Traffic Trace Info
DumpFile: 201203301530.dump
FileSize: 2557.48MB
Id: 201203301530
StartTime: Fri Mar 30 15:30:00 2012
EndTime: Fri Mar 30 15:45:00 2012
TotalTime: 900.51 seconds
TotalCapSize: 2014.51MB CapLen: 96 bytes
# of packets: 35583492 (25819.91MB)
AvgRate: 240.51Mbps stddev:44.62M
IP flow (unique src/dst pair) Information
# of flows: 1852152 (avg. 19.21 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.2% 2.2% 2.0% 1.6% 1.5% 1.4% 1.3% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1413269
Top 10 bandwidth usage (bytes/total in %):
14.0% 12.9% 6.1% 4.4% 4.3% 4.3% 3.1% 3.0% 3.0% 2.3%
# of IPv6 addresses: 6821
Top 10 bandwidth usage (bytes/total in %):
36.9% 22.8% 19.4% 10.1% 10.0% 7.5% 6.5% 6.5% 6.3% 6.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301530.pktlen.png)
detailed numbers
[ 32- 63]: 7468899
[ 64- 127]: 8206811
[ 128- 255]: 1108624
[ 256- 511]: 1150886
[ 512- 1023]: 706934
[ 1024- 2047]: 16941338
Protocol Breakdown
![[protocol breakdown chart]](201203301530.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35583492 (100.00%) 27074139502 (100.00%) 760.86
ip 35348695 ( 99.34%) 26955792295 ( 99.56%) 762.57
tcp 28139012 ( 79.08%) 23643803872 ( 87.33%) 840.25
http(s) 13451243 ( 37.80%) 18342758101 ( 67.75%) 1363.65
http(c) 8980732 ( 25.24%) 1859468194 ( 6.87%) 207.05
squid 52689 ( 0.15%) 40158847 ( 0.15%) 762.19
smtp 48694 ( 0.14%) 16250270 ( 0.06%) 333.72
nntp 24 ( 0.00%) 1496 ( 0.00%) 62.33
ftp 50380 ( 0.14%) 38097615 ( 0.14%) 756.21
pop3 4427 ( 0.01%) 2019464 ( 0.01%) 456.17
imap 2140 ( 0.01%) 608854 ( 0.00%) 284.51
telnet 1117 ( 0.00%) 74474 ( 0.00%) 66.67
ssh 483864 ( 1.36%) 537956400 ( 1.99%) 1111.79
dns 2111 ( 0.01%) 163347 ( 0.00%) 77.38
bgp 640 ( 0.00%) 125624 ( 0.00%) 196.29
napster 63 ( 0.00%) 4902 ( 0.00%) 77.81
realaud 17 ( 0.00%) 2019 ( 0.00%) 118.76
rtsp 10027 ( 0.03%) 11651837 ( 0.04%) 1162.05
icecast 23666 ( 0.07%) 15783059 ( 0.06%) 666.91
hotline 5 ( 0.00%) 593 ( 0.00%) 118.60
other 5027172 ( 14.13%) 2778678716 ( 10.26%) 552.73
udp 3619353 ( 10.17%) 1473038629 ( 5.44%) 406.99
dns 519789 ( 1.46%) 134776995 ( 0.50%) 259.29
rip 5 ( 0.00%) 320 ( 0.00%) 64.00
realaud 2 ( 0.00%) 444 ( 0.00%) 222.00
halflif 169 ( 0.00%) 14605 ( 0.00%) 86.42
starcra 27 ( 0.00%) 2532 ( 0.00%) 93.78
everque 3560 ( 0.01%) 3043958 ( 0.01%) 855.04
unreal 89 ( 0.00%) 32077 ( 0.00%) 360.42
quake 10 ( 0.00%) 953 ( 0.00%) 95.30
cuseeme 4 ( 0.00%) 340 ( 0.00%) 85.00
other 2987613 ( 8.40%) 1328643002 ( 4.91%) 444.72
icmp 1601825 ( 4.50%) 127159016 ( 0.47%) 79.38
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 14625 ( 0.04%) 4100150 ( 0.02%) 280.35
ip6 1954413 ( 5.49%) 1702888878 ( 6.29%) 871.30
pim 279 ( 0.00%) 16740 ( 0.00%) 60.00
other 19004 ( 0.05%) 4765850 ( 0.02%) 250.78
frag 236458 ( 0.66%) 180375043 ( 0.67%) 762.82
ip6 234797 ( 0.66%) 118347207 ( 0.44%) 504.04
tcp6 124757 ( 0.35%) 74020272 ( 0.27%) 593.32
http(s) 16608 ( 0.05%) 21932612 ( 0.08%) 1320.61
http(c) 40418 ( 0.11%) 3418395 ( 0.01%) 84.58
smtp 161 ( 0.00%) 66650 ( 0.00%) 413.98
ftp 230 ( 0.00%) 25877 ( 0.00%) 112.51
dns 311 ( 0.00%) 68950 ( 0.00%) 221.70
bgp 91 ( 0.00%) 17048 ( 0.00%) 187.34
other 66938 ( 0.19%) 48490740 ( 0.18%) 724.41
udp6 83778 ( 0.24%) 40232208 ( 0.15%) 480.22
dns 61606 ( 0.17%) 16709870 ( 0.06%) 271.24
starcra 1 ( 0.00%) 101 ( 0.00%) 101.00
everque 1 ( 0.00%) 105 ( 0.00%) 105.00
other 22170 ( 0.06%) 23522132 ( 0.09%) 1060.99
icmp6 25579 ( 0.07%) 3539902 ( 0.01%) 138.39
ip6 87 ( 0.00%) 11816 ( 0.00%) 135.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 566 ( 0.00%) 538929 ( 0.00%) 952.17
tcpdump file: 201203301530.dump.gz (823.86 MB)