Traffic Trace Info
DumpFile: 201203302000.dump
FileSize: 2219.80MB
Id: 201203302000
StartTime: Fri Mar 30 20:00:01 2012
EndTime: Fri Mar 30 20:15:00 2012
TotalTime: 899.51 seconds
TotalCapSize: 1748.13MB CapLen: 96 bytes
# of packets: 30910688 (22251.19MB)
AvgRate: 207.51Mbps stddev:38.56M
IP flow (unique src/dst pair) Information
# of flows: 2084662 (avg. 14.83 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 3.3% 2.5% 1.9% 1.7% 1.5% 1.4% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 1571898
Top 10 bandwidth usage (bytes/total in %):
17.6% 13.8% 9.1% 4.2% 4.1% 3.4% 3.4% 3.3% 3.0% 2.9%
# of IPv6 addresses: 6248
Top 10 bandwidth usage (bytes/total in %):
82.0% 65.4% 21.8% 3.4% 3.4% 3.3% 3.3% 1.9% 1.9% 1.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203302000.pktlen.png)
detailed numbers
[ 32- 63]: 5964717
[ 64- 127]: 7847406
[ 128- 255]: 979238
[ 256- 511]: 879570
[ 512- 1023]: 744642
[ 1024- 2047]: 14495115
Protocol Breakdown
![[protocol breakdown chart]](201203302000.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 30910688 (100.00%) 23332067420 (100.00%) 754.82
ip 30413862 ( 98.39%) 22870743001 ( 98.02%) 751.98
tcp 22947202 ( 74.24%) 20181166072 ( 86.50%) 879.46
http(s) 11085577 ( 35.86%) 15279430278 ( 65.49%) 1378.32
http(c) 5660113 ( 18.31%) 921541194 ( 3.95%) 162.81
squid 109840 ( 0.36%) 91479878 ( 0.39%) 832.85
smtp 44064 ( 0.14%) 11409402 ( 0.05%) 258.93
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 5722 ( 0.02%) 543741 ( 0.00%) 95.03
pop3 2444 ( 0.01%) 365603 ( 0.00%) 149.59
imap 2659 ( 0.01%) 1536259 ( 0.01%) 577.76
telnet 72333 ( 0.23%) 5338815 ( 0.02%) 73.81
ssh 112816 ( 0.36%) 11547540 ( 0.05%) 102.36
dns 1852 ( 0.01%) 147290 ( 0.00%) 79.53
bgp 647 ( 0.00%) 133520 ( 0.00%) 206.37
napster 42 ( 0.00%) 3252 ( 0.00%) 77.43
realaud 28 ( 0.00%) 2322 ( 0.00%) 82.93
rtsp 21724 ( 0.07%) 32366555 ( 0.14%) 1489.90
icecast 988 ( 0.00%) 133086 ( 0.00%) 134.70
hotline 27 ( 0.00%) 2920 ( 0.00%) 108.15
other 5826317 ( 18.85%) 3825183863 ( 16.39%) 656.54
udp 3673241 ( 11.88%) 1471051667 ( 6.30%) 400.48
dns 400063 ( 1.29%) 85885642 ( 0.37%) 214.68
realaud 317 ( 0.00%) 57124 ( 0.00%) 180.20
halflif 9348 ( 0.03%) 758064 ( 0.00%) 81.09
starcra 31 ( 0.00%) 2850 ( 0.00%) 91.94
everque 2051 ( 0.01%) 1842863 ( 0.01%) 898.52
unreal 139 ( 0.00%) 46749 ( 0.00%) 336.32
quake 33 ( 0.00%) 3693 ( 0.00%) 111.91
cuseeme 2 ( 0.00%) 183 ( 0.00%) 91.50
other 3261111 ( 10.55%) 1382418580 ( 5.92%) 423.91
icmp 2272611 ( 7.35%) 234243406 ( 1.00%) 103.07
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 1976 ( 0.01%) 674240 ( 0.00%) 341.21
ip6 1471033 ( 4.76%) 940125964 ( 4.03%) 639.09
pim 322 ( 0.00%) 19320 ( 0.00%) 60.00
other 47293 ( 0.15%) 43443172 ( 0.19%) 918.60
frag 743 ( 0.00%) 630082 ( 0.00%) 848.02
ip6 496826 ( 1.61%) 461324419 ( 1.98%) 928.54
tcp6 401667 ( 1.30%) 428175463 ( 1.84%) 1066.00
http(s) 10873 ( 0.04%) 13766060 ( 0.06%) 1266.08
http(c) 15441 ( 0.05%) 1335194 ( 0.01%) 86.47
smtp 873 ( 0.00%) 728654 ( 0.00%) 834.66
dns 279 ( 0.00%) 65891 ( 0.00%) 236.17
bgp 91 ( 0.00%) 16886 ( 0.00%) 185.56
other 374110 ( 1.21%) 412262778 ( 1.77%) 1101.98
udp6 65607 ( 0.21%) 28718363 ( 0.12%) 437.73
dns 48762 ( 0.16%) 12194607 ( 0.05%) 250.08
realaud 1 ( 0.00%) 113 ( 0.00%) 113.00
everque 1 ( 0.00%) 159 ( 0.00%) 159.00
unreal 1 ( 0.00%) 102 ( 0.00%) 102.00
quake 2 ( 0.00%) 236 ( 0.00%) 118.00
other 16840 ( 0.05%) 16523146 ( 0.07%) 981.18
icmp6 28720 ( 0.09%) 3758737 ( 0.02%) 130.88
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 717 ( 0.00%) 656228 ( 0.00%) 915.24
tcpdump file: 201203302000.dump.gz (720.24 MB)