Traffic Trace Info
DumpFile: 201203301845.dump
FileSize: 2998.27MB
Id: 201203301845
StartTime: Fri Mar 30 18:45:01 2012
EndTime: Fri Mar 30 19:00:01 2012
TotalTime: 899.97 seconds
TotalCapSize: -1729.77MB CapLen: 96 bytes
# of packets: 41420689 (33474.86MB)
AvgRate: 312.11Mbps stddev:80.75M
IP flow (unique src/dst pair) Information
# of flows: 1850698 (avg. 22.38 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.3% 6.1% 4.0% 2.7% 2.0% 1.5% 1.4% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 1409372
Top 10 bandwidth usage (bytes/total in %):
18.4% 13.6% 13.0% 10.4% 9.6% 9.4% 6.3% 4.2% 3.0% 2.8%
# of IPv6 addresses: 6208
Top 10 bandwidth usage (bytes/total in %):
93.3% 91.2% 1.2% 0.8% 0.6% 0.6% 0.5% 0.4% 0.4% 0.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301845.pktlen.png)
detailed numbers
[ 32- 63]: 7743408
[ 64- 127]: 8587776
[ 128- 255]: 962934
[ 256- 511]: 814175
[ 512- 1023]: 1017808
[ 1024- 2047]: 22294588
Protocol Breakdown
![[protocol breakdown chart]](201203301845.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 41420689 (100.00%) 35100931168 (100.00%) 847.43
ip 41012464 ( 99.01%) 34620336090 ( 98.63%) 844.14
tcp 34180361 ( 82.52%) 32278798350 ( 91.96%) 944.37
http(s) 19604187 ( 47.33%) 27426762359 ( 78.14%) 1399.03
http(c) 8567723 ( 20.68%) 1119908326 ( 3.19%) 130.71
squid 82638 ( 0.20%) 58388370 ( 0.17%) 706.56
smtp 37857 ( 0.09%) 9708280 ( 0.03%) 256.45
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 7782 ( 0.02%) 771736 ( 0.00%) 99.17
pop3 3298 ( 0.01%) 1343972 ( 0.00%) 407.51
imap 1548 ( 0.00%) 261979 ( 0.00%) 169.24
telnet 4194 ( 0.01%) 302842 ( 0.00%) 72.21
ssh 23022 ( 0.06%) 3328070 ( 0.01%) 144.56
dns 2032 ( 0.00%) 160313 ( 0.00%) 78.89
bgp 654 ( 0.00%) 133357 ( 0.00%) 203.91
napster 32 ( 0.00%) 2196 ( 0.00%) 68.62
realaud 14 ( 0.00%) 1244 ( 0.00%) 88.86
rtsp 32 ( 0.00%) 6276 ( 0.00%) 196.12
icecast 23455 ( 0.06%) 15772243 ( 0.04%) 672.45
hotline 67 ( 0.00%) 4515 ( 0.00%) 67.39
other 5821820 ( 14.06%) 3641941898 ( 10.38%) 625.57
udp 3048827 ( 7.36%) 1047387913 ( 2.98%) 343.54
dns 425074 ( 1.03%) 103836466 ( 0.30%) 244.28
rip 2 ( 0.00%) 140 ( 0.00%) 70.00
realaud 6 ( 0.00%) 536 ( 0.00%) 89.33
halflif 25 ( 0.00%) 3049 ( 0.00%) 121.96
starcra 46 ( 0.00%) 6267 ( 0.00%) 136.24
everque 1384 ( 0.00%) 1067131 ( 0.00%) 771.05
unreal 157 ( 0.00%) 64588 ( 0.00%) 411.39
quake 23 ( 0.00%) 2352 ( 0.00%) 102.26
cuseeme 3 ( 0.00%) 564 ( 0.00%) 188.00
other 2621937 ( 6.33%) 942337210 ( 2.68%) 359.40
icmp 2163287 ( 5.22%) 215402545 ( 0.61%) 99.57
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1923 ( 0.00%) 643202 ( 0.00%) 334.48
ip6 1599693 ( 3.86%) 1073722058 ( 3.06%) 671.21
pim 253 ( 0.00%) 15180 ( 0.00%) 60.00
other 17935 ( 0.04%) 4347572 ( 0.01%) 242.41
frag 721 ( 0.00%) 648910 ( 0.00%) 900.01
ip6 408225 ( 0.99%) 480595078 ( 1.37%) 1177.28
tcp6 325716 ( 0.79%) 462563604 ( 1.32%) 1420.14
http(s) 12348 ( 0.03%) 14464411 ( 0.04%) 1171.40
http(c) 11481 ( 0.03%) 1282890 ( 0.00%) 111.74
smtp 1248 ( 0.00%) 955502 ( 0.00%) 765.63
dns 139 ( 0.00%) 21330 ( 0.00%) 153.45
bgp 90 ( 0.00%) 13568 ( 0.00%) 150.76
other 300410 ( 0.73%) 445825903 ( 1.27%) 1484.06
udp6 55259 ( 0.13%) 13912546 ( 0.04%) 251.77
dns 51394 ( 0.12%) 13377320 ( 0.04%) 260.29
realaud 4 ( 0.00%) 439 ( 0.00%) 109.75
halflif 2 ( 0.00%) 219 ( 0.00%) 109.50
unreal 1 ( 0.00%) 109 ( 0.00%) 109.00
other 3858 ( 0.01%) 534459 ( 0.00%) 138.53
icmp6 26490 ( 0.06%) 3514228 ( 0.01%) 132.66
ip6 87 ( 0.00%) 11816 ( 0.00%) 135.82
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 643 ( 0.00%) 588804 ( 0.00%) 915.71
tcpdump file: 201203301845.dump.gz (931.15 MB)