Traffic Trace Info
DumpFile: 201203302030.dump
FileSize: 2449.30MB
Id: 201203302030
StartTime: Fri Mar 30 20:30:00 2012
EndTime: Fri Mar 30 20:45:00 2012
TotalTime: 900.51 seconds
TotalCapSize: 1930.61MB CapLen: 96 bytes
# of packets: 33992607 (26044.33MB)
AvgRate: 242.60Mbps stddev:42.00M
IP flow (unique src/dst pair) Information
# of flows: 1980709 (avg. 17.16 pkts/flow)
Top 10 big flow size (bytes/total in %):
5.8% 3.9% 3.0% 2.2% 2.1% 2.0% 1.9% 1.5% 1.5% 1.3%
IP address Information
# of IPv4 addresses: 1511158
Top 10 bandwidth usage (bytes/total in %):
28.6% 20.3% 8.1% 5.9% 4.0% 3.5% 3.2% 3.1% 3.0% 2.6%
# of IPv6 addresses: 6291
Top 10 bandwidth usage (bytes/total in %):
74.7% 74.7% 11.6% 11.6% 3.8% 2.3% 1.8% 0.9% 0.8% 0.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203302030.pktlen.png)
detailed numbers
[ 32- 63]: 6238007
[ 64- 127]: 7846469
[ 128- 255]: 976960
[ 256- 511]: 918805
[ 512- 1023]: 1044399
[ 1024- 2047]: 16967967
Protocol Breakdown
![[protocol breakdown chart]](201203302030.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33992607 (100.00%) 27309460294 (100.00%) 803.39
ip 33744142 ( 99.27%) 27090030559 ( 99.20%) 802.81
tcp 26668402 ( 78.45%) 24503835683 ( 89.73%) 918.83
http(s) 14593896 ( 42.93%) 20218527479 ( 74.03%) 1385.41
http(c) 6752336 ( 19.86%) 1051952872 ( 3.85%) 155.79
squid 85618 ( 0.25%) 63945920 ( 0.23%) 746.87
smtp 40850 ( 0.12%) 11600523 ( 0.04%) 283.98
nntp 24 ( 0.00%) 1496 ( 0.00%) 62.33
ftp 4753 ( 0.01%) 451429 ( 0.00%) 94.98
pop3 1675 ( 0.00%) 421415 ( 0.00%) 251.59
imap 4247 ( 0.01%) 333210 ( 0.00%) 78.46
telnet 2296 ( 0.01%) 166772 ( 0.00%) 72.64
ssh 148163 ( 0.44%) 29917991 ( 0.11%) 201.93
dns 2582 ( 0.01%) 187645 ( 0.00%) 72.67
bgp 630 ( 0.00%) 114476 ( 0.00%) 181.71
napster 126 ( 0.00%) 8742 ( 0.00%) 69.38
realaud 143 ( 0.00%) 8902 ( 0.00%) 62.25
rtsp 27040 ( 0.08%) 40286739 ( 0.15%) 1489.89
icecast 597 ( 0.00%) 111123 ( 0.00%) 186.14
hotline 8 ( 0.00%) 504 ( 0.00%) 63.00
other 5003418 ( 14.72%) 3085798445 ( 11.30%) 616.74
udp 3358504 ( 9.88%) 1495159064 ( 5.47%) 445.19
dns 390729 ( 1.15%) 83626128 ( 0.31%) 214.03
realaud 13 ( 0.00%) 1184 ( 0.00%) 91.08
halflif 4921 ( 0.01%) 397907 ( 0.00%) 80.86
starcra 11 ( 0.00%) 1262 ( 0.00%) 114.73
everque 1061 ( 0.00%) 594035 ( 0.00%) 559.88
unreal 241 ( 0.00%) 156907 ( 0.00%) 651.07
quake 20 ( 0.00%) 1850 ( 0.00%) 92.50
cuseeme 2 ( 0.00%) 238 ( 0.00%) 119.00
other 2950828 ( 8.68%) 1409605514 ( 5.16%) 477.70
icmp 2230139 ( 6.56%) 234353927 ( 0.86%) 105.08
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 1956 ( 0.01%) 666872 ( 0.00%) 340.94
ip6 1464553 ( 4.31%) 852593965 ( 3.12%) 582.15
pim 258 ( 0.00%) 15480 ( 0.00%) 60.00
other 20146 ( 0.06%) 3386408 ( 0.01%) 168.09
frag 63192 ( 0.19%) 46670595 ( 0.17%) 738.55
ip6 248465 ( 0.73%) 219429735 ( 0.80%) 883.14
tcp6 167804 ( 0.49%) 202942613 ( 0.74%) 1209.40
http(s) 22080 ( 0.06%) 30709220 ( 0.11%) 1390.82
http(c) 27449 ( 0.08%) 2338976 ( 0.01%) 85.21
smtp 257 ( 0.00%) 157606 ( 0.00%) 613.25
dns 286 ( 0.00%) 58193 ( 0.00%) 203.47
bgp 86 ( 0.00%) 14034 ( 0.00%) 163.19
other 117646 ( 0.35%) 169664584 ( 0.62%) 1442.16
udp6 50213 ( 0.15%) 11958975 ( 0.04%) 238.16
dns 46503 ( 0.14%) 11419749 ( 0.04%) 245.57
halflif 2 ( 0.00%) 213 ( 0.00%) 106.50
everque 1 ( 0.00%) 102 ( 0.00%) 102.00
unreal 2 ( 0.00%) 207 ( 0.00%) 103.50
cuseeme 1 ( 0.00%) 106 ( 0.00%) 106.00
other 3704 ( 0.01%) 538598 ( 0.00%) 145.41
icmp6 29704 ( 0.09%) 3908907 ( 0.01%) 131.60
ip6 83 ( 0.00%) 11344 ( 0.00%) 136.67
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 631 ( 0.00%) 603816 ( 0.00%) 956.92
tcpdump file: 201203302030.dump.gz (783.52 MB)