Traffic Trace Info
DumpFile: 201203301645.dump
FileSize: 2920.52MB
Id: 201203301645
StartTime: Fri Mar 30 16:45:00 2012
EndTime: Fri Mar 30 17:00:00 2012
TotalTime: 899.73 seconds
TotalCapSize: -1794.35MB CapLen: 96 bytes
# of packets: 40557758 (30387.56MB)
AvgRate: 283.27Mbps stddev:46.51M
IP flow (unique src/dst pair) Information
# of flows: 1950720 (avg. 20.79 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.9% 5.5% 3.4% 2.2% 2.0% 1.6% 1.4% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 1471516
Top 10 bandwidth usage (bytes/total in %):
11.2% 8.8% 8.7% 6.3% 6.1% 5.9% 5.6% 4.5% 3.9% 3.7%
# of IPv6 addresses: 7402
Top 10 bandwidth usage (bytes/total in %):
86.6% 85.1% 3.5% 3.5% 2.6% 1.1% 0.8% 0.8% 0.7% 0.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301645.pktlen.png)
detailed numbers
[ 32- 63]: 8157228
[ 64- 127]: 9304984
[ 128- 255]: 1129866
[ 256- 511]: 1010161
[ 512- 1023]: 936293
[ 1024- 2047]: 20019226
Protocol Breakdown
![[protocol breakdown chart]](201203301645.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40557758 (100.00%) 31863668294 (100.00%) 785.64
ip 40080897 ( 98.82%) 31339831132 ( 98.36%) 781.91
tcp 32892165 ( 81.10%) 28271379955 ( 88.73%) 859.52
http(s) 14883661 ( 36.70%) 20494745242 ( 64.32%) 1377.00
http(c) 9513894 ( 23.46%) 1320343998 ( 4.14%) 138.78
squid 50847 ( 0.13%) 32537451 ( 0.10%) 639.91
smtp 55134 ( 0.14%) 20095972 ( 0.06%) 364.49
ftp 8773 ( 0.02%) 1154396 ( 0.00%) 131.59
pop3 4182 ( 0.01%) 1571937 ( 0.00%) 375.88
imap 2302 ( 0.01%) 413510 ( 0.00%) 179.63
telnet 21765 ( 0.05%) 1596669 ( 0.01%) 73.36
ssh 138336 ( 0.34%) 20945702 ( 0.07%) 151.41
dns 2245 ( 0.01%) 177652 ( 0.00%) 79.13
bgp 643 ( 0.00%) 128415 ( 0.00%) 199.71
napster 93 ( 0.00%) 7128 ( 0.00%) 76.65
realaud 25 ( 0.00%) 1981 ( 0.00%) 79.24
rtsp 10070 ( 0.02%) 11707343 ( 0.04%) 1162.60
icecast 23282 ( 0.06%) 15757404 ( 0.05%) 676.81
hotline 21 ( 0.00%) 1314 ( 0.00%) 62.57
other 8176887 ( 20.16%) 6350193248 ( 19.93%) 776.60
udp 3540200 ( 8.73%) 1451690269 ( 4.56%) 410.06
dns 521634 ( 1.29%) 132930178 ( 0.42%) 254.83
rip 9 ( 0.00%) 675 ( 0.00%) 75.00
realaud 11 ( 0.00%) 1255 ( 0.00%) 114.09
halflif 41 ( 0.00%) 5339 ( 0.00%) 130.22
starcra 14 ( 0.00%) 1861 ( 0.00%) 132.93
everque 3017 ( 0.01%) 2397550 ( 0.01%) 794.68
unreal 149 ( 0.00%) 61518 ( 0.00%) 412.87
quake 15 ( 0.00%) 1661 ( 0.00%) 110.73
cuseeme 2 ( 0.00%) 187 ( 0.00%) 93.50
other 3015166 ( 7.43%) 1316220898 ( 4.13%) 436.53
icmp 1616418 ( 3.99%) 127400723 ( 0.40%) 78.82
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 4294 ( 0.01%) 1985364 ( 0.01%) 462.36
ip6 1594620 ( 3.93%) 1080225286 ( 3.39%) 677.42
pim 224 ( 0.00%) 13440 ( 0.00%) 60.00
other 432792 ( 1.07%) 407116935 ( 1.28%) 940.68
frag 706 ( 0.00%) 671281 ( 0.00%) 950.82
ip6 476861 ( 1.18%) 523837162 ( 1.64%) 1098.51
tcp6 367622 ( 0.91%) 483698203 ( 1.52%) 1315.75
http(s) 9378 ( 0.02%) 10907546 ( 0.03%) 1163.10
http(c) 28527 ( 0.07%) 2461116 ( 0.01%) 86.27
smtp 997 ( 0.00%) 407849 ( 0.00%) 409.08
ftp 208 ( 0.00%) 19745 ( 0.00%) 94.93
dns 265 ( 0.00%) 45711 ( 0.00%) 172.49
bgp 87 ( 0.00%) 14153 ( 0.00%) 162.68
other 328160 ( 0.81%) 469842083 ( 1.47%) 1431.75
udp6 80527 ( 0.20%) 35492487 ( 0.11%) 440.75
dns 61298 ( 0.15%) 16730910 ( 0.05%) 272.94
starcra 1 ( 0.00%) 113 ( 0.00%) 113.00
unreal 1 ( 0.00%) 105 ( 0.00%) 105.00
quake 2 ( 0.00%) 197 ( 0.00%) 98.50
other 19225 ( 0.05%) 18761162 ( 0.06%) 975.87
icmp6 27680 ( 0.07%) 3725421 ( 0.01%) 134.59
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 918 ( 0.00%) 905559 ( 0.00%) 986.45
tcpdump file: 201203301645.dump.gz (925.63 MB)