Traffic Trace Info
DumpFile: 201203301715.dump
FileSize: 2943.88MB
Id: 201203301715
StartTime: Fri Mar 30 17:15:00 2012
EndTime: Fri Mar 30 17:30:01 2012
TotalTime: 900.86 seconds
TotalCapSize: -1775.53MB CapLen: 96 bytes
# of packets: 40855589 (31036.05MB)
AvgRate: 288.97Mbps stddev:50.86M
IP flow (unique src/dst pair) Information
# of flows: 1921129 (avg. 21.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.2% 4.1% 2.1% 1.5% 1.4% 1.4% 1.3% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 1408959
Top 10 bandwidth usage (bytes/total in %):
15.7% 11.4% 9.4% 5.8% 5.3% 5.2% 4.2% 4.2% 4.2% 3.0%
# of IPv6 addresses: 7318
Top 10 bandwidth usage (bytes/total in %):
92.5% 89.6% 1.3% 1.3% 1.0% 0.9% 0.5% 0.5% 0.5% 0.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301715.pktlen.png)
detailed numbers
[ 32- 63]: 8058103
[ 64- 127]: 9387087
[ 128- 255]: 1065506
[ 256- 511]: 1014562
[ 512- 1023]: 1014218
[ 1024- 2047]: 20316113
Protocol Breakdown
![[protocol breakdown chart]](201203301715.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40855589 (100.00%) 32543660395 (100.00%) 796.55
ip 40416037 ( 98.92%) 32053960766 ( 98.50%) 793.10
tcp 33738981 ( 82.58%) 29698174090 ( 91.26%) 880.23
http(s) 14285240 ( 34.97%) 19708267932 ( 60.56%) 1379.62
http(c) 9197941 ( 22.51%) 1368659756 ( 4.21%) 148.80
squid 83607 ( 0.20%) 53549878 ( 0.16%) 640.50
smtp 73572 ( 0.18%) 36452926 ( 0.11%) 495.47
ftp 6294 ( 0.02%) 605968 ( 0.00%) 96.28
pop3 4139 ( 0.01%) 2438785 ( 0.01%) 589.22
imap 4375 ( 0.01%) 2789125 ( 0.01%) 637.51
telnet 6705 ( 0.02%) 478610 ( 0.00%) 71.38
ssh 971436 ( 2.38%) 1345078854 ( 4.13%) 1384.63
dns 2005 ( 0.00%) 149073 ( 0.00%) 74.35
bgp 694 ( 0.00%) 174423 ( 0.00%) 251.33
napster 478 ( 0.00%) 172315 ( 0.00%) 360.49
realaud 71 ( 0.00%) 7540 ( 0.00%) 106.20
rtsp 10070 ( 0.02%) 11705835 ( 0.04%) 1162.45
icecast 23896 ( 0.06%) 15817283 ( 0.05%) 661.92
hotline 27 ( 0.00%) 1688 ( 0.00%) 62.52
other 9068427 ( 22.20%) 7151823859 ( 21.98%) 788.65
udp 3364071 ( 8.23%) 1171757453 ( 3.60%) 348.32
dns 492614 ( 1.21%) 123942945 ( 0.38%) 251.60
rip 5 ( 0.00%) 330 ( 0.00%) 66.00
realaud 5 ( 0.00%) 446 ( 0.00%) 89.20
halflif 17 ( 0.00%) 2123 ( 0.00%) 124.88
starcra 36 ( 0.00%) 5116 ( 0.00%) 142.11
everque 878 ( 0.00%) 504836 ( 0.00%) 574.98
unreal 109 ( 0.00%) 50473 ( 0.00%) 463.06
quake 9 ( 0.00%) 836 ( 0.00%) 92.89
cuseeme 2 ( 0.00%) 144 ( 0.00%) 72.00
other 2870166 ( 7.03%) 1047205137 ( 3.22%) 364.86
icmp 1828337 ( 4.48%) 143954907 ( 0.44%) 78.74
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 10060 ( 0.02%) 1823792 ( 0.01%) 181.29
ip6 1440634 ( 3.53%) 1023528627 ( 3.15%) 710.47
pim 243 ( 0.00%) 14580 ( 0.00%) 60.00
other 33526 ( 0.08%) 14688047 ( 0.05%) 438.11
frag 972 ( 0.00%) 785025 ( 0.00%) 807.64
ip6 439552 ( 1.08%) 489699629 ( 1.50%) 1114.09
tcp6 345941 ( 0.85%) 468523990 ( 1.44%) 1354.35
http(s) 13793 ( 0.03%) 16666986 ( 0.05%) 1208.37
http(c) 18397 ( 0.05%) 1612078 ( 0.00%) 87.63
squid 417 ( 0.00%) 398189 ( 0.00%) 954.89
smtp 6528 ( 0.02%) 777719 ( 0.00%) 119.14
dns 122 ( 0.00%) 21639 ( 0.00%) 177.37
bgp 90 ( 0.00%) 13757 ( 0.00%) 152.86
other 306594 ( 0.75%) 449033622 ( 1.38%) 1464.59
udp6 66055 ( 0.16%) 17054339 ( 0.05%) 258.18
dns 61512 ( 0.15%) 16434844 ( 0.05%) 267.18
realaud 1 ( 0.00%) 110 ( 0.00%) 110.00
everque 2 ( 0.00%) 223 ( 0.00%) 111.50
quake 2 ( 0.00%) 226 ( 0.00%) 113.00
other 4538 ( 0.01%) 618936 ( 0.00%) 136.39
icmp6 26920 ( 0.07%) 3582717 ( 0.01%) 133.09
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 523 ( 0.00%) 523209 ( 0.00%) 1000.40
tcpdump file: 201203301715.dump.gz (940.55 MB)