Traffic Trace Info
DumpFile: 201203301700.dump
FileSize: 3230.32MB
Id: 201203301700
StartTime: Fri Mar 30 17:00:00 2012
EndTime: Fri Mar 30 17:15:00 2012
TotalTime: 899.87 seconds
TotalCapSize: -1555.95MB CapLen: 96 bytes
# of packets: 45236814 (33933.67MB)
AvgRate: 316.27Mbps stddev:41.15M
IP flow (unique src/dst pair) Information
# of flows: 2152267 (avg. 21.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.0% 4.8% 2.9% 2.4% 2.4% 1.6% 1.6% 1.5% 1.4% 1.4%
IP address Information
# of IPv4 addresses: 1433972
Top 10 bandwidth usage (bytes/total in %):
17.5% 13.4% 9.7% 7.2% 6.3% 5.3% 4.9% 3.6% 3.2% 3.0%
# of IPv6 addresses: 7625
Top 10 bandwidth usage (bytes/total in %):
83.1% 80.4% 5.9% 5.9% 3.0% 1.8% 1.7% 1.6% 1.4% 0.9%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301700.pktlen.png)
detailed numbers
[ 32- 63]: 10669297
[ 64- 127]: 9179317
[ 128- 255]: 1019237
[ 256- 511]: 958606
[ 512- 1023]: 888353
[ 1024- 2047]: 22522004
Protocol Breakdown
![[protocol breakdown chart]](201203301700.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 45236814 (100.00%) 35582034396 (100.00%) 786.57
ip 44739680 ( 98.90%) 35035251705 ( 98.46%) 783.09
tcp 38152655 ( 84.34%) 32574886926 ( 91.55%) 853.80
http(s) 17279721 ( 38.20%) 23695142416 ( 66.59%) 1371.27
http(c) 11098164 ( 24.53%) 1434577364 ( 4.03%) 129.26
squid 68461 ( 0.15%) 46927287 ( 0.13%) 685.46
smtp 136325 ( 0.30%) 85718491 ( 0.24%) 628.78
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 6993 ( 0.02%) 720577 ( 0.00%) 103.04
pop3 3224 ( 0.01%) 1301461 ( 0.00%) 403.68
imap 13033 ( 0.03%) 7245887 ( 0.02%) 555.96
telnet 70232 ( 0.16%) 5188626 ( 0.01%) 73.88
ssh 172562 ( 0.38%) 89905332 ( 0.25%) 521.00
dns 2058 ( 0.00%) 149260 ( 0.00%) 72.53
bgp 652 ( 0.00%) 131867 ( 0.00%) 202.25
napster 215 ( 0.00%) 15820 ( 0.00%) 73.58
realaud 61 ( 0.00%) 7711 ( 0.00%) 126.41
rtsp 10042 ( 0.02%) 11670801 ( 0.03%) 1162.20
icecast 23494 ( 0.05%) 15751301 ( 0.04%) 670.44
hotline 136 ( 0.00%) 9087 ( 0.00%) 66.82
other 9267275 ( 20.49%) 7180423204 ( 20.18%) 774.81
udp 3215382 ( 7.11%) 1229017671 ( 3.45%) 382.23
dns 541569 ( 1.20%) 135028964 ( 0.38%) 249.33
rip 1 ( 0.00%) 90 ( 0.00%) 90.00
realaud 7 ( 0.00%) 667 ( 0.00%) 95.29
halflif 18 ( 0.00%) 2409 ( 0.00%) 133.83
starcra 24 ( 0.00%) 3236 ( 0.00%) 134.83
everque 2036 ( 0.00%) 1660971 ( 0.00%) 815.80
unreal 176 ( 0.00%) 93593 ( 0.00%) 531.78
quake 14 ( 0.00%) 1455 ( 0.00%) 103.93
cuseeme 5 ( 0.00%) 320 ( 0.00%) 64.00
other 2671289 ( 5.91%) 1092158907 ( 3.07%) 408.85
icmp 1665597 ( 3.68%) 130300423 ( 0.37%) 78.23
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 5735 ( 0.01%) 1481194 ( 0.00%) 258.27
ip6 1673478 ( 3.70%) 1092247750 ( 3.07%) 652.68
pim 202 ( 0.00%) 12120 ( 0.00%) 60.00
other 26446 ( 0.06%) 7286351 ( 0.02%) 275.52
frag 888 ( 0.00%) 804776 ( 0.00%) 906.28
ip6 497134 ( 1.10%) 546782691 ( 1.54%) 1099.87
tcp6 400642 ( 0.89%) 524280681 ( 1.47%) 1308.60
http(s) 48501 ( 0.11%) 67276108 ( 0.19%) 1387.11
http(c) 37002 ( 0.08%) 3259518 ( 0.01%) 88.09
smtp 605 ( 0.00%) 178745 ( 0.00%) 295.45
ftp 68 ( 0.00%) 7199 ( 0.00%) 105.87
ssh 315 ( 0.00%) 45066 ( 0.00%) 143.07
dns 314 ( 0.00%) 71959 ( 0.00%) 229.17
bgp 84 ( 0.00%) 14880 ( 0.00%) 177.14
other 313753 ( 0.69%) 453427206 ( 1.27%) 1445.17
udp6 68164 ( 0.15%) 18276707 ( 0.05%) 268.13
dns 63934 ( 0.14%) 17741041 ( 0.05%) 277.49
realaud 2 ( 0.00%) 206 ( 0.00%) 103.00
starcra 2 ( 0.00%) 204 ( 0.00%) 102.00
quake 1 ( 0.00%) 111 ( 0.00%) 111.00
other 4225 ( 0.01%) 535145 ( 0.00%) 126.66
icmp6 27616 ( 0.06%) 3638689 ( 0.01%) 131.76
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 598 ( 0.00%) 571054 ( 0.00%) 954.94
tcpdump file: 201203301700.dump.gz (1021.90 MB)