Traffic Trace Info
DumpFile: 201203302045.dump
FileSize: 2632.87MB
Id: 201203302045
StartTime: Fri Mar 30 20:45:00 2012
EndTime: Fri Mar 30 21:00:00 2012
TotalTime: 899.61 seconds
TotalCapSize: -2033.26MB CapLen: 96 bytes
# of packets: 37363685 (28827.97MB)
AvgRate: 268.78Mbps stddev:47.96M
IP flow (unique src/dst pair) Information
# of flows: 1939201 (avg. 19.27 pkts/flow)
Top 10 big flow size (bytes/total in %):
4.9% 2.7% 1.9% 1.5% 1.4% 1.3% 1.2% 1.2% 1.2% 1.2%
IP address Information
# of IPv4 addresses: 1500067
Top 10 bandwidth usage (bytes/total in %):
22.7% 22.4% 8.0% 5.0% 5.0% 3.2% 3.1% 3.1% 2.8% 2.6%
# of IPv6 addresses: 6261
Top 10 bandwidth usage (bytes/total in %):
71.5% 71.5% 13.9% 8.2% 3.3% 2.8% 2.8% 2.2% 1.7% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203302045.pktlen.png)
detailed numbers
[ 32- 63]: 7439389
[ 64- 127]: 8079443
[ 128- 255]: 1089982
[ 256- 511]: 827469
[ 512- 1023]: 1043355
[ 1024- 2047]: 18884047
Protocol Breakdown
![[protocol breakdown chart]](201203302045.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 37363685 (100.00%) 30228319853 (100.00%) 809.03
ip 37113321 ( 99.33%) 30031801161 ( 99.35%) 809.19
tcp 27993192 ( 74.92%) 26158710288 ( 86.54%) 934.47
http(s) 15193908 ( 40.66%) 21299436012 ( 70.46%) 1401.84
http(c) 6687977 ( 17.90%) 763942021 ( 2.53%) 114.23
squid 114513 ( 0.31%) 93467261 ( 0.31%) 816.22
smtp 44163 ( 0.12%) 10341293 ( 0.03%) 234.16
ftp 6874 ( 0.02%) 687420 ( 0.00%) 100.00
pop3 2327 ( 0.01%) 1004277 ( 0.00%) 431.58
imap 1803 ( 0.00%) 183806 ( 0.00%) 101.94
telnet 2005 ( 0.01%) 147170 ( 0.00%) 73.40
ssh 91614 ( 0.25%) 14606466 ( 0.05%) 159.43
dns 1846 ( 0.00%) 131567 ( 0.00%) 71.27
bgp 656 ( 0.00%) 135813 ( 0.00%) 207.03
napster 33 ( 0.00%) 2561 ( 0.00%) 77.61
rtsp 27073 ( 0.07%) 40283844 ( 0.13%) 1487.97
icecast 574 ( 0.00%) 115920 ( 0.00%) 201.95
hotline 48 ( 0.00%) 3893 ( 0.00%) 81.10
other 5817778 ( 15.57%) 3934220964 ( 13.02%) 676.24
udp 5640436 ( 15.10%) 2937963099 ( 9.72%) 520.88
dns 380104 ( 1.02%) 82333708 ( 0.27%) 216.61
realaud 8 ( 0.00%) 1090 ( 0.00%) 136.25
halflif 98 ( 0.00%) 13268 ( 0.00%) 135.39
starcra 23 ( 0.00%) 3344 ( 0.00%) 145.39
everque 646 ( 0.00%) 416830 ( 0.00%) 645.25
unreal 210 ( 0.00%) 122787 ( 0.00%) 584.70
quake 47 ( 0.00%) 4224 ( 0.00%) 89.87
cuseeme 4 ( 0.00%) 578 ( 0.00%) 144.50
other 5014431 ( 13.42%) 2840265818 ( 9.40%) 566.42
icmp 2216588 ( 5.93%) 235237538 ( 0.78%) 106.13
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1861 ( 0.00%) 628078 ( 0.00%) 337.49
ip6 1242275 ( 3.32%) 695874369 ( 2.30%) 560.16
pim 305 ( 0.00%) 18300 ( 0.00%) 60.00
other 18479 ( 0.05%) 3350219 ( 0.01%) 181.30
frag 1092608 ( 2.92%) 828288825 ( 2.74%) 758.08
ip6 250364 ( 0.67%) 196518692 ( 0.65%) 784.93
tcp6 173081 ( 0.46%) 179827518 ( 0.59%) 1038.98
http(s) 9156 ( 0.02%) 11825676 ( 0.04%) 1291.58
http(c) 47586 ( 0.13%) 4101831 ( 0.01%) 86.20
smtp 76 ( 0.00%) 32429 ( 0.00%) 426.70
dns 73 ( 0.00%) 13917 ( 0.00%) 190.64
bgp 87 ( 0.00%) 13428 ( 0.00%) 154.34
other 116103 ( 0.31%) 163840237 ( 0.54%) 1411.16
udp6 48448 ( 0.13%) 12242827 ( 0.04%) 252.70
dns 45792 ( 0.12%) 11714221 ( 0.04%) 255.81
realaud 1 ( 0.00%) 106 ( 0.00%) 106.00
starcra 1 ( 0.00%) 107 ( 0.00%) 107.00
quake 3 ( 0.00%) 344 ( 0.00%) 114.67
cuseeme 1 ( 0.00%) 102 ( 0.00%) 102.00
other 2650 ( 0.01%) 527947 ( 0.00%) 199.23
icmp6 27749 ( 0.07%) 3623143 ( 0.01%) 130.57
ip6 82 ( 0.00%) 11176 ( 0.00%) 136.29
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 973 ( 0.00%) 809812 ( 0.00%) 832.28
tcpdump file: 201203302045.dump.gz (845.76 MB)