Traffic Trace Info
DumpFile: 201203301945.dump
FileSize: 2496.61MB
Id: 201203301945
StartTime: Fri Mar 30 19:45:00 2012
EndTime: Fri Mar 30 20:00:01 2012
TotalTime: 900.76 seconds
TotalCapSize: 1968.91MB CapLen: 96 bytes
# of packets: 34583255 (25788.95MB)
AvgRate: 240.17Mbps stddev:47.68M
IP flow (unique src/dst pair) Information
# of flows: 2081488 (avg. 16.61 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.4% 3.3% 3.3% 2.5% 2.3% 2.3% 2.0% 1.8% 1.6% 1.5%
IP address Information
# of IPv4 addresses: 1581397
Top 10 bandwidth usage (bytes/total in %):
21.3% 14.0% 7.5% 4.8% 4.5% 4.1% 3.9% 3.4% 3.4% 3.3%
# of IPv6 addresses: 6128
Top 10 bandwidth usage (bytes/total in %):
93.1% 77.8% 13.8% 2.1% 2.1% 1.0% 0.7% 0.7% 0.7% 0.4%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203301945.pktlen.png)
detailed numbers
[ 32- 63]: 6435149
[ 64- 127]: 8447368
[ 128- 255]: 1054082
[ 256- 511]: 875108
[ 512- 1023]: 829848
[ 1024- 2047]: 16941700
Protocol Breakdown
![[protocol breakdown chart]](201203301945.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 34583255 (100.00%) 27041673595 (100.00%) 781.93
ip 34113177 ( 98.64%) 26473589429 ( 97.90%) 776.05
tcp 26444090 ( 76.47%) 23566530063 ( 87.15%) 891.18
http(s) 12640987 ( 36.55%) 17105691485 ( 63.26%) 1353.19
http(c) 6381185 ( 18.45%) 936144231 ( 3.46%) 146.70
squid 73626 ( 0.21%) 52668815 ( 0.19%) 715.36
smtp 60472 ( 0.17%) 16356211 ( 0.06%) 270.48
nntp 12 ( 0.00%) 748 ( 0.00%) 62.33
ftp 68844 ( 0.20%) 95711729 ( 0.35%) 1390.27
pop3 2054 ( 0.01%) 677125 ( 0.00%) 329.66
imap 1376 ( 0.00%) 150451 ( 0.00%) 109.34
telnet 2256 ( 0.01%) 163861 ( 0.00%) 72.63
ssh 21890 ( 0.06%) 3753441 ( 0.01%) 171.47
dns 2013 ( 0.01%) 153064 ( 0.00%) 76.04
bgp 659 ( 0.00%) 134310 ( 0.00%) 203.81
napster 314 ( 0.00%) 110650 ( 0.00%) 352.39
realaud 12 ( 0.00%) 1166 ( 0.00%) 97.17
rtsp 1 ( 0.00%) 60 ( 0.00%) 60.00
icecast 513 ( 0.00%) 106762 ( 0.00%) 208.11
hotline 16 ( 0.00%) 996 ( 0.00%) 62.25
other 7187858 ( 20.78%) 5354704838 ( 19.80%) 744.97
udp 3643285 ( 10.53%) 1594836737 ( 5.90%) 437.75
dns 383437 ( 1.11%) 85490961 ( 0.32%) 222.96
realaud 40 ( 0.00%) 5948 ( 0.00%) 148.70
halflif 9403 ( 0.03%) 762182 ( 0.00%) 81.06
starcra 15 ( 0.00%) 1791 ( 0.00%) 119.40
everque 4748 ( 0.01%) 4618557 ( 0.02%) 972.74
unreal 116 ( 0.00%) 71524 ( 0.00%) 616.59
quake 15 ( 0.00%) 1215 ( 0.00%) 81.00
cuseeme 5 ( 0.00%) 790 ( 0.00%) 158.00
other 3245339 ( 9.38%) 1503824568 ( 5.56%) 463.38
icmp 2224155 ( 6.43%) 230735941 ( 0.85%) 103.74
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1812 ( 0.01%) 584184 ( 0.00%) 322.40
ip6 1782496 ( 5.15%) 1078246167 ( 3.99%) 604.91
pim 286 ( 0.00%) 17160 ( 0.00%) 60.00
other 16868 ( 0.05%) 2619907 ( 0.01%) 155.32
frag 875 ( 0.00%) 837949 ( 0.00%) 957.66
ip6 470078 ( 1.36%) 568084166 ( 2.10%) 1208.49
tcp6 383677 ( 1.11%) 539425677 ( 1.99%) 1405.94
http(s) 5509 ( 0.02%) 5992873 ( 0.02%) 1087.83
http(c) 12420 ( 0.04%) 1126282 ( 0.00%) 90.68
squid 740 ( 0.00%) 575115 ( 0.00%) 777.18
smtp 179 ( 0.00%) 119796 ( 0.00%) 669.25
dns 109 ( 0.00%) 19669 ( 0.00%) 180.45
bgp 95 ( 0.00%) 17091 ( 0.00%) 179.91
other 364625 ( 1.05%) 531574851 ( 1.97%) 1457.87
udp6 59078 ( 0.17%) 24586675 ( 0.09%) 416.17
dns 46147 ( 0.13%) 11712874 ( 0.04%) 253.82
everque 4 ( 0.00%) 424 ( 0.00%) 106.00
quake 2 ( 0.00%) 223 ( 0.00%) 111.50
cuseeme 2 ( 0.00%) 222 ( 0.00%) 111.00
other 12923 ( 0.04%) 12872932 ( 0.05%) 996.13
icmp6 26651 ( 0.08%) 3529882 ( 0.01%) 132.45
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 559 ( 0.00%) 526508 ( 0.00%) 941.87
tcpdump file: 201203301945.dump.gz (793.25 MB)