Traffic Trace Info
DumpFile: 201203301515.dump
FileSize: 2348.40MB
Id: 201203301515
StartTime: Fri Mar 30 15:15:00 2012
EndTime: Fri Mar 30 15:30:00 2012
TotalTime: 899.56 seconds
TotalCapSize: 1849.69MB CapLen: 96 bytes
# of packets: 32683188 (23164.49MB)
AvgRate: 216.00Mbps stddev:39.26M
IP flow (unique src/dst pair) Information
# of flows: 1790083 (avg. 18.26 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.4% 1.9% 1.6% 1.6% 1.4% 1.2% 1.1% 1.1% 1.1% 1.0%
IP address Information
# of IPv4 addresses: 1388699
Top 10 bandwidth usage (bytes/total in %):
15.2% 10.8% 9.7% 6.5% 3.3% 3.2% 3.2% 3.0% 2.5% 2.5%
# of IPv6 addresses: 6825
Top 10 bandwidth usage (bytes/total in %):
30.1% 30.1% 22.9% 20.3% 18.9% 8.9% 5.0% 4.3% 3.9% 3.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301515.pktlen.png)
detailed numbers
[ 32- 63]: 7348755
[ 64- 127]: 7279217
[ 128- 255]: 1071809
[ 256- 511]: 1154000
[ 512- 1023]: 751540
[ 1024- 2047]: 15077867
Protocol Breakdown
![[protocol breakdown chart]](201203301515.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32683188 (100.00%) 24289728731 (100.00%) 743.19
ip 32422289 ( 99.20%) 24125816652 ( 99.33%) 744.11
tcp 25920916 ( 79.31%) 21120769186 ( 86.95%) 814.82
http(s) 12148039 ( 37.17%) 16637143331 ( 68.49%) 1369.53
http(c) 8529880 ( 26.10%) 1537116250 ( 6.33%) 180.20
squid 42350 ( 0.13%) 29456605 ( 0.12%) 695.55
smtp 52537 ( 0.16%) 21384109 ( 0.09%) 407.03
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 42468 ( 0.13%) 30641942 ( 0.13%) 721.53
pop3 3091 ( 0.01%) 1025576 ( 0.00%) 331.79
imap 1641 ( 0.01%) 235350 ( 0.00%) 143.42
telnet 358 ( 0.00%) 25056 ( 0.00%) 69.99
ssh 37576 ( 0.11%) 6475674 ( 0.03%) 172.34
dns 2059 ( 0.01%) 181210 ( 0.00%) 88.01
bgp 650 ( 0.00%) 140670 ( 0.00%) 216.42
napster 39 ( 0.00%) 2893 ( 0.00%) 74.18
realaud 34 ( 0.00%) 2856 ( 0.00%) 84.00
rtsp 10078 ( 0.03%) 11696888 ( 0.05%) 1160.64
icecast 24048 ( 0.07%) 15800545 ( 0.07%) 657.04
hotline 6 ( 0.00%) 366 ( 0.00%) 61.00
other 5026056 ( 15.38%) 2829439491 ( 11.65%) 562.95
udp 3172553 ( 9.71%) 1261996446 ( 5.20%) 397.79
dns 500998 ( 1.53%) 127099279 ( 0.52%) 253.69
realaud 9 ( 0.00%) 1006 ( 0.00%) 111.78
halflif 19 ( 0.00%) 2546 ( 0.00%) 134.00
starcra 15 ( 0.00%) 1517 ( 0.00%) 101.13
everque 503 ( 0.00%) 88451 ( 0.00%) 175.85
unreal 41 ( 0.00%) 6317 ( 0.00%) 154.07
quake 24 ( 0.00%) 3664 ( 0.00%) 152.67
cuseeme 2 ( 0.00%) 162 ( 0.00%) 81.00
other 2670789 ( 8.17%) 1134742473 ( 4.67%) 424.87
icmp 1630147 ( 4.99%) 132516876 ( 0.55%) 81.29
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6119 ( 0.02%) 2421034 ( 0.01%) 395.66
ip6 1674488 ( 5.12%) 1603930860 ( 6.60%) 957.86
pim 233 ( 0.00%) 13980 ( 0.00%) 60.00
other 17648 ( 0.05%) 4149000 ( 0.02%) 235.10
frag 21267 ( 0.07%) 15862219 ( 0.07%) 745.86
ip6 260899 ( 0.80%) 163912079 ( 0.67%) 628.26
tcp6 140122 ( 0.43%) 108795335 ( 0.45%) 776.43
http(s) 11324 ( 0.03%) 13690890 ( 0.06%) 1209.02
http(c) 42945 ( 0.13%) 3645298 ( 0.02%) 84.88
smtp 216 ( 0.00%) 110142 ( 0.00%) 509.92
ftp 16 ( 0.00%) 1447 ( 0.00%) 90.44
dns 251 ( 0.00%) 45842 ( 0.00%) 182.64
bgp 89 ( 0.00%) 13775 ( 0.00%) 154.78
other 85281 ( 0.26%) 91287941 ( 0.38%) 1070.44
udp6 91801 ( 0.28%) 50718056 ( 0.21%) 552.48
dns 61332 ( 0.19%) 16879761 ( 0.07%) 275.22
halflif 1 ( 0.00%) 113 ( 0.00%) 113.00
everque 1 ( 0.00%) 101 ( 0.00%) 101.00
unreal 1 ( 0.00%) 107 ( 0.00%) 107.00
other 30466 ( 0.09%) 33837974 ( 0.14%) 1110.68
icmp6 28251 ( 0.09%) 3790044 ( 0.02%) 134.16
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 613 ( 0.00%) 593388 ( 0.00%) 968.01
tcpdump file: 201203301515.dump.gz (762.45 MB)