Traffic Trace Info
DumpFile: 201203301800.dump
FileSize: 2761.22MB
Id: 201203301800
StartTime: Fri Mar 30 18:00:01 2012
EndTime: Fri Mar 30 18:15:00 2012
TotalTime: 899.67 seconds
TotalCapSize: -1917.72MB CapLen: 96 bytes
# of packets: 38203157 (30181.95MB)
AvgRate: 281.41Mbps stddev:56.36M
IP flow (unique src/dst pair) Information
# of flows: 1943429 (avg. 19.66 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.9% 7.4% 6.4% 3.9% 2.3% 2.0% 1.8% 1.5% 1.5% 1.4%
IP address Information
# of IPv4 addresses: 1484544
Top 10 bandwidth usage (bytes/total in %):
18.1% 11.5% 9.2% 8.6% 7.6% 7.6% 6.6% 4.9% 4.0% 4.0%
# of IPv6 addresses: 6562
Top 10 bandwidth usage (bytes/total in %):
93.6% 91.0% 1.9% 0.9% 0.4% 0.4% 0.4% 0.4% 0.4% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301800.pktlen.png)
detailed numbers
[ 32- 63]: 7076537
[ 64- 127]: 8183835
[ 128- 255]: 1141025
[ 256- 511]: 924081
[ 512- 1023]: 1003889
[ 1024- 2047]: 19873790
Protocol Breakdown
![[protocol breakdown chart]](201203301800.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 38203157 (100.00%) 31648066699 (100.00%) 828.41
ip 37787209 ( 98.91%) 31168590462 ( 98.48%) 824.85
tcp 30778090 ( 80.56%) 28454327934 ( 89.91%) 924.50
http(s) 16709768 ( 43.74%) 23089591734 ( 72.96%) 1381.80
http(c) 7407537 ( 19.39%) 1108066584 ( 3.50%) 149.59
squid 58980 ( 0.15%) 37275190 ( 0.12%) 632.00
smtp 55630 ( 0.15%) 18392628 ( 0.06%) 330.62
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 8142 ( 0.02%) 810046 ( 0.00%) 99.49
pop3 2983 ( 0.01%) 1251552 ( 0.00%) 419.56
imap 8958 ( 0.02%) 10635780 ( 0.03%) 1187.29
telnet 701 ( 0.00%) 50420 ( 0.00%) 71.93
ssh 45467 ( 0.12%) 4897821 ( 0.02%) 107.72
dns 2079 ( 0.01%) 146607 ( 0.00%) 70.52
bgp 720 ( 0.00%) 188416 ( 0.00%) 261.69
napster 85 ( 0.00%) 6642 ( 0.00%) 78.14
realaud 42 ( 0.00%) 4211 ( 0.00%) 100.26
rtsp 36 ( 0.00%) 6510 ( 0.00%) 180.83
icecast 23428 ( 0.06%) 15748372 ( 0.05%) 672.20
hotline 33 ( 0.00%) 2523 ( 0.00%) 76.45
other 6453495 ( 16.89%) 4167252524 ( 13.17%) 645.74
udp 3118174 ( 8.16%) 1124427046 ( 3.55%) 360.60
dns 512422 ( 1.34%) 126925945 ( 0.40%) 247.70
rip 1 ( 0.00%) 72 ( 0.00%) 72.00
realaud 10 ( 0.00%) 939 ( 0.00%) 93.90
halflif 19 ( 0.00%) 2673 ( 0.00%) 140.68
starcra 30 ( 0.00%) 5034 ( 0.00%) 167.80
everque 4969 ( 0.01%) 4707180 ( 0.01%) 947.31
unreal 122 ( 0.00%) 52738 ( 0.00%) 432.28
quake 23 ( 0.00%) 2079 ( 0.00%) 90.39
cuseeme 5 ( 0.00%) 320 ( 0.00%) 64.00
other 2600377 ( 6.81%) 992687272 ( 3.14%) 381.75
icmp 2038117 ( 5.33%) 159328329 ( 0.50%) 78.17
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 4595 ( 0.01%) 1347442 ( 0.00%) 293.24
ip6 1728728 ( 4.53%) 1274243470 ( 4.03%) 737.10
pim 308 ( 0.00%) 18480 ( 0.00%) 60.00
other 119012 ( 0.31%) 154878491 ( 0.49%) 1301.37
frag 1556 ( 0.00%) 1341994 ( 0.00%) 862.46
ip6 415948 ( 1.09%) 479476237 ( 1.52%) 1152.73
tcp6 326813 ( 0.86%) 459520515 ( 1.45%) 1406.07
http(s) 8845 ( 0.02%) 10174312 ( 0.03%) 1150.29
http(c) 14502 ( 0.04%) 1312812 ( 0.00%) 90.53
smtp 183 ( 0.00%) 106623 ( 0.00%) 582.64
ftp 64 ( 0.00%) 6606 ( 0.00%) 103.22
dns 352 ( 0.00%) 76326 ( 0.00%) 216.84
bgp 95 ( 0.00%) 15977 ( 0.00%) 168.18
other 302772 ( 0.79%) 447827859 ( 1.42%) 1479.09
udp6 62064 ( 0.16%) 15820205 ( 0.05%) 254.90
dns 57995 ( 0.15%) 15323512 ( 0.05%) 264.22
starcra 1 ( 0.00%) 110 ( 0.00%) 110.00
quake 1 ( 0.00%) 115 ( 0.00%) 115.00
cuseeme 1 ( 0.00%) 109 ( 0.00%) 109.00
other 4066 ( 0.01%) 496359 ( 0.00%) 122.08
icmp6 26359 ( 0.07%) 3552590 ( 0.01%) 134.78
ip6 87 ( 0.00%) 11816 ( 0.00%) 135.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 595 ( 0.00%) 567031 ( 0.00%) 952.99
tcpdump file: 201203301800.dump.gz (870.88 MB)