Traffic Trace Info
DumpFile: 201203302015.dump
FileSize: 2375.96MB
Id: 201203302015
StartTime: Fri Mar 30 20:15:00 2012
EndTime: Fri Mar 30 20:30:00 2012
TotalTime: 899.64 seconds
TotalCapSize: 1873.93MB CapLen: 96 bytes
# of packets: 32900325 (24828.86MB)
AvgRate: 231.53Mbps stddev:49.46M
IP flow (unique src/dst pair) Information
# of flows: 1922014 (avg. 17.12 pkts/flow)
Top 10 big flow size (bytes/total in %):
7.3% 4.8% 4.4% 3.0% 2.5% 2.3% 2.0% 1.3% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 1477821
Top 10 bandwidth usage (bytes/total in %):
22.5% 11.3% 10.2% 9.6% 7.5% 4.9% 4.5% 3.7% 3.5% 3.5%
# of IPv6 addresses: 6281
Top 10 bandwidth usage (bytes/total in %):
41.6% 41.6% 27.6% 15.5% 15.0% 15.0% 12.0% 5.5% 2.4% 2.1%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203302015.pktlen.png)
detailed numbers
[ 32- 63]: 5778535
[ 64- 127]: 8080615
[ 128- 255]: 1000984
[ 256- 511]: 870825
[ 512- 1023]: 882574
[ 1024- 2047]: 16286792
Protocol Breakdown
![[protocol breakdown chart]](201203302015.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32900325 (100.00%) 26034946974 (100.00%) 791.33
ip 32564258 ( 98.98%) 25675243440 ( 98.62%) 788.45
tcp 25142297 ( 76.42%) 23002956251 ( 88.35%) 914.91
http(s) 13082215 ( 39.76%) 18036212504 ( 69.28%) 1378.68
http(c) 6022415 ( 18.31%) 894776810 ( 3.44%) 148.57
squid 80430 ( 0.24%) 60068162 ( 0.23%) 746.84
smtp 54888 ( 0.17%) 20237958 ( 0.08%) 368.71
ftp 7571 ( 0.02%) 697591 ( 0.00%) 92.14
pop3 3077 ( 0.01%) 1663721 ( 0.01%) 540.70
imap 1626 ( 0.00%) 417040 ( 0.00%) 256.48
telnet 1463 ( 0.00%) 104117 ( 0.00%) 71.17
ssh 24020 ( 0.07%) 3194194 ( 0.01%) 132.98
dns 2574 ( 0.01%) 197604 ( 0.00%) 76.77
bgp 647 ( 0.00%) 114840 ( 0.00%) 177.50
napster 36 ( 0.00%) 2794 ( 0.00%) 77.61
realaud 34 ( 0.00%) 2527 ( 0.00%) 74.32
rtsp 27170 ( 0.08%) 40335930 ( 0.15%) 1484.58
icecast 463 ( 0.00%) 104991 ( 0.00%) 226.76
hotline 6 ( 0.00%) 366 ( 0.00%) 61.00
other 5833661 ( 17.73%) 3944825042 ( 15.15%) 676.22
udp 3688488 ( 11.21%) 1504894367 ( 5.78%) 408.00
dns 394449 ( 1.20%) 83558370 ( 0.32%) 211.84
rip 1 ( 0.00%) 68 ( 0.00%) 68.00
realaud 401 ( 0.00%) 30644 ( 0.00%) 76.42
halflif 9381 ( 0.03%) 760252 ( 0.00%) 81.04
starcra 27 ( 0.00%) 2728 ( 0.00%) 101.04
everque 1384 ( 0.00%) 995034 ( 0.00%) 718.96
unreal 102 ( 0.00%) 41042 ( 0.00%) 402.37
quake 8 ( 0.00%) 1039 ( 0.00%) 129.88
cuseeme 5 ( 0.00%) 372 ( 0.00%) 74.40
other 3282497 ( 9.98%) 1419457806 ( 5.45%) 432.43
icmp 2283909 ( 6.94%) 234319817 ( 0.90%) 102.60
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1910 ( 0.01%) 644692 ( 0.00%) 337.54
ip6 1429169 ( 4.34%) 928978627 ( 3.57%) 650.01
pim 209 ( 0.00%) 12540 ( 0.00%) 60.00
other 18091 ( 0.05%) 3417876 ( 0.01%) 188.93
frag 1071 ( 0.00%) 898269 ( 0.00%) 838.72
ip6 336065 ( 1.02%) 359703414 ( 1.38%) 1070.34
tcp6 237564 ( 0.72%) 325848964 ( 1.25%) 1371.63
http(s) 5427 ( 0.02%) 5994631 ( 0.02%) 1104.59
http(c) 10810 ( 0.03%) 950710 ( 0.00%) 87.95
squid 12 ( 0.00%) 2840 ( 0.00%) 236.67
smtp 344 ( 0.00%) 219104 ( 0.00%) 636.93
ssh 37653 ( 0.11%) 53986408 ( 0.21%) 1433.79
dns 111 ( 0.00%) 16311 ( 0.00%) 146.95
bgp 83 ( 0.00%) 12385 ( 0.00%) 149.22
other 183124 ( 0.56%) 264666575 ( 1.02%) 1445.29
udp6 66628 ( 0.20%) 28205861 ( 0.11%) 423.33
dns 47458 ( 0.14%) 11584097 ( 0.04%) 244.09
halflif 1 ( 0.00%) 103 ( 0.00%) 103.00
other 19169 ( 0.06%) 16621661 ( 0.06%) 867.11
icmp6 29310 ( 0.09%) 3772067 ( 0.01%) 128.70
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 2451 ( 0.01%) 1861266 ( 0.01%) 759.39
tcpdump file: 201203302015.dump.gz (756.36 MB)