Traffic Trace Info
DumpFile: 201203301745.dump
FileSize: 2779.66MB
Id: 201203301745
StartTime: Fri Mar 30 17:45:01 2012
EndTime: Fri Mar 30 18:00:01 2012
TotalTime: 899.76 seconds
TotalCapSize: -1896.68MB CapLen: 96 bytes
# of packets: 38032582 (30022.85MB)
AvgRate: 279.97Mbps stddev:45.49M
IP flow (unique src/dst pair) Information
# of flows: 1985847 (avg. 19.15 pkts/flow)
Top 10 big flow size (bytes/total in %):
10.8% 8.0% 1.9% 1.8% 1.6% 1.6% 1.5% 1.4% 1.4% 1.3%
IP address Information
# of IPv4 addresses: 1510638
Top 10 bandwidth usage (bytes/total in %):
25.9% 13.2% 11.1% 8.2% 7.6% 4.5% 2.9% 2.8% 2.8% 2.2%
# of IPv6 addresses: 7077
Top 10 bandwidth usage (bytes/total in %):
91.9% 86.6% 3.7% 2.1% 2.1% 1.2% 0.8% 0.7% 0.7% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301745.pktlen.png)
detailed numbers
[ 32- 63]: 6573595
[ 64- 127]: 8503712
[ 128- 255]: 1111125
[ 256- 511]: 1040346
[ 512- 1023]: 1208439
[ 1024- 2047]: 19595365
Protocol Breakdown
![[protocol breakdown chart]](201203301745.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38032582 (100.00%) 31481237328 (100.00%) 827.74
ip 37559899 ( 98.76%) 30968283858 ( 98.37%) 824.50
tcp 30448998 ( 80.06%) 28100446304 ( 89.26%) 922.87
http(s) 16403883 ( 43.13%) 22835746262 ( 72.54%) 1392.09
http(c) 7652735 ( 20.12%) 1449540542 ( 4.60%) 189.41
squid 64189 ( 0.17%) 44288951 ( 0.14%) 689.98
smtp 57198 ( 0.15%) 27128113 ( 0.09%) 474.28
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 8814 ( 0.02%) 857494 ( 0.00%) 97.29
pop3 2532 ( 0.01%) 846499 ( 0.00%) 334.32
imap 1394 ( 0.00%) 234684 ( 0.00%) 168.35
telnet 1000 ( 0.00%) 70460 ( 0.00%) 70.46
ssh 76750 ( 0.20%) 8285797 ( 0.03%) 107.96
dns 1711 ( 0.00%) 135498 ( 0.00%) 79.19
bgp 655 ( 0.00%) 130018 ( 0.00%) 198.50
napster 195 ( 0.00%) 12496 ( 0.00%) 64.08
realaud 10 ( 0.00%) 696 ( 0.00%) 69.60
rtsp 8275 ( 0.02%) 9397088 ( 0.03%) 1135.60
icecast 23399 ( 0.06%) 15763237 ( 0.05%) 673.67
hotline 34 ( 0.00%) 2158 ( 0.00%) 63.47
other 6146217 ( 16.16%) 3708005877 ( 11.78%) 603.30
udp 3336025 ( 8.77%) 1267506444 ( 4.03%) 379.95
dns 470296 ( 1.24%) 120832987 ( 0.38%) 256.93
rip 1 ( 0.00%) 68 ( 0.00%) 68.00
realaud 5 ( 0.00%) 381 ( 0.00%) 76.20
halflif 91 ( 0.00%) 8313 ( 0.00%) 91.35
starcra 19 ( 0.00%) 3121 ( 0.00%) 164.26
everque 2910 ( 0.01%) 2696130 ( 0.01%) 926.51
unreal 150 ( 0.00%) 63966 ( 0.00%) 426.44
quake 19 ( 0.00%) 1969 ( 0.00%) 103.63
cuseeme 2 ( 0.00%) 152 ( 0.00%) 76.00
other 2862234 ( 7.53%) 1143854829 ( 3.63%) 399.64
icmp 2041139 ( 5.37%) 160396265 ( 0.51%) 78.58
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 3097 ( 0.01%) 1041478 ( 0.00%) 336.29
ip6 1698145 ( 4.46%) 1427034640 ( 4.53%) 840.35
pim 225 ( 0.00%) 13500 ( 0.00%) 60.00
other 32086 ( 0.08%) 11826067 ( 0.04%) 368.57
frag 1419 ( 0.00%) 1251496 ( 0.00%) 881.96
ip6 472683 ( 1.24%) 512953470 ( 1.63%) 1085.20
tcp6 376272 ( 0.99%) 492370203 ( 1.56%) 1308.55
http(s) 18512 ( 0.05%) 24278370 ( 0.08%) 1311.49
http(c) 36012 ( 0.09%) 3145154 ( 0.01%) 87.34
smtp 452 ( 0.00%) 295048 ( 0.00%) 652.76
dns 159 ( 0.00%) 21902 ( 0.00%) 137.75
bgp 96 ( 0.00%) 16458 ( 0.00%) 171.44
other 321041 ( 0.84%) 464613271 ( 1.48%) 1447.21
udp6 66819 ( 0.18%) 16260044 ( 0.05%) 243.34
dns 58517 ( 0.15%) 15303169 ( 0.05%) 261.52
realaud 2 ( 0.00%) 212 ( 0.00%) 106.00
starcra 1 ( 0.00%) 103 ( 0.00%) 103.00
everque 1 ( 0.00%) 111 ( 0.00%) 111.00
other 8298 ( 0.02%) 956449 ( 0.00%) 115.26
icmp6 28830 ( 0.08%) 3687603 ( 0.01%) 127.91
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 647 ( 0.00%) 619992 ( 0.00%) 958.26
tcpdump file: 201203301745.dump.gz (879.01 MB)