Traffic Trace Info
DumpFile: 201203301730.dump
FileSize: 2947.27MB
Id: 201203301730
StartTime: Fri Mar 30 17:30:01 2012
EndTime: Fri Mar 30 17:45:01 2012
TotalTime: 899.89 seconds
TotalCapSize: -1770.60MB CapLen: 96 bytes
# of packets: 40754218 (32397.58MB)
AvgRate: 301.99Mbps stddev:50.97M
IP flow (unique src/dst pair) Information
# of flows: 1760647 (avg. 23.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.1% 3.5% 2.4% 2.1% 2.1% 2.0% 2.0% 2.0% 2.0% 1.5%
IP address Information
# of IPv4 addresses: 1365501
Top 10 bandwidth usage (bytes/total in %):
17.8% 11.1% 9.3% 6.5% 5.5% 4.2% 4.2% 4.0% 3.9% 3.5%
# of IPv6 addresses: 7438
Top 10 bandwidth usage (bytes/total in %):
91.0% 84.5% 5.1% 1.6% 1.6% 1.1% 1.0% 0.8% 0.6% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301730.pktlen.png)
detailed numbers
[ 32- 63]: 7639383
[ 64- 127]: 8519189
[ 128- 255]: 1067320
[ 256- 511]: 1015141
[ 512- 1023]: 1057716
[ 1024- 2047]: 21455469
Protocol Breakdown
![[protocol breakdown chart]](201203301730.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40754218 (100.00%) 33971327934 (100.00%) 833.57
ip 40265481 ( 98.80%) 33442653855 ( 98.44%) 830.55
tcp 33125822 ( 81.28%) 30490720846 ( 89.75%) 920.45
http(s) 16169850 ( 39.68%) 22457788082 ( 66.11%) 1388.87
http(c) 8458235 ( 20.75%) 1400101736 ( 4.12%) 165.53
squid 54265 ( 0.13%) 32848154 ( 0.10%) 605.33
smtp 64173 ( 0.16%) 30050287 ( 0.09%) 468.27
nntp 7 ( 0.00%) 434 ( 0.00%) 62.00
ftp 8075 ( 0.02%) 801618 ( 0.00%) 99.27
pop3 2522 ( 0.01%) 961139 ( 0.00%) 381.10
imap 2331 ( 0.01%) 1158901 ( 0.00%) 497.17
telnet 1663 ( 0.00%) 119396 ( 0.00%) 71.80
ssh 482000 ( 1.18%) 690753430 ( 2.03%) 1433.10
dns 16411 ( 0.04%) 14102641 ( 0.04%) 859.34
bgp 665 ( 0.00%) 146061 ( 0.00%) 219.64
napster 75 ( 0.00%) 10622 ( 0.00%) 141.63
realaud 47 ( 0.00%) 6008 ( 0.00%) 127.83
rtsp 10051 ( 0.02%) 11681202 ( 0.03%) 1162.19
icecast 23376 ( 0.06%) 15749723 ( 0.05%) 673.76
hotline 12 ( 0.00%) 740 ( 0.00%) 61.67
other 7832057 ( 19.22%) 5834440244 ( 17.17%) 744.94
udp 3394905 ( 8.33%) 1360273925 ( 4.00%) 400.68
dns 500571 ( 1.23%) 126353136 ( 0.37%) 252.42
rip 1 ( 0.00%) 69 ( 0.00%) 69.00
realaud 4 ( 0.00%) 660 ( 0.00%) 165.00
halflif 52 ( 0.00%) 5019 ( 0.00%) 96.52
starcra 14 ( 0.00%) 1599 ( 0.00%) 114.21
everque 646 ( 0.00%) 318522 ( 0.00%) 493.07
unreal 155 ( 0.00%) 38932 ( 0.00%) 251.17
quake 11 ( 0.00%) 1382 ( 0.00%) 125.64
cuseeme 9 ( 0.00%) 953 ( 0.00%) 105.89
other 2892871 ( 7.10%) 1233492268 ( 3.63%) 426.39
icmp 2013303 ( 4.94%) 157461525 ( 0.46%) 78.21
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1914 ( 0.00%) 623964 ( 0.00%) 326.00
ip6 1705267 ( 4.18%) 1428140804 ( 4.20%) 837.49
pim 249 ( 0.00%) 14940 ( 0.00%) 60.00
other 23836 ( 0.06%) 5398581 ( 0.02%) 226.49
frag 1947 ( 0.00%) 1555515 ( 0.00%) 798.93
ip6 488737 ( 1.20%) 528674079 ( 1.56%) 1081.71
tcp6 393540 ( 0.97%) 507579429 ( 1.49%) 1289.78
http(s) 33449 ( 0.08%) 45874919 ( 0.14%) 1371.49
http(c) 48732 ( 0.12%) 4423306 ( 0.01%) 90.77
smtp 739 ( 0.00%) 524718 ( 0.00%) 710.04
ftp 18 ( 0.00%) 1509 ( 0.00%) 83.83
dns 327 ( 0.00%) 71861 ( 0.00%) 219.76
bgp 92 ( 0.00%) 15319 ( 0.00%) 166.51
other 310183 ( 0.76%) 456667797 ( 1.34%) 1472.25
udp6 64721 ( 0.16%) 16382155 ( 0.05%) 253.12
dns 59914 ( 0.15%) 15736723 ( 0.05%) 262.66
realaud 1 ( 0.00%) 107 ( 0.00%) 107.00
halflif 1 ( 0.00%) 110 ( 0.00%) 110.00
everque 1 ( 0.00%) 118 ( 0.00%) 118.00
unreal 2 ( 0.00%) 201 ( 0.00%) 100.50
quake 1 ( 0.00%) 118 ( 0.00%) 118.00
other 4801 ( 0.01%) 644778 ( 0.00%) 134.30
icmp6 29567 ( 0.07%) 3909376 ( 0.01%) 132.22
ip6 83 ( 0.00%) 11294 ( 0.00%) 136.07
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 796 ( 0.00%) 787745 ( 0.00%) 989.63
tcpdump file: 201203301730.dump.gz (923.40 MB)