Traffic Trace Info
DumpFile: 201203301630.dump
FileSize: 2529.70MB
Id: 201203301630
StartTime: Fri Mar 30 16:30:01 2012
EndTime: Fri Mar 30 16:45:00 2012
TotalTime: 899.63 seconds
TotalCapSize: 1997.38MB CapLen: 96 bytes
# of packets: 34885800 (26129.70MB)
AvgRate: 243.69Mbps stddev:41.14M
IP flow (unique src/dst pair) Information
# of flows: 1755349 (avg. 19.87 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.2% 6.9% 2.4% 2.2% 1.9% 1.7% 1.6% 1.1% 1.0% 0.9%
IP address Information
# of IPv4 addresses: 1354991
Top 10 bandwidth usage (bytes/total in %):
14.8% 11.1% 8.6% 8.5% 7.6% 7.0% 5.9% 4.3% 3.3% 2.5%
# of IPv6 addresses: 7462
Top 10 bandwidth usage (bytes/total in %):
88.7% 86.1% 4.1% 1.4% 1.3% 1.2% 0.9% 0.5% 0.5% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301630.pktlen.png)
detailed numbers
[ 32- 63]: 6177028
[ 64- 127]: 8588127
[ 128- 255]: 1257653
[ 256- 511]: 926599
[ 512- 1023]: 840485
[ 1024- 2047]: 17095908
Protocol Breakdown
![[protocol breakdown chart]](201203301630.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34885800 (100.00%) 27398981163 (100.00%) 785.39
ip 34405037 ( 98.62%) 26896778867 ( 98.17%) 781.77
tcp 27686997 ( 79.36%) 24222880526 ( 88.41%) 874.88
http(s) 13159334 ( 37.72%) 18093820072 ( 66.04%) 1374.98
http(c) 7743165 ( 22.20%) 1154262020 ( 4.21%) 149.07
squid 50236 ( 0.14%) 33079970 ( 0.12%) 658.49
smtp 72516 ( 0.21%) 37311793 ( 0.14%) 514.53
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 11966 ( 0.03%) 1056466 ( 0.00%) 88.29
pop3 3943 ( 0.01%) 1776648 ( 0.01%) 450.58
imap 2304 ( 0.01%) 660497 ( 0.00%) 286.67
telnet 16625 ( 0.05%) 1226560 ( 0.00%) 73.78
ssh 26483 ( 0.08%) 3853036 ( 0.01%) 145.49
dns 2047 ( 0.01%) 162022 ( 0.00%) 79.15
bgp 704 ( 0.00%) 165800 ( 0.00%) 235.51
napster 72 ( 0.00%) 4670 ( 0.00%) 64.86
realaud 102 ( 0.00%) 6408 ( 0.00%) 62.82
rtsp 10010 ( 0.03%) 11624500 ( 0.04%) 1161.29
icecast 23210 ( 0.07%) 15734603 ( 0.06%) 677.92
hotline 27 ( 0.00%) 2328 ( 0.00%) 86.22
other 6564240 ( 18.82%) 4868132325 ( 17.77%) 741.61
udp 3676963 ( 10.54%) 1605025376 ( 5.86%) 436.51
dns 543547 ( 1.56%) 135665659 ( 0.50%) 249.59
realaud 8 ( 0.00%) 907 ( 0.00%) 113.38
halflif 36 ( 0.00%) 6456 ( 0.00%) 179.33
starcra 38 ( 0.00%) 4705 ( 0.00%) 123.82
everque 22080 ( 0.06%) 22181117 ( 0.08%) 1004.58
unreal 111 ( 0.00%) 43562 ( 0.00%) 392.45
quake 16 ( 0.00%) 1560 ( 0.00%) 97.50
cuseeme 3 ( 0.00%) 270 ( 0.00%) 90.00
other 3109511 ( 8.91%) 1446963945 ( 5.28%) 465.33
icmp 1610956 ( 4.62%) 125856689 ( 0.46%) 78.13
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 3723 ( 0.01%) 1369842 ( 0.00%) 367.94
ip6 1388048 ( 3.98%) 921296215 ( 3.36%) 663.74
pim 266 ( 0.00%) 15960 ( 0.00%) 60.00
other 37900 ( 0.11%) 20315099 ( 0.07%) 536.02
frag 3625 ( 0.01%) 2859236 ( 0.01%) 788.75
ip6 480763 ( 1.38%) 502202296 ( 1.83%) 1044.59
tcp6 380779 ( 1.09%) 479210204 ( 1.75%) 1258.50
http(s) 14079 ( 0.04%) 17056127 ( 0.06%) 1211.46
http(c) 41704 ( 0.12%) 3545769 ( 0.01%) 85.02
squid 1073 ( 0.00%) 792540 ( 0.00%) 738.62
smtp 2131 ( 0.01%) 908854 ( 0.00%) 426.49
dns 279 ( 0.00%) 55346 ( 0.00%) 198.37
bgp 93 ( 0.00%) 19495 ( 0.00%) 209.62
other 321420 ( 0.92%) 456832073 ( 1.67%) 1421.29
udp6 71704 ( 0.21%) 18650720 ( 0.07%) 260.11
dns 64378 ( 0.18%) 17396210 ( 0.06%) 270.22
halflif 2 ( 0.00%) 191 ( 0.00%) 95.50
everque 1 ( 0.00%) 111 ( 0.00%) 111.00
quake 1 ( 0.00%) 108 ( 0.00%) 108.00
cuseeme 1 ( 0.00%) 113 ( 0.00%) 113.00
other 7321 ( 0.02%) 1253987 ( 0.00%) 171.29
icmp6 27553 ( 0.08%) 3744297 ( 0.01%) 135.89
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 614 ( 0.00%) 581683 ( 0.00%) 947.37
tcpdump file: 201203301630.dump.gz (815.71 MB)