1 ( 0.00%) 68 ( 0.00%) 68.00
other 2364429 ( 7.07%) 940508375 ( 3.64%) 397.77
icmp 1582662 ( 4.73%) 127904651 ( 0.49%) 80.82
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4703 ( 0.01%) 1099770 ( 0.00%) 233.84
ip6 1929871 ( 5.77%) 1950719700 ( 7.54%) 1010.80
pim 306 ( 0.00%) 18360 ( 0.00%) 60.00
other 19052 ( 0.06%) 5915789 ( 0.02%) 310.51
frag 8624 ( 0.03%) 6569831 ( 0.03%) 761.81
ip6 213020 ( 0.64%) 104852865 ( 0.41%) 492.22
tcp6 92508 ( 0.28%) 57572527 ( 0.22%) 622.35
http(s) 17363 ( 0.05%) 21531840 ( 0.08%) 1240.10
http(c) 30083 ( 0.09%) 2596421 ( 0.01%) 86.31
smtp 151 ( 0.00%) 87623 ( 0.00%) 580.28
dns 364 ( 0.00%) 66081 ( 0.00%) 181.54
bgp 94 ( 0.00%) 14796 ( 0.00%) 157.40
other 44453 ( 0.13%) 33275766 ( 0.13%) 748.56
udp6 90359 ( 0.27%) 42746136 ( 0.17%) 473.07
dns 64928 ( 0.19%) 16801466 ( 0.06%) 258.77
everque 1 ( 0.00%) 109 ( 0.00%) 109.00
quake 2 ( 0.00%) 224 ( 0.00%) 112.00
other 25428 ( 0.08%) 25944337 ( 0.10%) 1020.31
icmp6 29347 ( 0.09%) 3869485 ( 0.01%) 131.85
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 689 ( 0.00%) 648853 ( 0.00%) 941.73
tcpdump file: 201203301500.dump.gz (776.69 MB)