Traffic Trace Info
DumpFile: 201203301815.dump
FileSize: 2587.60MB
Id: 201203301815
StartTime: Fri Mar 30 18:15:00 2012
EndTime: Fri Mar 30 18:30:00 2012
TotalTime: 899.67 seconds
TotalCapSize: 2042.75MB CapLen: 96 bytes
# of packets: 35706431 (26435.27MB)
AvgRate: 246.49Mbps stddev:40.72M
IP flow (unique src/dst pair) Information
# of flows: 1922166 (avg. 18.58 pkts/flow)
Top 10 big flow size (bytes/total in %):
8.6% 6.9% 4.5% 3.2% 1.6% 1.3% 1.2% 1.1% 1.1% 1.1%
IP address Information
# of IPv4 addresses: 1442209
Top 10 bandwidth usage (bytes/total in %):
12.8% 11.4% 10.9% 8.9% 8.7% 7.2% 7.2% 4.7% 4.3% 3.7%
# of IPv6 addresses: 6324
Top 10 bandwidth usage (bytes/total in %):
53.5% 52.0% 42.6% 42.6% 0.8% 0.7% 0.5% 0.4% 0.3% 0.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301815.pktlen.png)
detailed numbers
[ 32- 63]: 7001297
[ 64- 127]: 8388342
[ 128- 255]: 1182733
[ 256- 511]: 888078
[ 512- 1023]: 866481
[ 1024- 2047]: 17379500
Protocol Breakdown
![[protocol breakdown chart]](201203301815.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 35706431 (100.00%) 27719390361 (100.00%) 776.31
ip 35033876 ( 98.12%) 26873068217 ( 96.95%) 767.06
tcp 28163194 ( 78.87%) 24462461247 ( 88.25%) 868.60
http(s) 11348302 ( 31.78%) 15302811130 ( 55.21%) 1348.47
http(c) 6496367 ( 18.19%) 1179982727 ( 4.26%) 181.64
squid 77846 ( 0.22%) 51451619 ( 0.19%) 660.94
smtp 53379 ( 0.15%) 22278283 ( 0.08%) 417.36
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 7488 ( 0.02%) 687972 ( 0.00%) 91.88
pop3 2644 ( 0.01%) 899921 ( 0.00%) 340.36
imap 2751 ( 0.01%) 1518896 ( 0.01%) 552.13
telnet 3280 ( 0.01%) 238590 ( 0.00%) 72.74
ssh 220426 ( 0.62%) 35586477 ( 0.13%) 161.44
dns 2312 ( 0.01%) 244298 ( 0.00%) 105.67
bgp 667 ( 0.00%) 148154 ( 0.00%) 222.12
napster 72 ( 0.00%) 6158 ( 0.00%) 85.53
realaud 13 ( 0.00%) 812 ( 0.00%) 62.46
rtsp 30 ( 0.00%) 6150 ( 0.00%) 205.00
icecast 23559 ( 0.07%) 15770910 ( 0.06%) 669.42
hotline 24 ( 0.00%) 1775 ( 0.00%) 73.96
other 9924021 ( 27.79%) 7850826567 ( 28.32%) 791.09
udp 3050381 ( 8.54%) 1006943715 ( 3.63%) 330.10
dns 481577 ( 1.35%) 120387314 ( 0.43%) 249.99
rip 1 ( 0.00%) 69 ( 0.00%) 69.00
realaud 6 ( 0.00%) 706 ( 0.00%) 117.67
halflif 23 ( 0.00%) 2212 ( 0.00%) 96.17
starcra 27 ( 0.00%) 3243 ( 0.00%) 120.11
everque 368 ( 0.00%) 123654 ( 0.00%) 336.02
unreal 200 ( 0.00%) 86827 ( 0.00%) 434.13
quake 42 ( 0.00%) 3141 ( 0.00%) 74.79
other 2563500 ( 7.18%) 886020771 ( 3.20%) 345.63
icmp 2062347 ( 5.78%) 162652411 ( 0.59%) 78.87
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 1854 ( 0.01%) 592996 ( 0.00%) 319.85
ip6 1735399 ( 4.86%) 1236397223 ( 4.46%) 712.46
pim 257 ( 0.00%) 15420 ( 0.00%) 60.00
other 20260 ( 0.06%) 3986045 ( 0.01%) 196.74
frag 10223 ( 0.03%) 7894749 ( 0.03%) 772.25
ip6 672555 ( 1.88%) 846322144 ( 3.05%) 1258.37
tcp6 587120 ( 1.64%) 826816322 ( 2.98%) 1408.26
http(s) 13357 ( 0.04%) 15799046 ( 0.06%) 1182.83
http(c) 33315 ( 0.09%) 3016302 ( 0.01%) 90.54
smtp 422 ( 0.00%) 294253 ( 0.00%) 697.28
ftp 145 ( 0.00%) 15424 ( 0.00%) 106.37
dns 208 ( 0.00%) 32032 ( 0.00%) 154.00
bgp 93 ( 0.00%) 15743 ( 0.00%) 169.28
other 539580 ( 1.51%) 807643522 ( 2.91%) 1496.80
udp6 59057 ( 0.17%) 15293974 ( 0.06%) 258.97
dns 55734 ( 0.16%) 14871615 ( 0.05%) 266.83
realaud 1 ( 0.00%) 100 ( 0.00%) 100.00
starcra 1 ( 0.00%) 111 ( 0.00%) 111.00
everque 1 ( 0.00%) 109 ( 0.00%) 109.00
unreal 1 ( 0.00%) 96 ( 0.00%) 96.00
other 3319 ( 0.01%) 421943 ( 0.00%) 127.13
icmp6 25574 ( 0.07%) 3523156 ( 0.01%) 137.76
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 689 ( 0.00%) 673064 ( 0.00%) 976.87
tcpdump file: 201203301815.dump.gz (825.91 MB)