Traffic Trace Info
DumpFile: 201203301600.dump
FileSize: 2562.30MB
Id: 201203301600
StartTime: Fri Mar 30 16:00:00 2012
EndTime: Fri Mar 30 16:15:00 2012
TotalTime: 900.04 seconds
TotalCapSize: 2015.33MB CapLen: 96 bytes
# of packets: 35846046 (26834.83MB)
AvgRate: 250.16Mbps stddev:37.33M
IP flow (unique src/dst pair) Information
# of flows: 1895561 (avg. 18.91 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.4% 6.1% 4.7% 2.1% 1.7% 1.6% 1.6% 1.3% 1.3% 1.2%
IP address Information
# of IPv4 addresses: 1432562
Top 10 bandwidth usage (bytes/total in %):
14.0% 12.2% 8.3% 7.5% 6.3% 6.3% 4.7% 4.7% 4.1% 4.0%
# of IPv6 addresses: 7247
Top 10 bandwidth usage (bytes/total in %):
31.7% 22.5% 20.2% 11.2% 11.0% 8.2% 8.2% 6.3% 5.7% 5.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301600.pktlen.png)
detailed numbers
[ 32- 63]: 7403941
[ 64- 127]: 7715906
[ 128- 255]: 1078760
[ 256- 511]: 1244599
[ 512- 1023]: 911108
[ 1024- 2047]: 17491732
Protocol Breakdown
![[protocol breakdown chart]](201203301600.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35846046 (100.00%) 28138354286 (100.00%) 784.98
ip 35586824 ( 99.28%) 27981856733 ( 99.44%) 786.30
tcp 29117085 ( 81.23%) 25356399722 ( 90.11%) 870.84
http(s) 12358583 ( 34.48%) 17083910544 ( 60.71%) 1382.35
http(c) 8890395 ( 24.80%) 1944480753 ( 6.91%) 218.72
squid 35518 ( 0.10%) 24647997 ( 0.09%) 693.96
smtp 65886 ( 0.18%) 29756003 ( 0.11%) 451.63
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 10516 ( 0.03%) 1155896 ( 0.00%) 109.92
pop3 4039 ( 0.01%) 1655601 ( 0.01%) 409.90
imap 2180 ( 0.01%) 433256 ( 0.00%) 198.74
telnet 939 ( 0.00%) 67970 ( 0.00%) 72.39
ssh 978589 ( 2.73%) 1334735349 ( 4.74%) 1363.94
dns 2043 ( 0.01%) 152258 ( 0.00%) 74.53
bgp 641 ( 0.00%) 131222 ( 0.00%) 204.71
napster 66 ( 0.00%) 4893 ( 0.00%) 74.14
realaud 30 ( 0.00%) 1894 ( 0.00%) 63.13
rtsp 10047 ( 0.03%) 11682199 ( 0.04%) 1162.75
icecast 26793 ( 0.07%) 15973847 ( 0.06%) 596.19
hotline 70 ( 0.00%) 12075 ( 0.00%) 172.50
other 6730743 ( 18.78%) 4907597531 ( 17.44%) 729.13
udp 3262092 ( 9.10%) 1303989046 ( 4.63%) 399.74
dns 584315 ( 1.63%) 150489675 ( 0.53%) 257.55
realaud 7 ( 0.00%) 525 ( 0.00%) 75.00
halflif 2076 ( 0.01%) 494095 ( 0.00%) 238.00
starcra 19 ( 0.00%) 2620 ( 0.00%) 137.89
everque 399 ( 0.00%) 69564 ( 0.00%) 174.35
unreal 70 ( 0.00%) 17828 ( 0.00%) 254.69
quake 14 ( 0.00%) 2023 ( 0.00%) 144.50
cuseeme 1 ( 0.00%) 72 ( 0.00%) 72.00
other 2675075 ( 7.46%) 1152881432 ( 4.10%) 430.97
icmp 1659310 ( 4.63%) 129250315 ( 0.46%) 77.89
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 6385 ( 0.02%) 1405526 ( 0.00%) 220.13
ip6 1521563 ( 4.24%) 1183958649 ( 4.21%) 778.12
pim 264 ( 0.00%) 15840 ( 0.00%) 60.00
other 19940 ( 0.06%) 6818365 ( 0.02%) 341.94
frag 715 ( 0.00%) 594743 ( 0.00%) 831.81
ip6 259222 ( 0.72%) 156497553 ( 0.56%) 603.72
tcp6 147405 ( 0.41%) 116574995 ( 0.41%) 790.85
http(s) 27208 ( 0.08%) 35700311 ( 0.13%) 1312.13
http(c) 43733 ( 0.12%) 3689963 ( 0.01%) 84.37
smtp 1031 ( 0.00%) 486954 ( 0.00%) 472.31
ftp 23 ( 0.00%) 2148 ( 0.00%) 93.39
dns 325 ( 0.00%) 68723 ( 0.00%) 211.46
bgp 94 ( 0.00%) 15976 ( 0.00%) 169.96
other 74991 ( 0.21%) 76610920 ( 0.27%) 1021.60
udp6 83020 ( 0.23%) 35627397 ( 0.13%) 429.14
dns 64138 ( 0.18%) 17567745 ( 0.06%) 273.91
realaud 1 ( 0.00%) 116 ( 0.00%) 116.00
everque 3 ( 0.00%) 330 ( 0.00%) 110.00
quake 3 ( 0.00%) 322 ( 0.00%) 107.33
other 18875 ( 0.05%) 18058884 ( 0.06%) 956.76
icmp6 28023 ( 0.08%) 3635282 ( 0.01%) 129.72
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 660 ( 0.00%) 644387 ( 0.00%) 976.34
tcpdump file: 201203301600.dump.gz (832.29 MB)